The report highlights high-level cybersecurity risks and mitigation strategies for users of Low Earth Orbit (LEO) satellite communication (SATCOM) systems. The risks and mitigations are detailed through the lens of the space segment comprising the satellites themselves; the ground segment encompassing satellite control centers, ground stations, gateways, and user terminals; the user segment that includes end-user devices, applications, and associated interfaces that connect to LEO SATCOM services; and the communication links and broader supply chain for LEO SATCOM systems.

The CSI suggests numerous mitigation strategies for the space segment and legacy space equipment, including implementing tailored security measures, and using frequency-hopping signals, redundant communication paths, and anti-jam antennas. For the ground segment, continuous monitoring and anomaly detection are essential. The user segment should focus on strengthening endpoint security and enforcing secure access practices.

The report also provides frameworks for maintaining the resilience of critical networks, while offering valuable insights and guidelines for users to understand their roles and responsibilities in securing LEO SATCOM systems.

LEO SATCOM systems improve network resilience and enable emergency communications across both government and private sectors; however, as LEO satellite constellations grow, the attack surface open to adversaries increases, significantly increasing the risk to the system if the correct cybersecurity measures are not applied.

In LEO SATCOM networks, Confidentiality, Integrity, and Availability — known as the CIA triad — are critical to maintaining secure and reliable operations. LEO SATCOM systems face unique challenges due to their distributed architecture and limited physical access to space-based assets. They also rely on radio frequency links that are susceptible to jamming, spoofing, and interception.

Organizations that use LEO SATCOM services are encouraged to review this guidance and adopt the outlined cybersecurity mitigations.

Other agencies co-sealing this CSI are the Canadian Centre for Cyber Security (Cyber Centre), New Zealand National Cyber Security Centre (NCSC-NZ), and Australian Space Agency.

Read the full report here.

Source: NSA

Stay in the know with breaking news from across the IC and IC contracting landscape by becoming a paid subscriber to IC News. Your support makes our work possible.

The post NSA shares LEO SATCOM system risks and mitigations appeared first on Intelligence Community News.

Established in Melbourne, Australia in 2019, CyberCX is one of the largest and most prominent cybersecurity firms in the Asia Pacific region with a highly skilled workforce of approximately 1,400 professionals. The company’s end-to-end services extend across consulting, transformation and managed security services and include advanced capabilities in offensive security and cyber physical security, crisis management, threat intelligence, managed detection and response, as well as strategic advisory, identity, cloud and network security. CyberCX operates a network of advanced security operations centers across Australia and New Zealand, with additional offices in London and New York, combining deep local insight with international reach.

Additionally, CyberCX brings innovative AI-powered platforms that deliver cybersecurity services including detection and response, sovereign secure cloud, CyberCX Academy for training and learning as well as proprietary tools for security testing and cyber intelligence.

This strategic move is timely given Accenture’s recent State of Cybersecurity Resilience 2025 report, which found that 97% of Australian organizations are not adequately prepared to secure their AI-driven future, with 80% lacking the critical data and AI cybersecurity practices needed to protect models, data pipelines and cloud infrastructure.

“CyberCX and Accenture share a mission to harness the power of cyber to help our clients securely navigate change, accelerate business reinvention and build resilience against evolving threats,” said Paolo Dal Cin, global lead, Accenture Cybersecurity. “By combining Accenture’s agentic AI capabilities with CyberCX’s strong market leadership, innovative offerings and trusted C-suite and government relationships, we will enable clients across Asia Pacific to transform cybersecurity into a strategic advantage.”

CyberCX has established strong ecosystem partnerships across major cybersecurity players such as Microsoft, Palo Alto Networks and CrowdStrike, consistently winning awards as one of the top managed service and system integrators in the region. This success is underpinned by extensive expertise, showcased through over 2,600 certifications.

“Client demand for cybersecurity services is accelerating as data and digital environments become increasingly connected and heightened threats are exposed across operational value chains, supply chains and the enterprise. The need for responsible governance is also rising as AI and Quantum technologies advance,” said Peter Burns, who leads Accenture’s business in Australia and New Zealand. “CyberCX’s breadth of capabilities, trusted relationships with government and critical infrastructure organizations, and exceptional talent in the region, combined with Accenture’s local and global scale and innovation, will help us meet this ever-increasing client need.”

John Paitaridis, CEO of CyberCX, said, “We are immensely proud of the business we have built, becoming one of the leading providers of cybersecurity services in the region. Joining Accenture’s global cybersecurity organization enables our exceptional people to combine forces with global capabilities and provide world-leading cybersecurity services to an even greater number of clients across Asia Pacific as we accelerate our growth in the region. Our shared mission for helping clients stay ahead of emerging threats and build resilience makes this a force multiplier.”

