Quantum Systems QBase malware in update — German Bundeswehr drones grounded then cleared to fly
Severity: medium · Patch status: no-fix-needed · Since 2026-11-13
Quantum Systems, a German drone maker supplying Ukraine's war effort, detected a cyberattack in late October 2026 in which malware was delivered via an update to its QBase ground-control software. Per Der Spiegel, the malicious update reportedly reached servers belonging to the German Bundeswehr and other customers, though the drones themselves were not directly infected. The Bundeswehr grounded its Quantum Systems fleet as a precaution—the only customer to do so—and lifted the grounding after the company said the threat was contained by its IT and security teams working with authorities, stating there is no risk in operating the unmanned systems. Few details of the intrusion were disclosed; Germany's defense ministry declined to comment. Quantum Systems noted European defense firms and Ukraine supporters face persistent cyberattacks. No CVE or named malware was given.
What to do
- Organisations running QBase or Quantum Systems drones should verify they are on the latest, verified software update and check update provenance/signatures
- Review ground-control server logs for indicators of compromise from updates received around late October 2026
- Isolate ground-control infrastructure from drone and mission networks where feasible
- Report any anomalies to national CERT/defense authorities given the military context
Sources
All live incidents on Threat Watch
