Update 1 to CISA Alert AA22-076A – Strengthening cybersecurity of SATCOM network providers and customers.

The US government attributes cyberattacks on satellite communication (SATCOM) networks to Russian state-sponsored malicious cyber actors. The FBI and CISA are aware of possible threats to US and international SATCOM networks. Intrusions into SATCOM networks could create risk in customer environments.

AA22-076A Alert, Technical Details, and Mitigations

Attribution of Russia’s Malicious Cyber Activity Against Ukraine

CISA Shields Up Technical Guidance

NSA Cybersecurity Advisory: Protecting VSAT Communications 

NSA Cybersecurity Tech-Rep: Network Infrastructure Security Guidance

Annual Threat Assessment of the U.S. Intelligence Community, February 2022

CISA Tip: Choosing and Protecting Passwords 

CISA Capacity Enhancement Guide: Implementing Strong Authentication

All organizations should report incidents and anomalous activity to CISA’s 24/7 Operations Center at central@cisa.dhs.gov or (888) 282-0870 and to the FBI via your local FBI field office or the FBI’s 24/7 CyWatch at (855) 292-3937 or CyWatch@fbi.gov.