Friday, October 30, 2026
Officials suspect Iran in series of cyberattacks on military base freezers
This is a material new development in the commissary freezer story. Two people familiar with the matter say U.S. officials suspect Iran-linked hackers caused the freezers at about six commissaries to malfunction starting in late August, and they add that the assessment could change. U.S. Cyber Command and DoD law enforcement units are investigating with French authorities. Nobody knows yet how the attackers got into the freezer controls. The Food and Agriculture ISAC has warned that internet-reachable industrial controls are often poorly protected, and the article ties the case to suspected Iranian activity against water treatment controls.
Seller angle A suspected Iranian attack makes this a nation-state campaign against DoD facility systems, which raises the urgency well above a facilities maintenance issue. Lead with Armis: find every internet-exposed building control, refrigeration and HVAC controller across commissaries and installations, and rank them by exposure. Use ServiceNow Security Incident Response and Vulnerability Response to coordinate fixes across DeCA, DLA and installation teams. Veza can show which vendor remote-access and service accounts can reach these controllers. Take this to DeCA, the Army and Navy installation commands, and CYBERCOM's investigating teams now. Ask "how many of these do you have, and who can reach them?"
Navy CTO Justin Fanelli Details IT Modernization, Technology Pilot Strategy
Navy CTO Justin Fanelli said 10 technology pilots have moved into enterprise services or programs of record. About 25 pilots ran in 2025, and dozens more are under way in 2026, with more than two dozen use cases still waiting to be considered. He highlighted "Operation Cattle Drive," which finds and retires redundant, insecure and outdated IT systems. Some vendors pay for pilots themselves to prove their technology is mature, and the Navy then pays only for the remaining work.
Seller angle You can't retire insecure systems you can't see. Armis can provide the inventory of systems and their connections that Cattle Drive needs, and Veza can show which identities still have access to systems scheduled for retirement. ServiceNow can track each system through to retirement. A vendor-funded pilot is the fastest path in. Propose a short Armis/Veza discovery pilot to the Navy CTO's office, measured on Fanelli's criteria: time saved, cost per user and operational resilience.
GDMS secures US Army RDEP-P 2.0 contract
General Dynamics Mission Systems will deliver the Army's Radio Delivery Effects Platform-Portable (RDEP-P) 2.0, a ruggedized, modular host for cyber and electronic warfare missions at the tactical edge. It is built on the CMOSS-aligned Rampart 10 chassis. The contract was awarded in September and covers prototypes, training, open-systems integration and life-cycle support. No value was disclosed.
Seller angle Tactical cyber/EW kits are edge assets that have to be inventoried, configured and patched throughout their life, and operator access to offensive cyber tools has to be tightly controlled. Armis can track these devices, Veza can govern who can use them, and ServiceNow can handle the life-cycle support workflows. Contact the Army's cyber/EW program office (the new PM Cyber Warfare, which also runs Project Griffin) and GDMS about life-cycle support tools.
Pentagon eyes public-private partnerships to help fund FORTRESS America homeland base plan
Dale Marks, Assistant Secretary of Defense for Energy, Installations and Environment, said the Pentagon will use public-private partnerships to pay for FORTRESS America without going back to Congress, and the services are already ranking projects. The plan has five parts: energy independence (including Janus microreactors), supply chain resilience, installation hardening (air-gapped networks, counter-drone systems, underground command posts), 90-day stockpiles, and resilience if satellites or communications are jammed.
Seller angle Every part of FORTRESS adds or depends on operational technology: microgrids, power generation, building controls, counter-drone sensors and isolated networks. Coming right after the suspected Iranian attack on commissary freezers, it gives sellers a funded, multi-year reason to bring in Armis OT/IoT asset discovery and exposure management across installations. Armis can also confirm that "air-gapped" networks really are isolated. ServiceNow can track fixes and readiness at each installation against FORTRESS priorities. Start with Marks's office and the service installation commands.
Salesforce pushes further into defense tech via Rune acquisition
Salesforce agreed to buy Rune Technologies, which makes TyrOS, a logistics and sustainment operating system that works while disconnected and is used by the Army and Marine Corps. The deal is expected to close by January 31. Salesforce will fold Rune into its Missionforce agentic AI offering to tie frontline needs to supply workflows and field-service visibility. Salesforce says all six military branches are customers, including the Army under a potential $5.6B contract.
Seller angle This is a competitive alert. Salesforce is moving into the logistics, field-service and workflow work where ServiceNow competes. Contact Army and USMC sustainment customers now. Pitch ServiceNow as the governed workflow and risk layer, with Armis keeping the asset inventory and Veza controlling who can reach logistics data. Every new edge logistics tool also expands the attack surface, which needs to be inventoried and governed.
Army releases CPE C2IN CSO
ACC-Aberdeen, buying for PdM Wideband Enterprise Satellite Systems under CPE C2IN, posted a Commercial Solutions Opening for an off-the-shelf digital intermediate-frequency (IF) system. The selected vendor would replace legacy analog L-band IF equipment at up to 20 SATCOM teleport sites worldwide. Increment 1 sets the baseline for upgrades in later years, and responses are due Dec. 10 at noon ET.
Seller angle Moving teleports from analog to digital IF turns radio-frequency equipment into networked IP devices at 20 critical sites. Armis can inventory and monitor the new ground-segment devices, and ServiceNow can handle configuration and vulnerability workflows. Partner with the bidding primes so asset visibility is built into Increment 1.
DHS Orders Agencies to Remove Acronis Products From IT Systems
DHS issued a FASCSA exclusion order covering Acronis AG and its affiliates. The order cites the elevated system privileges its backup and security tools hold, and it was published in the Federal Register on Oct. 30. Purchases are barred right away, and agencies have 180 days to remove the products. The IC restricted Acronis in 2025, and GSA has already pulled it from its schedules.
Seller angle Federal civilian agencies, the U.S. Coast Guard among them, now have to find every Acronis install, including ones that came in through vendors or embedded in other products. That is an inventory problem Armis is built for. Veza can show which privileged service accounts the Acronis agents hold so they can be removed cleanly. ServiceNow can track the 180-day removal and the exception requests. USCG is the obvious first conversation.