Recent cyber attacks are yet another mirror of the ineffectiveness of the current armed forces organisation Admiral Melo Gomesformer Chief of Staff of the Navy (CEMA) and spokesperson for the Independent Strategic Reflection Group (GREI), which unites nearly all former heads of the Navy, Army and Air Force.
Melo Gomes recalls that “the pseudo-reform of the armed forces, carried out by an incomprehensible PS/PSD agreement, is a year old” and that “it was pointed out for its numerous shortcomings, without any acceptance by the political power. Now the consequences are in sight! Today the situation of the armed forces is undeniably even worse!”.
In just over a month, between mid-August and this week, General Staff of the Armed Forces (EMGFA) it is the Department of National Defense (MDN) were the target of two large-scale cyber attacks.
The first was not detected by the cyber defense system and, as DN reported, it was US intelligence that warned the Portuguese government that exfiltrated NATO-classified documents from the EMGFA and MDN had been exposed on the dark web — a situation military sources have denied.
This week’s attack has already been discovered as it affected the operation of the entire internet at EMGFA and even at the end of the week there were problems with the e-mail. Bee suspected new exfiltration of the documents are still under review.
Both cases are being judicially investigated by the Central Investigation and Criminal Investigation Service (DCIAP), assisted by the Cybercrime Combat Unit of the Judicial Police (PJ).
The first, based on the news from DN, because inform the different entities – National Security Office, EMGFA and Security Information Service – not communicated to the PJ despite this police is part of the “G4” group where all major cyber attacksespecially against the state.
Former CEMA Melo Gomes marks the “continue” decline in herd quantity and quality, leaving the cadres by many of the most prepared. This is due to negative discrimination in salaries and the requirement for military status, which makes it no longer possible to complete garrisons; per insufficient maintenance and investmentfor which it suffices to mention that the revision of the Military Programming Act (LPM) is certainly very late by chance.” “friction through intrusions into the chain of command” operational and administrative”.
The Admiral regrets that all this has taken place “without any consequences with regard to the” public concern expressed by the President of the Republic in his speech on April 25 and in a conflict situation in Europe with consequences that have yet to be clearly explained to the Portuguese”.
“The seriousness of the situation can no longer be covered with the “Diaphanous Cloak of Fantasy”” nor with postponing essential decisions!”, he concludes.
45 million for cyber defense
When asked by the DN about the planned investment for cyber defense, whose budget implementation in 2021, under the LPM, was only 27%, the office of the Minister of Defence, Helena Carreiras underlines that until 2030it is therefore planned in eight years investment of € 45,490,000.00.
Official source says that “in the LPM reviewnegotiated internally in the government, Proposes not only to maintain the cyber defense commitments programmed between 2023 and 2026, but also to strengthen investment in building capabilities in its static and projectable components, for conducting the entire spectrum of military operations in cyberspace by the armed forces and the defense of national defense technological infrastructure”.
The cabinet recalls that “in May, the Minister of National Defense issued a LPM assessment guideline in line with the radical change in the international security environment caused by the Russian invasion of Ukraine”, emphasizing that this “will contribute to the national response to these changesstrengthening investment in new areas of operations, such as cyber defense, and in projects that fill or close gaps in the armed forces system in respecting international commitments”.
In addition, the spokeswoman for Carreiras adds: “the investment in qualified personnel and in platforms to enhance the security and resilience of national defense networks, a priority included in the XXIII Constitutional Government’s Program for National Defense”.
Late training contracts
In this context, she clarifies, the Minister “authorized in August the reinforcement of the staff of the General Secretariat of the MDN for 2023, to be assigned to the development of the activities of the Information Systems Services Department and the Defense Data Center. , realizing the necessary costs for the contracting by EMGFA of training and consultancy services specialised in cyber defense and while driving military operations in and through, cyberspace for Nov 2022-2030”.
On the scope and implementation phase of these measures approved in August (accelerated by the cyber attack?), the MDN has not provided any further information.
However, it is published in Diário da República a order signed by Helena Carreirason 5 August, approving an expenditure of EUR 11.5 million (+VAT) over nine years (2022-2030) for “the hiring of adequate training and consultancy services to ensure the qualification of the human resources allocated to national cyber defense “.
1.6 million euros is planned for this year. However, from what DN learned from Defense sources accompanying the signing, Despite the minister’s permission at the beginning of August, this process has not yet progressed.
The procedure is by prior invitation and will already be three companies were identified, two of them Israeli.
The MDN does not provide an explanation for this delay.
Source: DN
