Australia Issues Cybersecurity Guidance for LEO Satellite Communications

· Original Report (PDF) ↗

Summary

An Australian-led 2026 guide details cybersecurity risks and mitigations for low Earth orbit satellite communications, covering space, ground, user, link and supply-chain security, data management, sovereignty and provider assessments.

Key points

  • The guide was authored by the Australian Signals Directorate’s Australian Cyber Security Centre with Australian, Canadian, New Zealand and US partner agencies.
  • It examines risks across satellite, ground, user and supply-chain components, as well as communication links and data management.
  • Highlighted threats include jamming, spoofing, command injection, compromised credentials, phishing, insecure software and supply-chain tampering.
  • Recommended safeguards include encryption and authentication, MFA, network segmentation, continuous monitoring, patching, incident-response planning and resilient communications.
  • The guidance urges users and providers to plan for post-quantum cryptography and consider secure data handling across borders, including sovereign routing and data localisation.
  • It provides questions organisations can ask providers about security controls, monitoring, supply-chain assurance, compliance and shared responsibilities.

Article Details

Publisher
ASD’s ACSC, Australian Space Agency, Canadian Centre for Cyber Security, NSA, and NCSC-NZ
Report Period
2026
Scope
Cybersecurity risks and mitigation strategies for LEO satellite communications, including space, ground, user, communications-link, supply-chain, and data-management security.
Recommendations
  • Enforce multi-factor authentication, strong access controls, network segmentation, and regular patching.
  • Use strong encryption for communications and stored data, with robust key-management practices.
  • Continuously monitor satellite, ground, and communications-link activity for anomalies.
  • Request software and hardware bills of materials and supplier assurance, including component traceability.
  • Regularly test and update incident-response and continuity plans for satellite-service loss or compromise.

Industries