· ·

Space War Update Oct 30, 2026: KeyDrift Hack, Cislunar Push

Space War Oct 30: a hacking group targets space and satellite firms, the Air Force plans $30 million for cislunar work and Boeing nears a Space Force deal.

ByPeter
Space war map for Oct 30, 2026 marking Los Angeles, Washington and Beijing
Places named in this report, Oct 29–30, 2026; numbers match the footnotes, and markers are approximate. Map: Peter's World; data: Natural Earth

Key Takeaways: 4 things to know

  1. Cisco Talos said a new hacking group used a patched Cisco flaw to plant key-stealing malware at space companies, defense firms and policy groups (see Adversary Space Activity).
  2. The Air Force Research Laboratory plans to spend $30 million on 15 small business contracts for systems that can operate beyond geosynchronous orbit (see US Space Force & Space Command).
  3. The Space Force plans a sole-source contract worth up to $945.9 million for Boeing to maintain military communications satellites, SpaceNews reported (see Domestic Affairs).
  4. China’s Shenlong space plane, on its fourth mission, is passing over the United States through early November, Space.com reported (see Adversary Space Activity).
Report detailsSpace War Update, Friday, October 30, 2026 · Coverage Oct 29, ~10:00 AM ET to Oct 30, ~11:00 AM ETDetails
  • Publisher: Peter’s World War Room
  • Edition: Space War Update, Friday, October 30, 2026
  • Coverage window: Oct 29, 2026, ~10:00 AM ET to Oct 30, 2026, ~11:00 AM ET
  • Times: ET unless noted
  • Sources: spaceforce.mil, spacecom.mil and war.gov checked first (one new Space Systems Command release; no new space releases from Space Command or war.gov), then specialist space, defense and security outlets
Space war map for Oct 30, 2026 marking Los Angeles, Washington and Beijing.
Places named in this report, Oct 29–30, 2026; numbers match the footnotes, and markers are approximate. Map: Peter’s World; data: Natural Earth

This October 30, 2026 Space War update covers a hacking campaign against space and satellite firms, an Air Force plan to fund work beyond geosynchronous orbit, a planned Boeing satellite contract and China’s space plane passing over the United States.[1] It follows the Oct 29 update; see the War Room for the other theaters.[2]

Adversary Space Activity

KeyDrift campaign

Cisco Talos said a newly identified group it tracks as UAT-11473 exploited a patched flaw in Cisco Catalyst SD-WAN controllers to install KeyDrift, a tool built to steal encryption keys, against space and satellite services, defense firms and policy research groups.[14] Talos assessed “with high confidence” that the tool is designed to provide “long-term persistent access and automated exfiltration of sensitive keying material,” BleepingComputer reported.[15] The flaw, CVE-2026-20127, is a maximum-severity bug that Cisco patched in February 2026.[16] Talos said the group appears to overlap with Volt Typhoon’s “Silent Train” covert access network but made no definitive link.[17] The Information War Update for October 30 covers the same campaign.[18]

China’s space plane

China’s Shenlong spacecraft is on its fourth mission, and skywatchers in the United States may see it between October 30 and early November, Space.com reported, citing the tracking site Heavens-Above.[19] China’s space agency has said only that it is testing technology for “more convenient and affordable round-trip methods for the peaceful use of space.”[20]

Launches & Constellations

Hughes said Space Systems Command awarded it a $42.5 million task order on October 29 to build software that lets military terminals switch traffic among geostationary, medium and low Earth orbit networks.[21] Hughes said the system is meant to reroute data if a link is jammed or disrupted.[22]

US Space Force & Space Command

The Air Force Research Laboratory plans to announce a challenge called Cislunar Prime in December, seek proposals in January and start awarding contracts next spring, Air & Space Forces Magazine reported.[23] The program has $30 million to fund 15 Small Business Innovation Research contracts of $2 million each, covering space domain awareness, communications, and positioning, navigation and timing.[24] The laboratory’s Oracle program plans to launch its first cislunar satellite in December.[25]

