Electronic attacks target the radio links: uplink jamming disrupts the satellite's receiver (and hits all users within its reach), downlink jamming locally disrupts receivers on the ground, and spoofing sends false signals. This is the territory of the EW Academy (§ 21); GNSS jamming is covered in § 14.
Cyber attacks aim at the weakest point: ground stations, network management and user terminals. The best-known example is the attack on Viasat's KA-SAT network on 24 February 2022 (see 9.3).