What is satellite cybersecurity?
Satellite cybersecurity encompasses all technical and procedural measures to protect the confidentiality, integrity, and availability of satellite systems against malicious cyber and electronic threats. The attack surface is large and complex: it includes the space segment (the satellite itself), the ground segment (operations centres, gateway stations, network management systems), the user segment (terminals, modems), and all communication links between them.
The Viasat KA-SAT attack
On February 24, 2022 — the day Russia invaded Ukraine — a cyberattack against Viasat's KA-SAT ground infrastructure disrupted satellite broadband services across Europe, disabling tens of thousands of fixed terminals including remote management systems for wind turbines in Germany. The attack used the AcidRain wiper malware to permanently brick modem firmware. This was the highest-profile satellite cyberattack in history and confirmed that satellite systems are legitimate military cyber targets, prompting CISA, ESA, and national space agencies to issue urgent guidance on satellite security hardening.
Key threat vectors
Jamming: Overpowering the satellite's uplink or downlink signal with high-power noise to deny service — the most accessible electronic attack, detectable but difficult to stop. Spoofing: Transmitting false signals mimicking a legitimate satellite (GPS spoofing is used to mislead vessel navigation systems; it has been reported extensively in the Black Sea and Gulf). Command intrusion: Gaining unauthorised access to TT&C links to issue malicious commands — mitigated by cryptographic authentication. Supply chain attacks: Compromising firmware or software during manufacturing or update distribution. Eavesdropping: Intercepting unencrypted satellite communications, particularly on legacy VSAT networks.
Regulatory response
The EU's Network and Information Security Directive 2 (NIS2, 2024) classifies satellite operators as 'essential entities' subject to mandatory cybersecurity risk management and incident reporting. The Space ISAC (Information Sharing and Analysis Center) facilitates threat intelligence sharing among satellite operators. CISA's Space Systems Critical Infrastructure Working Group is developing sector-specific cybersecurity frameworks.