Space Systems Command said on October 30 that more than a dozen Space Force program offices met with companies at its Space Enterprise Consortium meeting in Los Angeles on October 20.[26]

Space in Active Wars

No new reports on satellite use in the Russia-Ukraine or Middle East wars were found in the window. The Oct 29 update covers the Pentagon inspector general’s decision on Starlink limits in Ukraine.[27]

Allies & Diplomacy

No new allied space agreements were reported in the window.[28]

Domestic Affairs

The Space Force plans to award Boeing a sole-source contract worth up to $945.9 million to maintain and modernize military communications satellites and ground systems, SpaceNews reported on October 28.[29] The service cited Boeing’s ownership of proprietary technical data and software needed for the work.[30]

War Crimes and Civilian Harm

Allegations are attributed; findings are not established unless stated.

No space-related civilian harm was reported in the window.[31]

Statements by Officials

Quotes
DateSpeakerRole/OrgQuoteContext/TopicSource
2026-10-20Col. Andrew MenschnerSpace Systems Command, deputy commander“We are looking beyond any single satellite, launch, company or contract and building an enterprise that will adapt as threats change”Commercial space industry meetingssc.spaceforce.mil [32]
2026-10-21Maj. Gen. Stephen PurdyUS Space Force, portfolio acquisition executive for advanced programs“I would characterize cislunar as even harder and more difficult, and we really don’t see what’s going on in that arena”Cislunar operationsairandspaceforces.com [33]

What to Watch (Assessment)

  • Whether Cisco Talos or US agencies name the group behind KeyDrift or the victims.
  • Whether the Air Force Research Laboratory announces Cislunar Prime in December as planned.
  • Whether the Boeing satellite contract is finalized.

Seven lenses

Analysis

About the framework

Geography & Strategic Position

Cislunar space, the region past geosynchronous orbit out to the Moon and beyond, is hundreds of thousands of kilometers deep, Air & Space Forces Magazine reported (see US Space Force & Space Command).[3] China’s Shenlong space plane, on its fourth mission, is making passes over the United States between October 30 and early November, Space.com reported.[4]

Military & Security

A hacking group went after the ground networks of space and satellite services as well as defense firms and policy researchers, BleepingComputer reported, citing Cisco Talos (see Adversary Space Activity).[5]

Score 2/5Evidence confidence: MediumTrend: Deteriorating

Alliances & Diplomatic Networks

The Artemis Accords count stands at 78 after Vietnam signed on October 28 (see Allies & Diplomacy).[6]

Economic & Industrial Power

A planned sole-source Boeing deal shows how much the Space Force depends on one firm to keep its communications satellites running, SpaceNews reported (see Domestic Affairs).[7] Hughes said Space Systems Command gave it a $42.5 million task order on October 29 for software to manage military and commercial satellite links across orbits.[8]

Score 3/5Evidence confidence: MediumTrend: Stable

Technology & Critical Infrastructure

Talos said KeyDrift is designed for long-term access to Cisco SD-WAN controllers and for automated theft of encryption keys, BleepingComputer reported.[9] Cisco patched the flaw in February 2026 and urged administrators to apply the updates.[10]

Domestic Politics & Information

Space Systems Command said a record 800 industry and military participants attended its Space Enterprise Consortium meeting in Los Angeles on October 20, where officials laid out upcoming buying plans (see US Space Force & Space Command).[11]

Strategic Leverage & Outcomes

Assessment: The KeyDrift campaign shows that satellite firms’ ground networks are a target, while the Space Force is moving money toward cislunar awareness and resilient communications.[12][13]

Score 2/5Evidence confidence: LowTrend: Stable

Strategic assessment

Relative advantage
The Space Force is drawing heavily on commercial firms, with record industry turnout at its consortium meeting.
Critical vulnerability
Ground networks that run satellite services can be breached through unpatched routers and controllers.
Decisive uncertainty
Who is behind the KeyDrift campaign and what data was taken.
Likely trajectory
More spending on cislunar awareness and on links that can switch between orbits.
Strategic outcome
Not yet determinable.

