Industry Coalition Launches Comprehensive CVE Database for Maritime Sector Vulnerability Management
In a significant move to bolster cybersecurity within the maritime industry, a coalition of key players has unveiled a new database dedicated to Common Vulnerabilities and Exposures (CVEs) tailored specifically for shipping companies. This initiative, branded as the Blue Initiative, was officially announced on October 26. The coalition comprises notable maritime cybersecurity vendors, namely Cydome and Rakuten Maritime, along with inspection and certification specialist Bureau Veritas, ship classification society ClassNK, and the Maritime Transportation System Information Sharing and Analysis Center (MTS-ISAC).
The coalition has asserted that this new database will set itself apart as the first comprehensive repository listing only IT and operational technology (OT) vulnerabilities that are pertinent to the maritime sector. By focusing exclusively on these vulnerabilities, the Blue Initiative aims to provide maritime organizations with the tools necessary to manage vulnerabilities more effectively and proactively. Such a resource is crucial given the increasing frequency of cyber threats targeting maritime infrastructure.
Cydome’s CEO, Nir Ayalon, conveyed the challenges faced by maritime operators in identifying flaws relevant to their specialized systems. He articulated the vision of the Blue Initiative, stating, “Our aim is to establish a public and open single source of truth for maritime-related vulnerabilities.” According to Ayalon, this centralization will grant IT and cyber teams, as well as vendors and research institutions, a clearer perspective of risks that specifically impact their vessels. Consequently, it is expected that vulnerability and risk management processes will become more efficient and timely.
Proposed entries to the Maritime Vulnerabilities Repository (MVR) will undergo a meticulous review process conducted by researchers from Cydome and its partners in the Blue Initiative. This validation process promises to enhance the reliability of the information contained within the database. Once validated, users will have the ability to navigate the repository in several ways. They will be able to browse all CVEs and access detailed information, filter by relevant equipment or vendors, glean expert insights into specific vulnerabilities, and subscribe for updates regarding newly identified vulnerabilities. Notably, the coalition clarified that vulnerabilities will only be published when a patch becomes available, underscoring their commitment to providing actionable and timely information.
Christy Coffey, Vice President of Operations at MTS-ISAC, emphasized the importance of this collaborative approach. She remarked, “Amid a shifting threat landscape where technological advancements continue to empower threat actors targeting maritime critical infrastructure, the Blue Initiative offers crucial vulnerability intelligence to bridge a significant vulnerability gap.” Coffey also expressed the MTS-ISAC’s strong endorsement of this community-driven initiative, highlighting its integration with their operational workflows to both contribute to and utilize the invaluable resources that the initiative promises.
The urgency of this launch is underscored by the escalating frequency of cyber incidents within the maritime sector. Notably, on August 21 and 24, the US Coast Guard and FBI found it necessary to intervene on two oil tankers in the Gulf of Mexico. These measures were a response to cyber-attacks conducted by “foreign cyber actors” that compromised onboard systems. Reports indicated that the attackers successfully penetrated both IT and OT networks, disrupting vital functions related to propulsion, navigation, and other critical systems.
Adding to the sector’s concerns, the n0n extortion group recently included numerous global maritime organizations on its leak site on October 12. While these organizations include shipping carriers as well as port and terminal operators, confirmation of any security breaches has not yet been forthcoming from the implicated entities. This lack of transparency further highlights the necessity for a specialized resource like the Blue Initiative.
Bureau Veritas Marine & Offshore’s cyber technical and market leader, Panagiotis Anastasiou, articulated the evolving landscape of cyber resilience within the maritime sector. He stated, “Cyber resilience requirements for ships are not merely a checklist for audits but a continuing responsibility throughout a vessel’s operational life.” He emphasized that owners must actively maintain the security of onboard systems as new vulnerabilities arise, making effective vulnerability management an essential component of maritime cyber resilience. However, he recognized the challenges that come with this task, as critical information is often dispersed throughout generalized databases and vendor advisories.
The Blue Initiative represents a proactive stride toward creating a safer maritime environment. As the industry grapples with mounting cyber threats, this new database aims to empower maritime stakeholders by equipping them with the vital intelligence needed to safeguard their operations against emerging vulnerabilities.