• A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstrated the leak against Vercel’s live cloud sandboxes, and Vercel confirmed it. The flaw, now tracked as CVE-2026-99999 and nicknamed PwnEscape, is in the Linux kernel’s networking code, not in any one cloud’s setup, so it reaches the shared

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • WASHINGTON—Six anti-war protestors disrupted an autonomous warfare discussion featuring Pentagon chief Pete Hegseth and the military service secretaries Wednesday at the Army’s annual conference. By the time the third protester shouted denouncements of the U.S.-Iran war, some members of the audience had begun chanting “USA, USA.” 

    The politically charged atmosphere isn’t typical at the show. But this year, it served as a contrast for what appeared to be a more prominent international presence than previous years—from the number of international companies represented to the size of the displays.  

    Ukrainian companies made their debut with a massive tent just two blocks from the convention center. Overall, there were 165 international companies and nine international pavilions on the showroom floor, representing Australia, Canada, Denmark, France, Germany, Greece, Israel, Korea, and Norway, the Association of the U.S. Army, or AUSA, told Defense One.  

    The roughly 2,000-member international delegation was about average, representing 92 countries—including 27 army chiefs, 14 sergeants major of the Army, 17 ambassadors, and two ministers of defense, according to AUSA. 

    But the ambassador count this year was also higher, AUSA said. That could be an indication that while political tensions rise, there’s still an appetite for diplomacy—and foreign military sales. 

    Welcome

    You’ve reached the Defense Business Brief, where we dig into what the Pentagon buys, who they’re buying from, and why. Send along your tips, feedback, and song recommendations to lwilliams@defenseone.com. Check out the Defense Business Brief archive here, and tell your friends to subscribe!

    1:1 with Mike Wior, CEO + co-founder of Allen Control Systems. ACS was one of 10 companies to land a counterdrone IDIQ contract with the Pentagon’s Joint Interagency Task Force-401 last month, and things haven’t slowed down since. The company makes a robotic turret, called Bullfrog, that can turn machine guns into a counterdrone weapon using AI and autonomy.

    • “We just got our $500 million IDIQ. We are, obviously, working on getting funds into that as quickly as we can…getting to that point where we can prove on the battlefield, yes this works, and we should be replicating this across all the different services that need this type of capability,” Wior told Defense One during a break from the bustling AUSA conference showfloor.
    • But the lack of a budget could stymie progress the Pentagon is trying to make in cultivating a tech-forward industrial base, he said.
    • “Is the military going to be able to sustain this new ecosystem of defense tech companies? Can companies survive in this environment? What do they need to survive in this environment…when the military ultimately doesn't have full control over their own budgets?” he said. “It's a challenging environment as a startup.”
    • But ACS is still pushing forward with a new facility. 
    • “We just opened a 200,000 square foot facility in North Austin” with the goal of increasing production capacity beyond 50 turrets a month once the orders come in, Wior said. 
    • “Whenever the orders come in, we start to fill out that IDIQ, and we can expand pretty quickly…by leveraging commercial off-the-shelf components, we have a lot of flexibility there, and then it's just a matter of expanding the workforce.” 
    • And they’re eyeing international deals.
    • “We want to see more of an international economy for defense products…and we want to make our technologies available to other countries. Because that's needed, I think, in this environment where if it's just the United States government and they have a two-year appropriations problem, you might lose some really, really great technologies to attrition—just the ability to stay around long enough and participate.”

    Up, up, and away. The Army Space and Missile Defense Agency wants “a family of stratospheric systems,” such as high-altitude balloons, in a range of platform sizes that can provide “space-like capabilities” closer to Earth, Col. Joseph Mroszczyk, who leads the agency’s transformation integration directorate for space superiority, told reporters Wednesday.

    • “From about 60,000 feet to 100,000 feet is what we focus on in the stratosphere. That operational space allows some persistence and broad coverage in an area where you can deliver space-like capabilities in terms of payloads” while also being able to “take advantage of winds that are pushing you where you want to go already…to get either launched effects or other types of payloads for sensing and communications.”
    • The agency hopes to start multiple experiments in the coming year. 

