Post by : Saif
Al-Najjar
The U.S. Army has raised serious concerns about its new battlefield communication system developed by tech companies Anduril and Palantir. According to an internal Army memo, the system has major security weaknesses that make it risky for soldiers and commanders to rely on during operations.
The memo, written by the Army’s chief technology officer in September, says that the system, called NGC2, is vulnerable to hackers and other security threats. NGC2 is designed to connect soldiers, vehicles, sensors, and commanders with real-time information on the battlefield. However, the memo warns that the current prototype version has fundamental flaws that could allow unauthorized access to sensitive data.
“We cannot control who sees what, we cannot see what users are doing, and we cannot verify that the software itself is secure,” the memo said.
The Army labeled the prototype as “very high risk”, meaning that it could be dangerous if adversaries were able to access the system undetected. Gabrielle Chiulli, the Army chief technology officer who authorized the memo, highlighted the possibility of an enemy gaining persistent access without being noticed.
Background on the Project
Anduril, a defense company that also makes drones and software, and Palantir, a data analytics firm, have been awarded Pentagon contracts to modernize the U.S. Army’s communication systems. These companies, along with partners like Microsoft, were chosen because they promised faster, cheaper, and more advanced technology than older military systems. Anduril received $100 million to develop the NGC2 prototype, which has been tested in training exercises.
In March 2025, the Army’s 4th Infantry Division used the system in live-fire artillery exercises at Fort Carson, Colorado. Anduril claimed that NGC2 performed faster and more reliably than older systems. Despite these tests, the internal memo shows that serious problems remain in the system’s security.
Key Security Concerns
The memo identifies several major gaps in the system:
Access Control Problems – Any authorized user can access all applications and data, no matter their security clearance or operational role. This means that sensitive information could be misused without detection.
Lack of Monitoring – The system does not track what users are doing. Without logging, it is difficult to know if data is being accessed or misused.
Third-Party Software Risks – Some applications hosted on NGC2 have not been properly reviewed for security. One application alone had 25 serious code vulnerabilities. Three other applications under review had over 200 vulnerabilities combined.
These weaknesses suggest that the system could be a target for cyber attacks, and the Army is treating the issue very seriously.
Response from the Army
Leonel Garciga, the Army’s chief information officer and Chiulli’s supervisor, said the memo was part of a standard process to identify and fix cybersecurity problems. He emphasized that the Army is working to “triage cybersecurity vulnerabilities” and reduce the risks before fully deploying the system.
Why It Matters
Modern battlefield communication systems are crucial for the safety of soldiers and the effectiveness of military operations. Systems like NGC2 are meant to provide real-time intelligence, coordinate troops, and control drones or vehicles remotely. If hackers or enemies exploit vulnerabilities, it could compromise missions and put lives at risk.
Disclaimer
While Anduril and Palantir’s NGC2 system shows promise for improving battlefield communication, the Army memo reveals that the prototype has serious flaws that need to be addressed. Proper security measures, including access controls, monitoring, and software reviews, are essential before the system can be used in real operations. The Army continues to test the system and work with developers to fix vulnerabilities, but caution remains high due to the potential risks.
English
