Critical

NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands

The Hacker News

August 20, 2026 at 11:05 AM

Overview

Security researchers from Cycode have discovered significant vulnerabilities in the AIT-GUI, which is NASA's browser-based operator console for the AMMOS Instrument Toolkit. These flaws allow unauthenticated attackers to send arbitrary commands to spacecraft and instrument command buses. The vulnerabilities, assigned the identifier GHSA-p9r8-2q67-fp86, have a high severity rating of 9.4 on the CVSS scale, indicating they pose a serious risk. This situation is alarming as it could potentially allow unauthorized access to critical spacecraft operations, which could disrupt missions or lead to unintended consequences. Organizations using AIT-GUI should prioritize addressing these vulnerabilities to safeguard their systems.

Key Takeaways

Affected Systems: AIT-GUI, AMMOS Instrument Toolkit
Action Required: Organizations should implement security patches and updates as they become available, and review access controls for the AIT-GUI.
Timeline: Newly disclosed

Original Article Summary

Security researchers at Cycode have disclosed a chain of flaws in AIT-GUI, the browser-based operator console for NASA/JPL's open-source AMMOS Instrument Toolkit, that allow an unauthenticated attacker to issue arbitrary commands to the software's spacecraft and instrument command bus. The chain, tracked as GHSA-p9r8-2q67-fp86 and rated 9.4 on the CVSS v3.1 scoring system, impacts AIT-GUI

Impact

AIT-GUI, AMMOS Instrument Toolkit

Exploitation Status

The exploitation status is currently unknown. Monitor vendor advisories and security bulletins for updates.

Timeline

Newly disclosed

Remediation

Organizations should implement security patches and updates as they become available, and review access controls for the AIT-GUI.

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to Vulnerability, Critical.

Read Original Article

Related Coverage

Managing the cyber risk of agentic AI

All Feed

The article discusses the importance of managing cyber risks associated with autonomous systems, particularly those powered by agentic AI. It emphasizes the need for safeguards, sandboxing, and active oversight to prevent unintended actions by these technologies. As AI systems become more autonomous, there's a growing concern about their potential to operate outside of intended parameters, which could lead to security vulnerabilities or harmful outcomes. By implementing these protective measures, organizations can harness the benefits of AI while minimizing risks to their operations and data security. This is increasingly relevant as more sectors integrate autonomous systems into their workflows.

Aug 20, 2026

AI-Assisted Tool Helped Secure Satellite Communication System After 2022 Russian Hacking

SecurityWeek

After a significant hacking incident attributed to Russian attackers in 2022, Viasat’s satellite communications network faced serious security challenges. To enhance the resilience of this system, Atalanta's Argo product has been deployed. This AI-assisted tool is designed to assess and prove the security strength of Viasat’s communications infrastructure. The use of such technology is crucial, especially considering the ongoing risks to satellite systems that are vital for various sectors, including military and civilian operations. By implementing this tool, Viasat aims to bolster its defenses against future cyber threats, ensuring the reliability of its services.

Aug 20, 2026

ICS Operators Warned of AI-Driven Attacks on Siemens PLCs

Infosecurity Magazine

A recent advisory from the US government has alerted industrial control system (ICS) operators to a new type of threat targeting Siemens S7 Series programmable logic controllers (PLCs). According to the advisory, attackers are using AI-generated scripts to exploit vulnerabilities in these exposed systems. This raises significant concerns for industries relying on these PLCs, as the potential for disruption or damage to critical infrastructure is high. Siemens PLCs are widely used in manufacturing and utilities, making them attractive targets for cybercriminals. Operators are urged to assess their security measures and ensure that their systems are properly protected against these AI-driven attacks.

Aug 20, 2026

New Manic Android malware can exfiltrate data through nearby devices

BleepingComputer

A new Android malware called Manic has emerged, targeting users across several European countries. This malware is particularly concerning because it can exfiltrate data not just through traditional means, but also by leveraging nearby infected devices. This makes it more difficult for users to detect and defend against. Researchers have identified the malware's ability to communicate with other compromised devices, potentially allowing attackers to gather sensitive information from a wider network of victims. This situation raises alarms about the security of Android devices and the need for users to be vigilant about app permissions and device security.

Aug 20, 2026

Police Are Hiding Their Use of Flock Surveillance Cameras

Schneier on Security

In Wapello County, Iowa, a policy regarding the use of Flock license plate reader cameras has come to light, revealing that police are instructed to keep their usage a secret from the public. The policy explicitly directs officers not to mention the Automated License Plate Recognition (ALPR) technology to individuals during stops or in their reports unless absolutely necessary. This raises concerns about transparency and accountability in law enforcement practices. The use of such surveillance tools without public awareness parallels past incidents involving IMSI-catchers, which were similarly concealed. The implications of this secrecy affect public trust and raise questions about the balance between security and individual rights.

Aug 20, 2026

Critical Zimbra RCE flaw now actively exploited in attacks

BleepingComputer

CERT Polska has alerted users that a serious vulnerability in Zimbra Collaboration Suite (ZCS) is currently being exploited by attackers. This flaw allows for remote code execution, which means that unauthorized individuals could potentially take control of affected systems. Organizations using ZCS should be particularly vigilant as this vulnerability poses a significant risk to their data and operations. Users are advised to check for updates and apply any available patches immediately to mitigate the risk. The situation is urgent as the exploitation of this vulnerability is already occurring in the wild, making timely action crucial for affected organizations.

Aug 20, 2026