Satellite communications are no longer as secure as assumed

Satellite links are often considered inherently secure due to their distance and specialized infrastructure. In reality, this assumption no longer holds. Sensitive data from critical infrastructure, enterprises, in-flight connectivity, and even government systems is increasingly transmitted over satellite networks without sufficient protection. At the same time, satellite communications are becoming a target for both cyber and geopolitical actors.

The “Don’t Look Up” study reveals just how significant these gaps are. By analyzing 39 satellites, 25 orbital positions, and 411 transponders using low-cost equipment, researchers were able to map real satellite traffic at an unprecedented scale.

The findings highlight a clear concern. Around 50% of GEO satellite links still transmit unencrypted IP traffic. While encryption has long been standard for satellite TV, many IP-based communications lack sufficient link- and network-layer protection. As a result, sensitive data can be exposed.

Encryption gaps in satellite networks

The study further shows that network-layer encryption, such as IPSec, is rarely used in private satellite networks. Unlike the public internet, where TLS is standard, internal satellite communications often remain unprotected.

At the same time, this is not just a theoretical risk. According to Financial Times, Russian satellites have maneuvered close to European communication satellites and may have intercepted or monitored their data traffic, in some cases remaining nearby for weeks. The situation is particularly concerning because some older satellites still rely on unencrypted links, including control and command channels, increasing the risk of exposure.

What this means for organizations and how to secure satellite communications

Taken together, these findings highlight a clear reality: satellite communications are both vulnerable and actively targeted. Organizations relying on GEO satellites may be exposing sensitive data, from operational systems to internal communications, without realizing it. The long-standing assumption that satellite links are inherently secure no longer holds.

This is where Xiphera can make a real difference. With hardware-based, quantum-resistant cryptographic solutions, Xiphera helps satellite operators secure their networks from the ground up.

Xiphera’s portfolio covers the full spectrum of satellite security from Secure Boot and Hardware Root of Trust to AES-256-GCM and post-quantum cryptography, enabling protection across both link and network layers.

Fully hardware-based designs reduce attack surface and ensure reliable operation in space. With Xiphera, satellite operators can protect sensitive data, prevent leaks, and strengthen their systems against current and future threats.

Conclusion

Satellite links can no longer be assumed secure. In a world where both technical vulnerabilities and geopolitical threats are increasing, security must be built in by design, from the ground up.
Learn more about how Xiphera secures satellite systems.

Read the full research here: Don’t Look Up: There Are Sensitive Internal Links in the Clear on GEO Satellites
Read Financial Time article 
here.

×
Semiconductor IP