Maritime Cyber Threat Briefing #13 A Trusted Signature Proves Origin—Not Intent Briefing #12 examined what happens when the network perimeter fails. When an edge device that was supposed to keep…
Maritime Cyber Insights #4 Cyber resilience begins beyond compliance. Many shipping companies state that they "comply with MSC.428(98)." That shorthand is understandable, but technically incomplete. International Maritime Organization Resolution MSC.428(98)…
A recurring question surfaces in fleet reviews and board-level risk discussions: Which cyber requirements apply to my ships? It is almost always asked in terms of vessel type. As though…
If you work in shipping, you encounter their names constantly:- DNV- Lloyd's Register- ABS Group- Bureau Veritas- ClassNK - Nippon Kaiji Kyokai- RINABut outside technical circles, their actual role is…
IACS Unified Requirements E26 and E27 appear repeatedly in maritime cyber security discussions. Often referenced, less often explained. They mark the point where IACS, through its member classification societies, extended…
Maritime Cyber Threat Briefing #12 Most maritime cyber incidents announce themselves. A ransomware note appears, an ECDIS position drifts, a booking portal goes dark. FortiBleed is different. It is a…
Maritime Threat Craft #2 The Anubis ransomware group's attack on the Adriatic Port Authority, the "Autorità di Sistema Portuale del Mare Adriatico Centrale" [operator of the Port of Ancona], was…
Maritime Threat Craft #1 For five months, an adversary sat inside the management infrastructure of an Iranian satellite communications provider and did nothing visible. No ransom note, no defacement, no…
Maritime Cyber Threat Briefing #11 From Quiet Access to Crisis-Time Disruption In December 2024, something remarkable happened in a meeting room in Geneva. Senior Chinese officials reportedly signaled in a…
Maritime Cyber Threat Briefing #10 One Port Compromise Can Cascade Across the Supply Chain A port is not simply a place where ships berth and cargo changes hands. It is…