    Bonus: The agency is also “working on a virtual space training environment,” Mroszczyk said. “We're building the virtual space layer to be able to visualize and understand how space effects can play in modern operations.”

    Biodefense prep. The Army wants biothreats to be a routine feature in major military exercises, as outlined in its updated biodefense strategy released last month. 

    • Turning that doctrine into actual readiness requires incorporating biothreats into “big” military exercises where it's “an operational constraint, and the whole of staff has to come to bear against it,” Alison Tamasi, the Army Nuclear and CWMD Agency’s chief of survivability and effects analysis division, told reporters Monday. 
    • “Our next target on the wall is looking toward some of those routine things like [Army warfighter exercises] where we can start to put bio defense in as one of the injects.” 
    • Context: These can be tabletop exercises, typically at the corps level or lower, where commanders and subject-matter experts map out responses to proposed scenarios, such as a viral outbreak at a port. 

    Making moves + other news

    • Anduril will let employees sell shares through a tender offer, bringing the company’s value to about $90 billion. 
    • BAE Systems now has two new counterdrone systems: a multi-domain artillery cannon system and high-power microwave.
    • Leonardo DRS landed a $500 million IDIQ contract with the Pentagon’s counterdrone task force, JIATF-401, for tactical expeditionary sensing tech.  
    • Merlin Aerospace completed the first flight test of its new autonomous pilot, which is being designed to aid in missions like “maritime search and patrol,” the company announced on social media. 
    • The Pentagon signed an agreement with the Small Business Administration to increase access to strategic capital to help “defense-critical manufacturers, suppliers, and innovators.” In the deal, the Pentagon will identify companies that need financing through its Business Operators for National Defense (BOND) initiative and refer potential candidates to SBA. 
    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The raison d’être of the “Concert of Europe,” the preeminent compact between the great powers of the 19th century, was to maintain the balance of power and suppress revolutionary movements. The post-World War II alliance systems sought collective security and deterrence. And the most relevant alliances of the 21st century will be the ones that secure the materials needed for key armaments and new technologies.

    In the first decades after the Cold War, the global economy seemed to settle on a dispensation that was heavily digital, light on assets, and tilted toward “just-in-time” manufacturing. It also leaned on heavily financialized business models that privileged services, software, and ever smaller and faster microprocessors. 

    Then came what American mining entrepreneur Robert Friedland dubbed the “revenge of the miners.” Emerging technologies—starting with electric vehicles and running through data centers and artificial intelligence—required prodigious quantities of material inputs from bulk metals to rare earth elements. And so did modern conflicts, from Russia’s war on Ukraine to the American-Israeli conflict with Iran. 

    The physical economy is back, and with a vengeance. Years of underinvestment and long lead-up times mean that surging global demand will exceed supplies of most critical minerals for the foreseeable future. 

    Further exacerbating the challenge for many countries, especially the United States and its traditional allies, is the dominant position that a single country, China, has painstakingly consolidated in the global production and processing of many critical minerals. It produces up to 98 percent of the world’s processed gallium and germanium, 95 percent of its refined magnesium, more than 90 percent of its rare earths and battery-grade graphite, 80 percent of its cobalt and tungsten, and 70 percent of its titanium. China is even the top producer of several metals that are mostly mined elsewhere.

    The military effects of this commercial advantage are highlighted by this year’s conflict in the Middle East. One study by researchers at the Payne Institute for Public Policy at the Colorado School of Mines looked at the first 96 hours of combat after the war was launched on Feb. 28. In that period, the scholars estimated, U.S. and Israeli forces deployed 5,197 offensive and defensive munitions, consuming some 2,197 kg of cobalt and 11,444 kg of tungsten—materials of which China controls roughly 80 percent of the supply. (Remember that, unlike metals used in buildings or other manufactured good, metals used in armaments get only one use and cannot be readily recovered or recycled.) The much-discussed challenge of replacing the Pentagon’s depleted arsenal is not only about production facilities but about the materials they need. 