Source: Accenture

Stay in the know with breaking news from across the IC and IC contracting landscape by becoming a paid subscriber to IC News. Your support makes our work possible.

The post Accenture to acquire CyberCX appeared first on Intelligence Community News.

The publication details best practices for event logging and threat detection in cloud services, enterprise networks, mobile devices, and operational technology (OT) networks to ensure continued delivery of critical systems. The guidance is for senior information technology (IT) decision makers, operational technology (OT) operators, network administrators, and network operators.

“It is essential for organizations to strengthen their resilience against living off the land techniques that are pervading today’s cyber threat environment,” Dave Luber, NSA cybersecurity director. “Implementing and maintaining an effective event logging solution improves the security and resilience of systems by enabling network visibility and quicker incident response.”

The CSI follows the February 2024 joint-sealed Cybersecurity Technical Report (CTR), “Identifying and Mitigating Living off the Land Techniques,” which sheds light on LOTL techniques and how to identify and protect against advanced persistent threats (APTs) using these techniques.

This publication details four key factors to consider when pursuing logging best practices – enterprise approved logging policy; centralized log access and correlation; secure storage and log integrity; and detection strategy for relevant threats.

Other allies joining ASD ACSC and NSA on the release are the U.S. Cybersecurity and Infrastructure Security Agency (CISA) and Department of Justice (DOJ), the Canadian Center for Cyber Security (CCCS), the New Zealand National Cyber Security Center NCSC-NZ) and CERT NZ, Japan’s National Center of Incident Readiness and Strategy for Cybersecurity (NISC) and JPCERT/CC, the Republic of Korea National Intelligence Services (NIS) and NIS’s National Cyber Security Center (NCSC-Korea) and the Singapore Cyber Security Center (CSA).

Read the full report here.

Source: NSA

IC News delivers the situational awareness you need to get ahead and stay ahead in the IC contracting space. Subscribe today for full access to 10,000+ articles, plus new articles each weekday.

The post NSA releases event logging best practices appeared first on Intelligence Community News.

Since 2017, Palantir has partnered with AUSTRAC to optimize the use of financial data in support of criminal investigations. AUSTRAC builds resilience in the financial system and uses financial intelligence and regulation to disrupt money laundering, terrorism financing, and other serious crimes.

AUSTRAC utilizes Palantir Technologies’ Gotham and Foundry software platforms to integrate and fuse large scale data across their enterprise, driving decisions and operational outcomes.

“We are proud to continue and expand our partnership with AUSTRAC and remain firmly committed to supporting their mission,” said Mike Kelly, head of Palantir Australia. “AUSTRAC personnel are using Palantir’s software to identify national security threats and to detect and disrupt criminal networks – a real contribution to making Australia safer.”

Source: Palantir

Like IC News? Then please consider subscribing. You’ll get full access to our searchable library of 10,000+ articles, plus new articles each weekday.

The post Palantir wins AUSTRAC intel analysis contract appeared first on Intelligence Community News.

“NRO places high priority on partnerships, and these launches reflect the strength of our relationships with Australia and New Zealand,” said NRO Director Dr. Chris Scolese. “Not only are we working together to launch these satellites, we will all benefit from the critical data they collect and deliver. This is an opportunity to build a foundation for even greater collaboration in the future.”

The NROL-162 and NROL-199 missions demonstrate NRO’s capability to launch multiple rockets from overseas locations within weeks of one another. This speed and agility are critical as NRO innovates faster working with government partners to keep the world safe and secure. NRO worked closely with New Zealand Space Agency, which licensed the launch, and Rocket Lab as the launch provider.

“NRO has a long legacy of innovation, and launching two missions in less than one month from an overseas location is yet another example of our progress,” said Col. Chad Davis, NRO’s director of the Office of Space Launch. “We are pushing boundaries to ensure we are making the most efficient and effective use of our resources.”

NROL-162 and NROL-199 launch services were acquired using NRO’s Rapid Acquisition of a Small Rocket (RASR) contract. RASR enables NRO to explore new opportunities for launching small satellites through a streamlined, commercial approach. NROL-162 and NROL-199 were NRO’s third and fourth launches from a Rocket Lab Electron rocket and from New Zealand. The previous Electron launches occurred Jan. 31, 2020 with the NROL-151 mission, and June 13, 2020 with the RASR-2 launch.

Source: NRO

Help IC News continue to bring you breaking news from across the IC and IC contracting landscape. Join our paid subscribers today.

The post NRO and Australia DoD launch NROL-199 appeared first on Intelligence Community News.

