Cybersecurity (Cyber Threats & Protection) News

Via Satellite

APIs create a cybersecurity weak point in space-based systems

Application programming interfaces connect software systems and enable users to authenticate across them, making APIs a critical link in space-system cybersecurity. The article characterizes them as an “Achilles heel” that can be easy to hack, underscoring the exposure created at software interfaces.

Paddle Your Own Kanoo

High activity

Amadeus breach compromises 116,000 Finnair bookings; Norwegian also affected

Finnair says unauthorized access to Amadeus systems exposed personal information tied to about 116,000 bookings, making it the seventh major airline disclosed as affected. Amadeus said about 750 bookings were opened for review; Finnair replaced record locators for active reservations and said payment-card data and passwords were not accessed.

Via Satellite

DoD official urges autonomous cyber defenses for military satellites

A senior Defense Department official says the Pentagon and its contractors must embrace autonomous cyber defenses on orbit to keep U.S. military space capabilities functioning during enemy cyberattacks. The warning, delivered at CyberSat, cites the growing threat of AI-powered hacking.

Via Satellite

NRO’s new Cyber Protection Office has 600-plus staff and a $250 million annual budget

The National Reconnaissance Office’s Cyber Protection Office has more than 600 staff and an annual budget of $250 million, Lt. Col. Luke Shibilski told CyberSat attendees. The disclosure comes as the White House warns of attacks accelerated by artificial intelligence, underscoring the security demands facing satellite operators.

Via Satellite

Space CISOs warn Starlink disruption in Ukraine exposes need for clear service terms and sovereign control

Space industry CISOs discussed a service disruption that cut Ukrainian forces off from Starlink and its military variant, Starshield, during combat operations with Russia. Speaking at CyberSat, they called for clearer service terms and greater sovereign control over critical satellite connectivity.

Via Satellite

United pairs defensive AI with Starlink rollout, targeting fleetwide Wi-Fi by end of 2027

United Airlines is deploying defensive artificial intelligence and strengthening cybersecurity operations as it expands in-flight Wi-Fi connectivity across its fleet, CISO Deneen DeFiore said. The rollout is expected to reach the entire fleet by the end of 2027; the report does not specify the AI systems or cybersecurity measures involved.

Via Satellite

Space Force frames orbit as a digital domain where cyber operations are central

The U.S. Space Force sees space not only as a physical environment governed by orbital mechanics, but also as a digital domain, according to its deputy chief strategy officer for cyber and data. The framing underscores the importance of cyber capabilities in how the service understands and operates in space.

Reuters

High activity

Amadeus data breach affects 53,000 Cathay Pacific bookings; Malaysia Airlines also warns customers

Unauthorized access to an Amadeus system used to display travel bookings affected about 53,000 Cathay Pacific bookings, the airline said. Malaysia Airlines separately said customer information may have been exposed in an incident involving the same reservation-technology provider, with potentially affected data processed between August 2023 and September 2026.