Cyber threats targeting the space sector surged in 2025, with 407 identified cyber operations affecting ground-based IT environments of space companies, ground stations, and user modems, but no documented attacks on satellites in orbit. The majority involved hacktivist groups and took the form of DDoS attacks, ransomware, data leaks, and credential theft linked to geopolitical tensions. The lack of detected satellite cyberattacks stems from insufficient onboard detection capabilities, creating a blind spot in threat intelligence. The industry's historical reliance on security by obscurity has eroded due to commercialization and transparency, increasing vulnerability. Moving forward, adopting security by transparency and enhancing satellite-specific cyber threat intelligence are essential to improve detection and defense against space cyber threats.
ICT
12 October 2026