Blue Initiative coalition launches free Maritime Vulnerabilities Repository, a CVE database for shipping IT and OT
Matéria consolidada. Reúne 2 matérias que o Tifon tinha publicado separadamente sobre a mesma história. A IA reescreveu o relatório com o que as 2 fontes trouxeram em 28/10/2026 00:04; os links antigos trazem para cá.
On October 26, 2026, maritime and cybersecurity organizations Cydome, Rakuten Maritime (part of Rakuten Symphony), Bureau Veritas, ClassNK and the Maritime Transportation System ISAC (MTS-ISAC) announced the Blue Initiative, a free public database of IT and OT vulnerabilities affecting the maritime sector, called the Maritime Vulnerabilities Repository (MVR) (infosecurity-magazine.com, securityweek.com). The coalition claims it is the first database listing only sector-relevant vulnerabilities (infosecurity-magazine.com). It is meant to help shipping and port organizations work out which vulnerabilities matter to the systems they operate and to prioritize them (securityweek.com). SecurityWeek describes the launch as industry and product news, not a new threat or incident (securityweek.com). Infosecurity Magazine ties it to continued attacks on shipping, including reported breaches of IT and OT networks on two oil tankers in the Gulf of Mexico and a leak-site campaign by the n0n group (infosecurity-magazine.com).
Detalhes técnicos
- Size: the index holds nearly 30,000 entries. More than 2,000 are rated critical by CVSS and more than 580 are known to be exploited in attacks (securityweek.com).
- Maritime-specific: 37 entries, many discovered this year, affect products designed specifically for ships and ports (securityweek.com).
- Sourcing: most entries are pulled automatically from CISA ICS advisories and the KEV catalog and mapped to maritime systems. A smaller number carry hand-written analyst notes (securityweek.com).
- Vetting: proposed entries are validated and refined by researchers from Cydome and partner organizations, and a vulnerability is published only once a patch is available (infosecurity-magazine.com). Cydome researchers and contributing partners review the listed vulnerabilities, and community contributions are welcome (securityweek.com).
- Features: users can browse, search and filter CVEs by equipment or vendor, read expert insight on impact, and subscribe to alerts for new additions (infosecurity-magazine.com, securityweek.com). MTS-ISAC has integrated its operational workflows to contribute to and use the repository (infosecurity-magazine.com).
- Context, tanker incidents: the US Coast Guard and FBI boarded two oil tankers in the Gulf of Mexico on August 21 and 24 after attacks on on-board systems. Foreign cyber actors reportedly breached IT and OT networks and interfered with propulsion, navigation and other systems (infosecurity-magazine.com). The reporting is hedged and no attribution is given.
- Context, n0n: the n0n extortion group listed dozens of global maritime organizations (carriers, port and terminal operators) on its leak site on October 12. None of the claimed victims has confirmed an incident (infosecurity-magazine.com).
Remediação
- Maritime IT and cyber teams can use the MVR to track vulnerabilities in onboard and shore-side equipment and subscribe to alerts (infosecurity-magazine.com, securityweek.com).
- Ship owners are expected to maintain the security of onboard systems throughout a vessel's operational life as new vulnerabilities emerge (infosecurity-magazine.com).
Relatos divergentes
- Curation: infosecurity-magazine.com stresses validation by researchers and publication only once a patch is available. The later securityweek.com report says most of the nearly 30,000 entries are pulled automatically from CISA ICS advisories and the KEV catalog, with only a smaller number carrying analyst notes. The sources do not reconcile the two. The securityweek.com description of the database contents is the more recent and more specific.
- Scope: the claim of listing only sector-relevant vulnerabilities (infosecurity-magazine.com) sits uneasily with securityweek.com, which says only 37 of roughly 30,000 entries target products designed specifically for ships and ports. The remainder are mapped to maritime systems.
Linha do tempo
-
Cydome, ClassNK, Bureau Veritas, MTS-ISAC and Rakuten Maritime launch free maritime vulnerability database Blue Initiative
ler a análise desta fonte ocultar
A coalition of maritime and cybersecurity organizations has launched Blue Initiative, a free, public database that indexes IT and OT vulnerabilities affecting the maritime industry. It was built by Cydome, ClassNK, Bureau Veritas, the Maritime Transportation System ISAC (MTS-ISAC) and Rakuten Maritime (part of Rakuten Symphony). The goal is to help shipping and port organizations work out which vulnerabilities matter to the systems they operate and to prioritize them. The project is industry and product news and does not describe a new threat or incident.
Technical Details
- The index holds nearly 30,000 entries, of which more than 2,000 are rated critical by CVSS score and more than 580 are known to be exploited in attacks.
- 37 entries, many of them discovered this year, affect products designed specifically for ships and ports.
- Most entries are pulled automatically from CISA ICS advisories and the KEV catalog and mapped to maritime systems. A smaller number carry hand-written analyst notes.
- Cydome researchers and contributing partners review the listed vulnerabilities.
- Users can browse, search and filter entries and can subscribe to alerts for new additions. Community contributions are welcome.
-
Blue Initiative coalition launches Maritime Vulnerabilities Repository, a CVE database for shipping IT and OT
ler a análise desta fonte ocultar
On October 26, maritime cybersecurity vendors Cydome and Rakuten Maritime, together with Bureau Veritas, ClassNK and MTS-ISAC, announced the Blue Initiative. It is a public database of CVEs affecting IT and OT systems used in the maritime sector, called the Maritime Vulnerabilities Repository (MVR). The coalition claims it is the first database listing only sector-relevant vulnerabilities. Proposed entries are validated and refined by researchers from Cydome and partner organizations, and a vulnerability is published only once a patch is available. The launch follows continued attacks on shipping, including August 21 and 24 incidents in which foreign cyber actors reportedly breached IT and OT networks on two oil tankers in the Gulf of Mexico, and the n0n extortion group listing dozens of maritime organizations on its leak site on October 12.
Technical Details
- Users can browse CVEs, filter by equipment or vendor, read expert insight on impact, and subscribe to alerts.
- MTS-ISAC has integrated its operational workflows to contribute to and use the repository.
- Context: the US Coast Guard and FBI boarded two oil tankers in the Gulf of Mexico on August 21 and 24 after attacks on on-board systems. The attackers reportedly interfered with propulsion, navigation and other systems.
- Context: n0n added dozens of global maritime organizations (carriers, port and terminal operators) to its leak site on October 12. None of the claimed victims has confirmed an incident.
Remediation
- Maritime IT and cyber teams can use the MVR to track vulnerabilities in onboard and shore-side equipment and subscribe to alerts.
- Ship owners are expected to maintain the security of onboard systems throughout a vessel's operational life as new vulnerabilities emerge.