    The need to reduce this dependence on a geopolitical competitor was the impetus behind President Trump’s Executive Order 14415. It restricts defense contractors’ use of waivers to source critical minerals and other material inputs from foreign adversaries, expanding oversight over supply chains of subcontractors. It also instructs the Secretary of War to fast-track efforts to identify alternatives and other remedies to supply-chain gaps. 

    Nor is defense materiel the only driver of demand for critical minerals. The AI revolution has turbocharged competition for some two dozen minerals for everything from power infrastructure (prices for copper, for example, hit near-record highs in early September) to transformer cores where grain-oriented electrical steel has been identified as an especially constrained enabling material, while shortages of gallium, germanium, graphite, lithium, cobalt, and rare earths threaten both chip manufacturing and the buildout of data centers.

    The U.S. administration’s concerns about supply-chain vulnerabilities are shared with some of America’s closest allies, with the leaders of the G7 striking an urgent tone in the joint declaration on securing supply chains for critical minerals coming out of their June summit in Évian-les-Bains: “In light of the high degree of market concentration, the need to reduce vulnerabilities regarding those resources and the growing use of arbitrary trade restrictions, we recall the urgency of diversifying our supply chains and building our collective resilience.” Moreover, in a marked departure from the past G7 communiqués on the subject which tended to be long on platitudes and short on substance, the group committed to specific quantifiable targets for reducing its members’ dependence on the unnamed “single supplier outside the G7 and partner countries” whose “use of non-market policies and practices and economic coercion, including arbitrary export restrictions and retaliatory measures on critical minerals and their related dual-use items” threaten the security of G7 to less than 60 percent by 2030 for REEs and permanent magnets and thereafter to half “as soon as possible.”

    This undertaking will not be easy and is only possible as a collective effort to develop resources where they can be found among friends (or, at least, non-adversaries), supporting processing value chains, and incentivizing production through the judicious use of guaranteed offtake agreements. Success for any alliance will be predicated on its expanding the political geography. While Australia, Brazil, and South Korea were included in the G7 discussions this year, noticeably absent was anyone from Africa, the continent being home to one-third of the earth’s mineral resources, including a majority of some key minerals like cobalt, manganese, and the platinum group metals. Success will depend as well on embracing new technologies to increase production. Infrastructure, too, is the key to unlocking bottlenecks in global critical minerals supply chains, while cultivating numbers of qualified personnel is essential to optimizing the transformation of raw ores into high-purity materials as is the availability of reliable, cost-effective energy at massive industrial scale for all the steps from crushing and grinding to chemical separation and thermal refining—all requirements which in turn will shape the composition of alliances for strategic materiel.

    At the start of the Cold War, American journalist Walter Lippmann famously described alliances as resembling chains. Prevailing in the 21st century’s struggle for geopolitical and economic advantage will require forging new links to build a chain that is strong, seamless, and resilient.

    Ambassador J. Peter Pham, former U.S. Special Envoy for the Great Lakes and Sahel Regions of Africa and a distinguished fellow at the Atlantic Council, is Executive Chairman of Ivanhoe Atlantic. 

    This commentary is published in coordination with the 2026 Global Security Forum, of which Defense One is a media partner

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The Department of Transportation has been using artificial intelligence to determine whether grant recipients have ties to adversarial nations, an agency official said on Wednesday. 

    The federal government has taken a variety of steps in recent years to limit hostile foreign governments’ access to American research, including restricting access to individuals or entities connected with countries like Iran or Russia. As the U.S. seeks to maintain its dominance over China in the global tech race, the Trump administration and Congress in particular have also been tightening the rules on collaborating with organizations or scientists who could conceivably share sensitive technologies or information with Beijing. 