Analysis by Peter’s World using the Seven Lenses framework. Numbered notes link to the footnotes at the end of this report. Scores, where shown, are judgments, not measurements.

Additional sources

Footnotes

  1. [1] BleepingComputer, “Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware”, https://www.bleepingcomputer.com/news/security/hackers-exploit-cisco-sd-wan-flaw-to-deploy-custom-keydrift-malware/. Published: Oct 29, 2026, 2:38 PM ET. Retrieved: 2026-10-30. Reports Cisco Talos research.
  2. [2] Peter’s World, “Space War Update Oct 29, 2026: China’s Orbital Jammers, Starlink Probe”, https://petersworld.org/space-war-update-oct-29/. Published: Oct 29, 2026. Retrieved: 2026-10-30.
  3. [3] Air & Space Forces Magazine, “AFRL Plans to Award $30M for Cislunar Project Starting Next Spring”, https://www.airandspaceforces.com/afrl-30m-cislunar-operations-project-next-spring/. Published: Oct 29, 2026, 2:57 PM ET. Retrieved: 2026-10-30.
  4. [4] Space.com, “China’s secretive space plane is flying over the US this week — here’s how to see it for yourself”, https://www.space.com/stargazing/chinas-secretive-space-plane-is-flying-over-the-us-this-week-heres-how-to-spot-it. Published: Oct 30, 2026, 7:45 AM ET. Retrieved: 2026-10-30.
  5. [5] BleepingComputer, “Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware”, https://www.bleepingcomputer.com/news/security/hackers-exploit-cisco-sd-wan-flaw-to-deploy-custom-keydrift-malware/. Published: Oct 29, 2026, 2:38 PM ET. Retrieved: 2026-10-30. Reports Cisco Talos research.
  6. [6] Peter’s World, “Space War Update Oct 29, 2026: China’s Orbital Jammers, Starlink Probe”, https://petersworld.org/space-war-update-oct-29/. Published: Oct 29, 2026. Retrieved: 2026-10-30.
  7. [7] SpaceNews, “Boeing to be awarded sole-source deal worth up to $946 million to maintain military satellites”, https://spacenews.com/boeing-to-be-awarded-sole-source-deal-worth-up-to-946-million-to-maintain-military-satellites/. Published: Oct 28, 2026, 12:51 PM ET. Retrieved: 2026-10-30.
  8. [8] SatNews, “Hughes Secures $42.5M Space Systems Command Award for Multi-Orbit Automated EM&C Architecture”, https://satnews.com/2026/10/29/hughes-secures-42-5m-space-systems-command-award-for-multi-orbit-automated-emc-architecture/. Published: Oct 29, 2026. Retrieved: 2026-10-30.
  9. [9] BleepingComputer, “Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware”, https://www.bleepingcomputer.com/news/security/hackers-exploit-cisco-sd-wan-flaw-to-deploy-custom-keydrift-malware/. Published: Oct 29, 2026, 2:38 PM ET. Retrieved: 2026-10-30. Reports Cisco Talos research.
  10. [10] BleepingComputer, “Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware”, https://www.bleepingcomputer.com/news/security/hackers-exploit-cisco-sd-wan-flaw-to-deploy-custom-keydrift-malware/. Published: Oct 29, 2026, 2:38 PM ET. Retrieved: 2026-10-30. Reports Cisco Talos research.
  11. [11] US Space Force, Space Systems Command (ssc.spaceforce.mil), “Space Enterprise Consortium Unites Industry Leaders and Space Force Acquisition Program Offices to Fast-Track National Security Capabilities”, https://www.ssc.spaceforce.mil/Newsroom/Article-Display/Article/4637387/space-enterprise-consortium-unites-industry-leaders-and-space-force-acquisition/. Published: Oct 30, 2026. Retrieved: 2026-10-30.
