COLORADO SPRINGS, CO, December 18, 2024 — Space Information Sharing and Analysis Center (Space ISAC) is announcing an update in its threat level assessment via a TLP: CLEAR public release. The purpose of this announcement is to raise awareness of the space industry, government, and international partner perspective on the current threat level.

Threat Level Assessment:
In consideration of the current cyber and physical threat landscape for space systems, Space ISAC reaffirms its recommendation to maintain the Threat Level at Level 3: High. This decision is driven by input from Space ISAC’s diverse members and partners—including those from commercial, international, defense, intelligence community, and collective intelligence sectors. In addition, analysts have also identified significant factors contributing to the heightened threat environment within space and related sectors, including:

• Consistent Targeting: Cyber threat actors continue to target owners, operators, manufacturers, and distributors of space system technology.
• Persistent Threats Targeting Critical Infrastructure: Sophisticated threat actors continue to target entities across all major critical infrastructure sectors, with a noted focus on telecommunications organizations.
• Identification of New Groups Within the Cyber Threat Environment: Despite aggressive actions by global law enforcement, the cybercrime landscape continues to be heavily saturated, with new groups rising to the top of the list.
• Geopolitical Events Drive GNSS Interference Activity: Multiple nations have called out hybrid warfare activities associated with regional conflicts and manifesting as cyber-attacks, RF interference, and disinformation campaigns.
• On-Orbit Satellite Activity Correlated to Global Influence Operations: State-sponsored entities continue to conduct satellite maneuvers in tandem with global influence operations targeting other sovereign nations

These factors collectively contribute to a heightened threat environment, aligning with the specified criteria for Level 3: High.

Analysts also note the sophistication of observed threat activity, as threat actors continue to refine tactics, techniques, and procedures (TTPs) and release new malware variants focused on persistent access and defense evasion. As the threat landscape for space continues to evolve, Space ISAC continues to monitor the operational environment and adjust the threat level accordingly.

Recommendations for Members:

• Evaluate account and credential access.
• Implementation of multi-factor authentication (MFA) protocols.
• Implement routine scans for malicious network traffic.
• Ensure regular reviews and patch management of all critical systems.
• Lower reporting thresholds to Space ISAC and appropriate entities.
• Communicate threat messaging to internal staff.
• Space ISAC Members are encouraged to use the member portal to receive timely, actionable threat alerts from the Space ISAC Watch Center.

Space ISAC encourages members to stay informed and proactive in mitigating potential threats to ensure the resilience of space systems and infrastructure.

BACKGROUND
Space Information Sharing and Analysis Center (ISAC) is a 501(c)(6) organization that serves as the all-threats security information source for the public and private space sector. Founded in 2019, Space ISAC became an official member of the National Council of ISACs in 2020. The Space ISAC Watch Center achieved initial operational capability in March 2023.

Space ISAC is located at the Kevin W O’Neil Cybersecurity Research and Education Building at the University of Colorado Colorado Springs. The Space ISAC serves to facilitate collaboration across the global space industry to enhance our ability to prepare for and respond to vulnerabilities, incidents, and threats; to disseminate timely and actionable information among member entities; and to serve as the primary communications channel for the sector with respect to this information. After opening the Watch Center in 2023, member services include support for response, mitigation, and resilience initiatives, while breaking down communication silos of public-private information sharing.

Space ISAC founding members include: Kratos Defense & Security Solutions, Inc. (NASDAQ: KTOS), Booz Allen Hamilton (NYSE: BAH),  MITRE, SES, Lockheed Martin (NYSE: LMT), Northrop Grumman (NYSE: NOC), Purdue University, the Space Dynamics Laboratory, the Johns Hopkins University Applied Physics Laboratory, The Aerospace Corporation, the University of Colorado Colorado Springs, Microsoft,  L3Harris, Deloitte and Capella Space.

Space ISAC establishes partnerships with government agencies for facilitating collaboration to protect the security of the global space industry. Space ISAC government partners include: Department of Homeland Security Cybersecurity Infrastructure Security Agency, U.S. Air Force, U.S. Space Command, US Space Force, Department of State, Federal Bureau-Investigation, Japan Aerospace Exploration Agency (JAXA), Japan Ministry of the Economy, Trade and Industry (METI), Centre National D’Etudes Spatiales (CNES), United Kingdom Space Agency (UKSA), Israel Space Agency, the Greek Ministry of Digital Governance, the Department of Commerce, the National Cyber Director, the National Aeronautics and Space Administration (NASA), IC Commercial Space Council, and National Space Council.