www.nytimes.com Ukraine's Lima System Diverts Russian Missiles Using GPS Spoofing
Article Content
- •The Lima system diverted two Russian Oreshnik missiles during a May 2026 attack.
- •Lima uses GPS spoofing to mislead missiles and drones, causing civilian devices to misreport locations.
- •The system has reportedly diverted over 30 cruise missiles and 10,000 drones since its deployment.
The Ukrainian electronic warfare system, Lima, successfully diverted two Russian Oreshnik missiles during a May 24 attack on Kyiv. Developed by Cascade Systems, Lima uses GPS spoofing to mislead incoming missiles and drones, causing them to believe they are targeting locations in Peru. The system has reportedly diverted over 30 cruise missiles and 10,000 drones since its deployment. The New York Times highlighted the unintended side effects on civilian GPS devices, which often misreport locations as being in Lima, Peru. The Lima system has been operational since August 2025 and has been credited with preventing significant damage during missile strikes. The claims regarding the system's effectiveness, including the diversion of the Oreshnik missiles, have not been independently verified. The technology's dual-use nature raises concerns about its impact on civilian navigation systems.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (7)
Following this threat?
Track Cascade Systems in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
How does the Lima system work?
What are the reported effects on civilian devices?
Has the effectiveness of the Lima system been verified?
Continue Reading
Critical RCE Vulnerability in Confection WordPress Plugin (CVE-2026-115252) A critical vulnerability, CVE-2026-115252, has been identified in the Confection WordPress Cable plugin, affecting versions 0.4.0 to 0.4.7. This flaw allows unauthenticated attackers to execute arbitrary PHP code on the server by writing unmodified settings into a PHP file without proper checks. The vulnerability has… 
Critical Code Injection Vulnerability in Staggs Plugin for WordPress A critical code injection vulnerability, CVE-2026-78287, has been identified in the Staggs plugin for WordPress, affecting versions up to 3.3.0. This flaw allows unauthenticated attackers to execute arbitrary code remotely, posing severe risks to affected sites. The vulnerability stems from improper control over code…