logo
Starlink power cuts reveal vulnerabilities of space-based internet systems

Starlink power cuts reveal vulnerabilities of space-based internet systems

The National9 hours ago
Two major power cuts on Elon Musk's Starlink have shown how vulnerable satellite internet systems can be, especially when compared to the more resilient fibre and mobile networks most people rely on.
Even though these systems, which Jeff Bezos's Amazon is also developing through its Project Kuiper constellation, are helping to revolutionise global connectivity by reaching remote areas, the recent blackouts show they are still prone to disruptions.
Starlink users across several continents lost service in July for more than an hour after a technical issue in the company's network software.
Another power cut on Monday left thousands of customers in North America without internet access until engineers restored the system.
More than 8,000 Starlink satellites operate 550km above Earth. Users connect to them with their own dish, which links to a satellite overhead before the signal is passed to ground stations that plug into the wider internet.
Updated satellites also use laser links to transfer data between each other in space, which helps SpaceX reduce its reliance on ground stations and improve coverage in remote areas and over oceans.
Why are space-based systems less reliable?
Dr Sarath Raj, director of the satellite ground station at Amity University in Dubai, said a Starlink power cut is a reminder of the difference between centralised and decentralised systems.
'Terrestrial networks like fibre and mobile are designed with multiple redundant pathways and local rerouting, so a cut cable or a downed tower typically only affects a limited area,' he told The National.
'Starlink, on the other hand, despite having thousands of satellites, depends heavily on its centralised control software. A single software glitch or misconfigured update can disrupt connectivity worldwide, creating a single point of failure.'
Dr Raj said power cuts in traditional telecoms are usually caused by physical problems such as damaged cables, fallen towers or power failures, which tend to be limited to one area.
But in low-Earth orbit constellations like Starlink, disruptions are more prone to be global and systemic, with the greater risks coming from software glitches or cyber attacks rather than individual satellites.
'The vast number of satellites in Starlink's constellation provides impressive physical coverage, but that alone does not guarantee reliability,' said Dr Raj.
'The real vulnerabilities lie in the ground-based infrastructure and control software, which act as the network's brains.
'Cyber attacks on centralised routing systems, disruptions at ground gateways that link satellites to the global internet, or even exploits in user terminals could all degrade or shut down service on a large scale.'
How important is Starlink?
Starlink was a crucial communications lifeline for Ukraine's military after Russia's invasion, restoring internet access where traditional networks had been destroyed.
But when the service was first activated in 2022, Mr Musk warned it could also be hit by cyber attacks.
Mr Musk posted on X at the time: 'Important warning: Starlink is the only non-Russian communications system still working in some parts of Ukraine, so probability of being targeted is high. Please use with caution.'
Xianbin Wang, research chairman at the Trusted Communications and Computing at Western University, Canada, said low-Earth orbit (Leo) systems are less robust overall.
'As a standalone internet service provider, Leo networks are much less resilient than fibre and mobile networks,' he said.
'Traditional telecom systems are developed with highly redundant capacity and architecture. As a comparison, Leo satellite networks have very limited capacity and redundancy.
'Consequently, the outage probability in such networks is expected to be much higher.'
Dr Raj echoed Mr Wang's comments and said that Starlink does provide 'impressive coverage' but the real vulnerabilities lie in its ground-based infrastructure and control software, which act as the network's 'brains'.
'Cyber attacks on centralised routing systems, disruptions at ground gateways that link satellites to the global internet, or even exploits in user terminals could all degrade or shut down service on a large scale,' he said.
What are the advantages?
Despite these risks, the internet satellites do still fill a crucial gap, especially in remote and conflict-hit areas where terrestrial networks are unavailable.
'The advantage of the satellite communication is its global coverage, including remote but critical areas,' Mr Wang said.
'Depending on the needs and situations, Leo satellite networks could play a critical role.'
Mr Raj said that because of the growing reliance on these systems, internet satellites should be considered part of a country's critical infrastructure.
'Starlink has evolved from an innovative service into a strategic asset, relied upon by remote communities and even militaries in conflict zones such as Ukraine,' he said.
'For this reason, it should be treated as critical infrastructure, similar to power grids, water systems and terrestrial telecom.'
Regulating such a system, however, is complicated because Starlink is a private company serving a global customer base.
'This creates jurisdictional challenges as it is unclear which authorities set the rules and ensure compliance when the service spans multiple countries,' said Dr Raj.
Orange background

Try Our AI Features

Explore what Daily8 AI can do for you:

Comments

No comments yet...

