NASA's Spacecraft Security Flaw Exposed by AI, Highlighting Vulnerability Risks
NASA recently discovered a critical security flaw in its spacecraft communication systems, which had gone unnoticed for three years. The vulnerability was identified by an AI tool developed by the startup AISLE, which found the flaw in the cryptographic library, CryptoLib, used for authenticating commands between Earth and spacecraft. This flaw allowed potential attackers, if they obtained operator credentials, to inject arbitrary commands with full system privileges. Although local access was required to exploit this vulnerability, the risk it posed to NASA's space infrastructure and scientific missions was significant. The AI tool's ability to detect this issue in a matter of days, after human reviews had failed for years, underscores the growing importance of automated systems in managing complex and aging technological infrastructures.