NROL-162 is the first of two NRO missions in partnership with the Australian Department of Defence (AUS DoD) scheduled to launch from New Zealand in 9 days. NROL-199 will also launch aboard a Rocket Lab Electron rocket from Mahia Peninsula, currently planned for July 22.

“The NRO works with allies and partners to identify and advance common goals,” said NRO Director Dr. Chris Scolese. “This collaboration with Australia bolsters our partnership and strengthens the foundation for future coordination as we work to secure and expand our intelligence advantage in a competitive space environment.”

The NROL-162 and NROL-199 missions will demonstrate NRO’s capability to launch multiple rockets from overseas locations within days of one another. This speed and agility are critical as NRO innovates faster working with government partners to keep the world safe and secure. NRO worked closely with New Zealand Space Agency, which licensed the launch, and Rocket Lab as the launch provider.

“No launch can succeed without the talent and dedication of the people on the ground,” said Col. Chad Davis, NRO’s director of the Office of Space Launch. “The teams from Rocket Lab and the New Zealand Space Agency demonstrated outstanding skill and dedication in getting this mission into orbit, and I am confident they are up to the challenge of doing it again soon.”

NROL-162 carries a national security payload designed, built, and will be operated by the National Reconnaissance Office in partnership with AUS DoD. NRO missions provide critical information to more than a half-million government users, including every member of the Intelligence Community, two dozen domestic agencies, our nation’s military, lawmakers, and decision makers. NRO capabilities provide the foundation for America’s advantage and strength in space.

NROL-162 & 199 launch services were acquired using NRO’s Rapid Acquisition of a Small Rocket (RASR) contract. RASR enables the NRO to explore new opportunities for launching small satellites through a streamlined, commercial approach. The first two launches under the RASR contract flew from New Zealand in 2020.

Source: NRO

Stay in the know with breaking news from across the IC and IC contracting landscape by becoming a paid subscriber to IC News. Your support makes our work possible.

The post NRO and Australia DoD launch NROL-162 appeared first on Intelligence Community News.

The follow-up program, NICSAT2, will see Spire designing, building, and launching the company’s Low Earth Multi-Use Receiver (LEMUR), a 6U satellite platform, with the capability of on-board computing and processing of machine learning and artificial intelligence across multi-modal data. Dragonfly Aerospace will provide a high-performance Gecko camera using its proprietary space-proven electronics and ruggedized optics for an easy-to-integrate imaging solution for the satellite.

The Australian National Intelligence Community (NIC) launched the NICSAT program to experiment with commercial satellite technologies, including the on-board application of advanced machine learning capabilities on small satellites, like those manufactured by Spire. In keeping with its predecessor, NICSAT2 will be managed by ONI and focused on the application and utility of miniaturized satellite systems, especially in regard to machine learning. Both programs are unclassified science and technology programs, focused on innovative engineering and research that aim to utilize commercial satellites to improve data collection and analysis.

With the large influx of data sent to Earth, corporations, governments, and other organizations increasingly need advanced systems and processes to efficiently understand the data received. Artificial Intelligence (AI)-assisted processing within satellites allows operators to unburden ground stations and other infrastructure and focus resources on analyzing mission-critical information in space. ONI recognizes the potential application of semi-supervised or unsupervised learning methods for in orbit autonomous machine learning to, amongst other things, enable autonomous sensor operations, speed analytics and data processing, reduce downlink requirements, and better enable human analysts.

Spire previously worked on the NICSAT program’s first satellite, Djara, last year. The mission focus of Djara is to conduct experiments with systems that enable the on-orbit collection and analysis of data including commercially available sensors and technologies such as Field Programmable Gate Arrays (FPGAs) and Machine Learning systems on a chip. The satellite went from concept to launch in just six months and to full operation in just nine months. Djara collects and processes data on orbit and then leverages Spire’s cloud infrastructure to downlink, further process, and analyze data.

“The success of Djara and the NICSAT program show the significant value of small satellites for rapid deployment of leading-edge innovations and on-orbit data analysis,” said Theresa Condor, Chief Operating Officer at Spire Global. “With our continued work on NICSAT2, Spire and Dragonfly Aerospace reaffirm the importance of public-private partnerships for dual-use space technologies.”

“Dragonfly Aerospace’s Gecko camera will elevate the satellite’s imaging capabilities and improve the image quality sent back to the ONI,” said Bryan Dean, CEO of Dragonfly Aerospace. “Spire’s proven success with NICSAT made them an ideal partner to continue to support the Australian government and we look forward to working together.”

Source: Spire

Help IC News continue to bring you breaking news from across the IC and IC contracting landscape. Join our paid subscribers today.

The post Spire and Dragonfly Aerospace partner to support Australian Office of National Intelligence appeared first on Intelligence Community News.