Related Articles

Starlink power cuts reveal vulnerabilities of space-based internet systems
Starlink power cuts reveal vulnerabilities of space-based internet systems

The National

time9 hours ago

  • The National

Starlink power cuts reveal vulnerabilities of space-based internet systems

Two major power cuts on Elon Musk's Starlink have shown how vulnerable satellite internet systems can be, especially when compared to the more resilient fibre and mobile networks most people rely on. Even though these systems, which Jeff Bezos's Amazon is also developing through its Project Kuiper constellation, are helping to revolutionise global connectivity by reaching remote areas, the recent blackouts show they are still prone to disruptions. Starlink users across several continents lost service in July for more than an hour after a technical issue in the company's network software. Another power cut on Monday left thousands of customers in North America without internet access until engineers restored the system. More than 8,000 Starlink satellites operate 550km above Earth. Users connect to them with their own dish, which links to a satellite overhead before the signal is passed to ground stations that plug into the wider internet. Updated satellites also use laser links to transfer data between each other in space, which helps SpaceX reduce its reliance on ground stations and improve coverage in remote areas and over oceans. Why are space-based systems less reliable? Dr Sarath Raj, director of the satellite ground station at Amity University in Dubai, said a Starlink power cut is a reminder of the difference between centralised and decentralised systems. 'Terrestrial networks like fibre and mobile are designed with multiple redundant pathways and local rerouting, so a cut cable or a downed tower typically only affects a limited area,' he told The National. 'Starlink, on the other hand, despite having thousands of satellites, depends heavily on its centralised control software. A single software glitch or misconfigured update can disrupt connectivity worldwide, creating a single point of failure.' Dr Raj said power cuts in traditional telecoms are usually caused by physical problems such as damaged cables, fallen towers or power failures, which tend to be limited to one area. But in low-Earth orbit constellations like Starlink, disruptions are more prone to be global and systemic, with the greater risks coming from software glitches or cyber attacks rather than individual satellites. 'The vast number of satellites in Starlink's constellation provides impressive physical coverage, but that alone does not guarantee reliability,' said Dr Raj. 'The real vulnerabilities lie in the ground-based infrastructure and control software, which act as the network's brains. 'Cyber attacks on centralised routing systems, disruptions at ground gateways that link satellites to the global internet, or even exploits in user terminals could all degrade or shut down service on a large scale.' How important is Starlink? Starlink was a crucial communications lifeline for Ukraine's military after Russia's invasion, restoring internet access where traditional networks had been destroyed. But when the service was first activated in 2022, Mr Musk warned it could also be hit by cyber attacks. Mr Musk posted on X at the time: 'Important warning: Starlink is the only non-Russian communications system still working in some parts of Ukraine, so probability of being targeted is high. Please use with caution.' Xianbin Wang, research chairman at the Trusted Communications and Computing at Western University, Canada, said low-Earth orbit (Leo) systems are less robust overall. 'As a standalone internet service provider, Leo networks are much less resilient than fibre and mobile networks,' he said. 'Traditional telecom systems are developed with highly redundant capacity and architecture. As a comparison, Leo satellite networks have very limited capacity and redundancy. 'Consequently, the outage probability in such networks is expected to be much higher.' Dr Raj echoed Mr Wang's comments and said that Starlink does provide 'impressive coverage' but the real vulnerabilities lie in its ground-based infrastructure and control software, which act as the network's 'brains'. 'Cyber attacks on centralised routing systems, disruptions at ground gateways that link satellites to the global internet, or even exploits in user terminals could all degrade or shut down service on a large scale,' he said. What are the advantages? Despite these risks, the internet satellites do still fill a crucial gap, especially in remote and conflict-hit areas where terrestrial networks are unavailable. 'The advantage of the satellite communication is its global coverage, including remote but critical areas,' Mr Wang said. 'Depending on the needs and situations, Leo satellite networks could play a critical role.' Mr Raj said that because of the growing reliance on these systems, internet satellites should be considered part of a country's critical infrastructure. 'Starlink has evolved from an innovative service into a strategic asset, relied upon by remote communities and even militaries in conflict zones such as Ukraine,' he said. 'For this reason, it should be treated as critical infrastructure, similar to power grids, water systems and terrestrial telecom.' Regulating such a system, however, is complicated because Starlink is a private company serving a global customer base. 'This creates jurisdictional challenges as it is unclear which authorities set the rules and ensure compliance when the service spans multiple countries,' said Dr Raj.

