Space ISAC Issues TLP: CLEAR Public Release on Threat Level Assessment 

COLORADO SPRINGS, CO, June 6, 2024 — Space Information Sharing and Analysis Center (Space ISAC) is announcing an update in its threat level assessment via a TLP: CLEAR public release. The purpose of this announcement is to raise awareness of the space industry, government, and international partner perspective on the current threat level. 

Threat Level Assessment: 

Considering recent developments and ongoing cyber and physical threats to space systems, Space ISAC reaffirms its recommendation to maintain the Threat Level at Level 3: High. This decision is informed by input from Space ISAC’s diverse members and partners—including those from commercial, international, defense, intelligence community, and collective intelligence sectors—and analysts have identified several factors contributing to the heightened threat environment within space and related sectors, including: 

• Consistent Targeting: Cyber threat actors continue to target owners, operators, manufacturers, and distributors of space system technology. 
• Nation State Actors: State-sponsored actors have demonstrated sophisticated cyber and electronic warfare (EW) capabilities, including radio frequency (RF) jamming to disrupt, deny, and degrade space assets. 
• Proliferation of Counterspace Capabilities: Adversary nations continue to bolster their military space and counterspace capabilities through recent satellite launches.  
• Evolution of Cyber Threat Landscape: Cyber threat actors continue to employ advanced techniques focused on persistence and defense evasion, while continuously forming new threat groupings.  
• Exploitation of Critical Vulnerabilities: Threat groups continue to leverage zero-day vulnerabilities in commonly used software and open-source repositories to gain initial access to victim networks.  
• Space Weather Impacts: Current and ongoing solar weather patterns have impacted both terrestrial and space infrastructure, affecting communications services and multiple critical infrastructure sectors.  

These factors collectively contribute to a heightened threat environment, aligning with the specified criteria for Level 3: High. 

Additionally, analysts highlight the continued sophistication of threat actor Tactics, Techniques, and Procedures (TTPs), the breadth of their targeting scope, and the significant impact of their cyber campaigns. Space ISAC remains vigilant, committed to monitoring the operational environment, and adjusting the threat level as necessary. 

Recommendations for Members: 

• Evaluate account and credential access. 
• Implement routine scans for malicious network traffic. 
• Ensure regular reviews and patch management of all critical systems. 
• Lower reporting thresholds to Space ISAC and appropriate entities. 
• Communicate threat messaging to internal staff. 
• Space ISAC Members are encouraged to use the member portal to receive timely, actionable threat alerts from the Space ISAC Watch Center.  

Space ISAC encourages members to stay informed and proactive in mitigating potential threats to ensure the resilience of space systems and infrastructure. 

BACKGROUND 

Space Information Sharing and Analysis Center (ISAC) is a 501(c)(6) organization that serves as the all-threats security information source for the public and private space sector. Founded in 2019, Space ISAC became an official member of the National Council of ISACs in 2020. The Space ISAC Watch Center achieved initial operational capability in March 2023. 

Space ISAC is located at the Kevin W O’Neil Cybersecurity Research and Education Building at the University of Colorado Colorado Springs. The Space ISAC serves to facilitate collaboration across the global space industry to enhance our ability to prepare for and respond to vulnerabilities, incidents, and threats; to disseminate timely and actionable information among member entities; and to serve as the primary communications channel for the sector with respect to this information. After opening the Watch Center in 2023, member services include support for response, mitigation, and resilience initiatives, while breaking down communication silos of public-private information sharing. 

Space ISAC founding members include: Kratos Defense & Security Solutions, Inc. (NASDAQ: KTOS), Booz Allen Hamilton (NYSE: BAH),  MITRE, SES, Lockheed Martin (NYSE: LMT), Northrop Grumman (NYSE: NOC), Purdue University, the Space Dynamics Laboratory, the Johns Hopkins University Applied Physics Laboratory, The Aerospace Corporation, the University of Colorado Colorado Springs, Microsoft,  L3Harris, Deloitte and Capella Space. 

Space ISAC establishes partnerships with government agencies for facilitating collaboration to protect the security of the global space industry. Space ISAC government partners include: Department of Homeland Security Cybersecurity Infrastructure Security Agency, U.S. Air Force, U.S. Space Command, US Space Force, Department of State, Federal Bureau-Investigation, Japan Aerospace Exploration Agency (JAXA), Japan Ministry of the Economy, Trade and Industry (METI), Centre National D’Etudes Spatiales (CNES), United Kingdom Space Agency (UKSA), Israel Space Agency, the Greek Ministry of Digital Governance, the Department of Commerce, the National Cyber Director, the National Aeronautics and Space Administration (NASA), IC Commercial Space Council, and National Space Council.