New Maritime Vulnerability Database Aims to Cut Through the Noise for Shipping Firms

A group of maritime and security organisations has launched Blue Initiative, a new database of vulnerabilities (CVEs) aimed at shipping companies. It was announced on October 26 by maritime cybersecurity vendors Cydome and Rakuten Maritime, together with Bureau Veritas, ClassNK and the Maritime Transportation System Information Sharing and Analysis Center (MTS-ISAC). The coalition says it is the first database to list only IT and OT (operational technology) vulnerabilities relevant to the sector, which should help firms manage vulnerabilities and alerts more proactively.

Cydome CEO Nir Ayalon said finding flaws that affect the specialised systems maritime operators use is a challenge. He described the aim as a public, open "single source of truth" that gives IT and cyber teams, vendors and researchers a more focused view of risks to their vessels. Proposed entries to the Maritime Vulnerabilities Repository will be reviewed, validated and refined by researchers from Cydome and other partners before publication. Vulnerabilities are only published once a patch is available. MTS-ISAC has endorsed the model and integrated it into its operational workflows.

The launch comes as attacks on the sector continue. On August 21 and 24, the US Coast Guard and FBI boarded two oil tankers in the Gulf of Mexico after cyber-attacks on on-board systems by "foreign cyber actors." This summary is based on the opening of the source article and does not cover the full story.