Cybercriminals abuse AI website creation app for phishing
Cybercriminals abuse AI website creation app for phishing

Tahawul Tech

time10 hours ago

  • Tahawul Tech

Cybercriminals abuse AI website creation app for phishing

Proofpoint, a leading cybersecurity and compliance company has released new findings uncovering how cybercriminals are exploiting AI-powered website builders to launch large-scale phishing and fraud campaigns. We are often asked about the impact of AI on the threat landscape. While large language model (LLM) generated emails or scripts have had little impact, some AI tools are lowering the barrier for digital crime. Services that create websites in minutes with AI are being abused by threat actors. Cybercriminals are increasingly using an AI-generated website builder called Lovable to create and host credential phishing, malware, and fraud websites. Proofpoint observed campaigns leveraging Lovable services to distribute multifactor authentication (MFA) phishing kits like Tycoon, malware such as cryptocurrency wallet drainers, and phishing kits targeting credit card and personal information. Lovable is a user-friendly website builder that creates designs using natural language prompts and hosts them on lovable[.]app. While a useful tool for people with limited web design knowledge, Lovable is being exploited by cybercriminals to create websites distributed via phishing attacks. In April 2025, Proofpoint researchers confirmed that they could easily create fake websites impersonating major enterprises without encountering any guardrails. Campaign details Proofpoint has observed hundreds of thousands of Lovable URLs detected as threats each month in email data since February 2025, with increasing frequency each month. Tycoon Phishing Campaigns: In February 2025, Proofpoint identified a campaign that impacted over 5,000 organizations. Messages contained lovable[.]app URLs that directed recipients to a landing presenting a math CAPTCHA which, if solved, redirected to a counterfeit Microsoft authentication page. These sites were designed to harvest user credentials, multifactor authentication (MFA) tokens, and session cookies. Additional campaigns in June 2025 impersonated HR departments with emails about employee benefits, following a similar attack chain. Payment and Data Theft: In June 2025, Proofpoint detected a campaign impersonating UPS. with nearly 3,500 phishing emails. Victims were directed to AI-generated UPS lookalike sites hosted on Lovable, which collected personal and payment information and posted stolen details to Telegram. Because Lovable allows free templates to be reused, even legitimate projects can be cloned and weaponized with a simple prompt. Proofpoint has also observed sites impersonating banks to steal credentials, often using Lovable redirects and CAPTCHAs. Crypto Wallet Drainer Proofpoint has observed campaigns targeting cryptocurrency platforms. In June, nearly 10,000 emails impersonated the DeFi platform Aave. Victims were redirected to Lovable-created websites mimicking Aave, prompting them to connect cryptocurrency wallets. The likely goal was to drain assets from connected wallets. Further investigation Initially Proofpoint observed the Lovable pages being used as redirectors to malicious sites. Further research revealed that credit card harvesters built on Lovable sent stolen data directly to Telegram. Using just one or two prompts, Proofpoint researchers were able to create fully functional phishing sites with deceptive language automatically suggested by the tool. Unlike responsible AI providers that block misuse, Lovable had no such safeguards. Conclusion Some AI tools can significantly lower the barrier for cybercriminals, especially those focused on creating social engineering content to appeal to the end user. Historically, creating phishing websites required time and technical skill. Now, automatic web creation tools allow attackers to focus on scaling their attacks and refining social engineering tactics. Creators of such tools should implement safeguards to prevent exploitation. While legitimate users benefit from these apps, organisations should consider allow-listing policies around frequently abused platforms. Image Credit: Proofpoint

DOWNLOAD THE APP

Get Started Now: Download the App

Ready to dive into a world of global content with local flavor? Download Daily8 app today from your preferred app store and start exploring.
app-storeplay-store