Valley of Depth · Nov 12, 2026 · 43m · 36m saved
With Joe Mazur, VP, Space Account Executive at Nightwing
Frontier AI models can now find and exploit a "zero day" software flaw fast enough that defending a network has become, as Joe Mazur put it, "machine versus machine." Most satellite-security spending still goes toward the spacecraft itself, since it has to launch correctly on a fixed date. Joe Mazur, VP, Space Account Executive at Nightwing, told Mo Islam, Co-Founder & CEO of Payload, on Valley of Depth that the ground systems controlling a satellite are the likelier way in, and the ones that get the least attention.
"It's not something that can happen over days or a week anymore. It's got to happen within hours or even minutes." — Joe Mazur
Joe spent five years at the National Reconnaissance Office building the ground-processing systems that handle data from US spy satellites, and worked early X-37B programs, before joining Nightwing, the roughly 2,000-person cybersecurity contractor built from Raytheon's former cyber unit and now owned by Blackstone.
The full interview is covered here so you can skip it. 43 minutes of audio, 7 minutes of reading.
Here are the 7 takeaways that matter.
Key Takeaways
AI has collapsed the cyber patch cycle to minutes, not weeks
Defenders now have to roll a bad patch back rather than study it while a network is under attack
A former NRO director feared a ground-network attack, not a spacecraft hack
The spacecraft has to launch on a fixed date; the ground can always be fixed later
The Viasat hack made any military-linked satellite a legitimate target
Starlink has absorbed Russian jamming and intrusion attempts and kept flying
Thousands of satellites stop a missile strike but not a cyber one
A compromised on-orbit "boot" process cannot be fixed after launch
Golden Dome's command-and-control network reportedly already works
A continuing resolution running through December 11 is, in Joe's telling, slowing cyber funding
Nightwing wants frontier AI labs as partners, not rivals
The first shot in a real space conflict is more likely cyber than kinetic
1. Minutes, Not Weeks, to Patch
Joe described the old cyber-defense cadence as finished: find a vulnerability, hold meetings, write a plan of action, and patch within two weeks.
AI's growing ability to find exploits is forcing a faster patch cycle
"We know that AI... their capability to find zero days and then exploit them... we're going to get into this machine versus machine [warfare]." — Joe Mazur
That same speed cuts both ways for defenders. A vulnerability now has to be fixed in hours. If the fix is wrong, the move is to roll it back rather than leave a compromised system exposed while engineers study it.
"You can't take down a warfighting system... you've got to be resilient, fight through it, keep the network up." — Joe Mazur
