US Army finds critical cyber threats in Anduril and Palantir's NGC2 control system prototype
The NGC2 platform is a key element of a massive network modernization program designed to provide commanders with faster decision-making on the battlefield.
The NGC2 platform is a key element of a massive network modernization program designed to provide commanders with faster decision-making on the battlefield.
The NGC2 platform is a key element of a massive network modernization program designed to provide commanders with faster decision-making on the battlefield.
The US Army said it has quickly addressed a number of "critical" cyber threats and security flaws discovered in an early prototype of its new Next Generation Command and Control (NGC2) platform, Reuters reported .
The issues were discovered ahead of planned testing and scaling of the NGC2 ecosystem to the divisional level. An internal document dated September 5, signed by the Chief Technical Officer of the Office of the Army Chief Information Officer, Gabriele Ciulli, explicitly pointed to “critical deficiencies in fundamental security controls, processes, and governance” in the current state of the platform.
US Army officials said the problems were immediately fixed.
“We have to build cybersecurity early in the process, and I think that’s what we’ve done,” said Leonel Garciga, the Army’s chief information officer.
Among the identified shortcomings were:
Lack of Role-Based Access Control. This meant that once a user was granted access, they had unlimited access to all applications and data, which contradicted the Pentagon's zero trust principles;
Unhealthy code base for third-party applications;
Critical gaps in basic safety hygiene.
Army officials noted that the measures taken allowed the Ivy Sting experiment to be successfully conducted on September 15 "without delay."
It was previously reported that as part of the partnership, OpenAI will integrate its software into Anduril's anti-drone systems , which detect and shoot down drones.



