German drone maker's update server hacked, disrupting military operations

A German defense contractor that builds reconnaissance drones for Germany's military and for Ukraine has confirmed it was hit by a cyberattack. The incident occurred in late October when 'hostile actors' compromised the company's update distribution server, allowing them to push a malicious software update to customers. The target was Quantum Systems, which makes the Vector/Falke drones and the QBase control software used to plan their missions.

The attack disrupted German military drone operations, forcing a precautionary grounding of Quantum Systems' drones and their exclusion from a recent military exercise. The company believes it was targeted specifically because of its recent announcement of support for Ukraine, highlighting how the European defense industry faces persistent cyberattacks. German military and cybersecurity agencies are now involved in the investigation, underscoring the real-world security risks when critical military supply chains are compromised.