CERT-In warns of cyber threats to satellites, says each new satellite is a 'potential target'

The advisory highlights a range of vulnerabilities, from hackers gaining control of satellites to signal jamming, data breaches, and AI-driven cyberattacks.

One of the most alarming risks is command and control interference, where attackers could "potentially take control of the satellites, redirecting or disabling them", CERT-In said.

The agency also flagged concerns over onboard software vulnerabilities, which could allow attackers to inject malicious code or gain unauthorised access, as well as supply chain attacks, where compromised vendors could expose satellite systems to breaches.

"Malicious actors can jam satellite signals, disrupting communication services. They can also spoof signals, sending false information to mislead or deceive users and systems relying on satellite data. This can lead to significant disruptions in communication and navigation systems," the advisory said.

The advisory also warns about the role of AI in automating attacks, stating that artificial intelligence "can be used to automate attacks, analyse large datasets for vulnerabilities, and create very convincing phishing content".

To counter these risks, CERT-In recommended a series of cybersecurity measures, including multifactor authentication (MFA), encryption of data both in transit and at rest, and regular software updates to patch vulnerabilities.

It also advised implementing Quantum Key Distribution (QKD) for enhanced encryption security, along with network segmentation to isolate critical satellite systems from other networks.

The agency further stresses the need for regular security audits, supply chain risk management, and employee training to reduce the risk of human error in cybersecurity breaches.