    It’s not easy, however, for officials or research institutions to unravel these threads, particularly when bad actors are surreptitiously working on behalf of nation states. But new capabilities could help to better chart these connections. 

    Neil Chaudhry, senior advisor for AI at Transportation, said his agency has worked with partners to create “some really robust AI tools” to analyze the recipients of its research grants. 

    “When we get to a down-select from grants that are some really promising research projects, we sort of do a deep dive on the [principal investigators] in the grant that says … do they have direct links to the [Chinese Communist Party] leadership, or do they have links to Russian oligarchs?” Chaudhry said during a panel at the SAP Public Sector Summit in Washington, D.C.

    “What we don't want to do is go on a fishing expedition,” he said, adding that identifying these kinds of relationships is “not based on the color of their skin and their nationality or something,” but on factors such as whether an individual or entity may be receiving funding from questionable sources.

    “If it's a company that's funded by a [venture capital firm] in Silicon Valley, that VC is probably funded by another VC in the Middle East or in Malaysia, and that VC is then wholly funded by the Chinese industrial bank,” Chaudhry said. “And then when that startup goes out of business, we don't know what just happened to that IP that the U.S. government spent money developing.”

    Transportation did not respond to a request for comment by the time of publication.

    Transportation’s latest AI use-case inventory, which was published earlier this year, does not include the research grant-focused capability. Although other agencies have been using automation or more in-depth analysis tools to identify potential connections to foreign adversaries, Transportation’s use of AI seems to be relatively unique.

    A November 2024 report from the Government Accountability Office found that reviewed agencies had taken a variety of steps to comply with federal requirements mandating that they better identify foreign risks in the Small Business Innovation Research and Small Business Technology Transfer programs. GAO noted that the programs, which were created to allow U.S. small businesses to engage in federally funded R&D, “face risks of foreign actors seeking to illicitly acquire federally funded research and technologies.”

    The watchdog noted at the time that some agencies — like the Air Force, National Science Foundation and NASA — were taking some steps “either to automate the processing of due diligence disclosure forms or support the vetting of applicants and identify associated risks.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Someone built a tool to steal data, then decided it should scare the victim for fun. Yes, that’s an actual feature. And somehow, it fits right in with this week’s security stories. The rest gets interesting in different ways. A small permission can lead to a big theft. A trusted login can hide the wrong person. Old bugs are finding new victims, familiar tools are being put to strange uses, and

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Candiru, an Israeli maker of spyware sold to governments, infected devices at the news network Al Jazeera through ordinary online ads, in attacks that needed no click or other action from the user, researchers at the Citizen Lab said Thursday. The hidden attack code ran the moment an ad loaded on the screen, and in some cases the ad loaded out of sight, in the background. The Citizen

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States (CIS). The activity, observed from June 2025 through August 2026, involves four different infection chains that make use of macro-enabled documents, PS2EXE downloaders, GitHub-hosted PowerShell, and crafted WinRAR archives

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • An misconfigured Vibetech database exposed 13.7 million records from previous breaches, including AT&T, Casio and FBI data, passwords and bank details.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Cisco has warned that attackers are actively exploiting a zero-day flaw in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway. An unauthenticated remote attacker can use it to write arbitrary files and run commands as root on the underlying operating system. The advisory, cisco-sa-esa-afw-zqYJkjxp, says Cisco PSIRT learned of active exploitation in […]

    The post Cisco Warns of Secure Email Gateway 0-Day Vulnerability Actively Exploited in Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Palo Alto Networks has warned that attackers are exploiting a high-severity remote code execution flaw in the PAN-OS management interface. Tracked as CVE-2026-0322, the bug lets an authenticated attacker with network access run arbitrary code with root privileges on the firewall. PAN-OS zero-day vulnerability The flaw is a code injection weakness (CWE-94, CAPEC-242) in the […]

    The post Palo Alto Warns of PAN-OS 0-day Flaw Actively Exploited in Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