  12. [12] BleepingComputer, “Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware”, https://www.bleepingcomputer.com/news/security/hackers-exploit-cisco-sd-wan-flaw-to-deploy-custom-keydrift-malware/. Published: Oct 29, 2026, 2:38 PM ET. Retrieved: 2026-10-30. Reports Cisco Talos research.
  13. [13] Air & Space Forces Magazine, “AFRL Plans to Award $30M for Cislunar Project Starting Next Spring”, https://www.airandspaceforces.com/afrl-30m-cislunar-operations-project-next-spring/. Published: Oct 29, 2026, 2:57 PM ET. Retrieved: 2026-10-30.
Show 22 more sources
  1. [14] BleepingComputer, “Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware”, https://www.bleepingcomputer.com/news/security/hackers-exploit-cisco-sd-wan-flaw-to-deploy-custom-keydrift-malware/. Published: Oct 29, 2026, 2:38 PM ET. Retrieved: 2026-10-30. Reports Cisco Talos research.
  2. [15] BleepingComputer, “Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware”, https://www.bleepingcomputer.com/news/security/hackers-exploit-cisco-sd-wan-flaw-to-deploy-custom-keydrift-malware/. Published: Oct 29, 2026, 2:38 PM ET. Retrieved: 2026-10-30. Reports Cisco Talos research.
  3. [16] BleepingComputer, “Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware”, https://www.bleepingcomputer.com/news/security/hackers-exploit-cisco-sd-wan-flaw-to-deploy-custom-keydrift-malware/. Published: Oct 29, 2026, 2:38 PM ET. Retrieved: 2026-10-30. Reports Cisco Talos research.
  4. [17] BleepingComputer, “Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware”, https://www.bleepingcomputer.com/news/security/hackers-exploit-cisco-sd-wan-flaw-to-deploy-custom-keydrift-malware/. Published: Oct 29, 2026, 2:38 PM ET. Retrieved: 2026-10-30. Reports Cisco Talos research.
  5. [18] Peter’s World, “Information War Update Oct 30, 2026: Binance Heist, Leak Case”, https://petersworld.org/information-war-update-oct-30/. Published: Oct 30, 2026. Retrieved: 2026-10-30.
  6. [19] Space.com, “China’s secretive space plane is flying over the US this week — here’s how to see it for yourself”, https://www.space.com/stargazing/chinas-secretive-space-plane-is-flying-over-the-us-this-week-heres-how-to-spot-it. Published: Oct 30, 2026, 7:45 AM ET. Retrieved: 2026-10-30.
  7. [20] Space.com, “China’s secretive space plane is flying over the US this week — here’s how to see it for yourself”, https://www.space.com/stargazing/chinas-secretive-space-plane-is-flying-over-the-us-this-week-heres-how-to-spot-it. Published: Oct 30, 2026, 7:45 AM ET. Retrieved: 2026-10-30.
  8. [21] SatNews, “Hughes Secures $42.5M Space Systems Command Award for Multi-Orbit Automated EM&C Architecture”, https://satnews.com/2026/10/29/hughes-secures-42-5m-space-systems-command-award-for-multi-orbit-automated-emc-architecture/. Published: Oct 29, 2026. Retrieved: 2026-10-30.
  9. [22] SatNews, “Hughes Secures $42.5M Space Systems Command Award for Multi-Orbit Automated EM&C Architecture”, https://satnews.com/2026/10/29/hughes-secures-42-5m-space-systems-command-award-for-multi-orbit-automated-emc-architecture/. Published: Oct 29, 2026. Retrieved: 2026-10-30.
  10. [23] Air & Space Forces Magazine, “AFRL Plans to Award $30M for Cislunar Project Starting Next Spring”, https://www.airandspaceforces.com/afrl-30m-cislunar-operations-project-next-spring/. Published: Oct 29, 2026, 2:57 PM ET. Retrieved: 2026-10-30.