Maxar’s 3D data suite—created from the company’s industry-leading, highly accurate satellite imagery—enhances situational awareness and decision-making for military applications. The 3D data suite includes a 3D Surface Model, which provides a high-fidelity, positionally accurate and photorealistic view of terrain and surface features and textures. The suite’s Digital Terrain Model product is a bare Earth elevation data layer generated with fully automated processing and delivered at speeds far beyond traditional technologies.

“Maxar’s high-resolution 3D data and satellite imagery are integral for high-confidence mapping, planning and operational support, which can help end users make better decisions and save lives, resources and time,” said Tony Frazier, Maxar’s executive vice president of global field operations. “Maxar is proud to expand our partnership with the Australian Department of Defence by providing our newest 3D data products.”

With these latest contracts, Australia—a key U.S. ally and member of the Five Eyes intelligence alliance—demonstrates the increased adoption of commercial satellite imagery and derived data products for critical national defense and intelligence missions. The Australian Department of Defence has been a Maxar Direct Access Program partner since 2018, with the ability to directly task and download satellite imagery from Maxar’s current constellation in real-time to its ground station.

Source: Maxar

The post Maxar products to support Australia’s national security appeared first on Intelligence Community News.

Both nations recently signed a Cyber Training Capabilities Project Arrangement, November 3– this bilateral, international agreement enables U.S. Cyber Command to incorporate Australian Defence Force feedback into USCYBERCOM’s simulated training domain, the Persistent Cyber Training Environment.

The PCTE is a cyber training platform for real-world defensive missions across boundaries and networks; its shared use and development will constantly evolve it and sharpen readiness in cyber tactics, techniques, and procedures.

“This project arrangement is a milestone for U.S.-Australian cooperation. It is the first cyber-only arrangement established between the U.S. Army and an allied nation, which highlights the value of Australia’s partnership in the simulated training domain,” said Elizabeth Wilson, the U.S. signatory and Deputy Assistant Secretary of the Army for Defense Exports and Cooperation. “To counter known and potential adversarial threats, the Army has recalibrated our strategic thinking; we’ve made smart decisions to refocus our efforts to invest in the new, emerging and smart technologies that will strengthen our ability to fight and win our nation’s wars.”

Previously, U.S. and allied cyber forces developed cyber training ranges for specific scenarios that would be used once, a process that could take months. Now, PCTE offers a collaborative training environment, enabling cyber forces around the world to develop and re-use already-existing content and train at the individual and group levels anytime.

“Australia and the U.S. have a strong history of working together to develop our cyber capabilities and train our people to fight and win in cyberspace,” said Australian Army Maj. Gen. Marcus Thompson, the Australian signatory and head of Information Warfare for the Australian Defence Force. “This arrangement will be an important part of the ADF’s training program, and we look forward to the mutual benefits it will bring.”

Partnerships in cyberspace are key to generating and sharing insights of threat actors, enabling mutual defense against cyber attacks, and conducting the operational training necessary to hold adversaries accountable in cyberspace– and such training platforms enable lethal cyber mission forces in defense of U.S. and allied interests.

“Agreements like this one are crucial to the efficiency of our joint modernization,” Wilson said. “They lay the framework for our mutual growth, allowing us to become stronger and more interoperable as allies.”

Source: U.S. Cyber Command

The post US and Australia sign first-ever virtual training cyber agreement appeared first on Intelligence Community News.

The MQ-4C Triton is a cooperative development program between the Royal Australian Air Force and the U.S. Navy, and provides a round-the-clock maritime wide-area intelligence, surveillance and reconnaissance capability. Operating at altitudes exceeding 50,000 feet, Triton can cover more than 2 million square miles of ocean and littorals in a single flight, bringing unprecedented awareness to operational commanders’ common operating pictures.

“As a strategic partner in the cooperative development program, Australia is a critical part of Triton’s development and production,” said Doug Shaffer, vice president, Triton programs, Northrop Grumman. “This game-changing system will boost Australia’s ISR capability and enable them to meet their surveillance needs to manage the world’s third largest exclusive economic zone.”

In addition to the aircraft, Australia has also committed funds for the main operating base at RAAF Edinburgh in South Australia and a forward operating base at RAAF Tindal in the Northern Territory. The main operating base allows for a permanent control station while the forward operating base enables deployment of the Triton system to support Australian national security requirements. The U.S. Navy – with a program of record for 68 aircraft – is planning five operational Triton orbits around the globe. Australia, as one of the United States’ key allies and a strategic partner in the Pacific, would be able to provide a sixth.

Source: Northrop Grumman

The post Australia orders third MQ-4C Triton appeared first on Intelligence Community News.