  11. [24] Air & Space Forces Magazine, “AFRL Plans to Award $30M for Cislunar Project Starting Next Spring”, https://www.airandspaceforces.com/afrl-30m-cislunar-operations-project-next-spring/. Published: Oct 29, 2026, 2:57 PM ET. Retrieved: 2026-10-30.
  12. [25] Air & Space Forces Magazine, “AFRL Plans to Award $30M for Cislunar Project Starting Next Spring”, https://www.airandspaceforces.com/afrl-30m-cislunar-operations-project-next-spring/. Published: Oct 29, 2026, 2:57 PM ET. Retrieved: 2026-10-30.
  13. [26] US Space Force, Space Systems Command (ssc.spaceforce.mil), “Space Enterprise Consortium Unites Industry Leaders and Space Force Acquisition Program Offices to Fast-Track National Security Capabilities”, https://www.ssc.spaceforce.mil/Newsroom/Article-Display/Article/4637387/space-enterprise-consortium-unites-industry-leaders-and-space-force-acquisition/. Published: Oct 30, 2026. Retrieved: 2026-10-30.
  14. [27] Peter’s World, “Space War Update Oct 29, 2026: China’s Orbital Jammers, Starlink Probe”, https://petersworld.org/space-war-update-oct-29/. Published: Oct 29, 2026. Retrieved: 2026-10-30.
  15. [28] Peter’s World, “Space War Update Oct 29, 2026: China’s Orbital Jammers, Starlink Probe”, https://petersworld.org/space-war-update-oct-29/. Published: Oct 29, 2026. Retrieved: 2026-10-30.
  16. [29] SpaceNews, “Boeing to be awarded sole-source deal worth up to $946 million to maintain military satellites”, https://spacenews.com/boeing-to-be-awarded-sole-source-deal-worth-up-to-946-million-to-maintain-military-satellites/. Published: Oct 28, 2026, 12:51 PM ET. Retrieved: 2026-10-30.
  17. [30] SpaceNews, “Boeing to be awarded sole-source deal worth up to $946 million to maintain military satellites”, https://spacenews.com/boeing-to-be-awarded-sole-source-deal-worth-up-to-946-million-to-maintain-military-satellites/. Published: Oct 28, 2026, 12:51 PM ET. Retrieved: 2026-10-30.
  18. [31] Peter’s World, “Space War Update Oct 29, 2026: China’s Orbital Jammers, Starlink Probe”, https://petersworld.org/space-war-update-oct-29/. Published: Oct 29, 2026. Retrieved: 2026-10-30.
  19. [32] (statement) US Space Force, Space Systems Command (ssc.spaceforce.mil), “Space Enterprise Consortium Unites Industry Leaders and Space Force Acquisition Program Offices to Fast-Track National Security Capabilities”, https://www.ssc.spaceforce.mil/Newsroom/Article-Display/Article/4637387/space-enterprise-consortium-unites-industry-leaders-and-space-force-acquisition/. Statement made Oct 20, 2026 (Col. Andrew Menschner, SSC deputy commander); published Oct 30, 2026. Retrieved: 2026-10-30.
  20. [33] (statement) Air & Space Forces Magazine, “AFRL Plans to Award $30M for Cislunar Project Starting Next Spring”, https://www.airandspaceforces.com/afrl-30m-cislunar-operations-project-next-spring/. Statement made Oct 21, 2026 (Maj. Gen. Stephen Purdy, Space Force portfolio acquisition executive for advanced programs); published Oct 29, 2026, 2:57 PM ET. Retrieved: 2026-10-30.
  21. [34] Peter’s World, “Space War Update Oct 29, 2026: China’s Orbital Jammers, Starlink Probe”, https://petersworld.org/space-war-update-oct-29/. Published: Oct 29, 2026. Retrieved: 2026-10-30.
  22. [35] Peter’s World, “Seven Lenses of Geopolitical Power”, https://petersworld.org/seven-lenses-of-geopolitical-power/. Published: 2026. Retrieved: 2026-10-30.

Sources

Related coverage

More from the War Room today

Recommended articles