Cybersecurity News

DNV acquired CyberOwl, a global presence in cyber risk monitoring and threat management onboard maritime vessels, which comes at a time when maritime must comply with a wealth of new cyber security regulation and invest in incident detection, response and recovery as increasing implementation of digitally connected systems onboard vessels create new vulnerabilities. CyberOwl provides vessel operators with analytics to identify, monitor and manage cyber threats, and evidence regulatory compliance.

ClassNK has released ‘Guidelines for Cyber resilience of ships’, which expound new IACS Unified Requirements (UR) to support the consideration of measures to ensure the cybersecurity of ships.IACS has established UR E26 for ships and UR E27 for on-board systems and equipment as URs setting minimum requirements for cyber resilience, which is the capability to reduce the occurrence and mitigate the effects of cyber incidents due to cyber-attacks or other threats. The URs have been applied to new ships contracted for construction on or after July 1…

As digital technologies continue to permeate the international shipping industry, a newly launched organization aims to raise the standard of cybersecurity risk assessment across the maritime sector.The International Maritime Cyber Security Organization (IMCSO) will recognize appropriate cybersecurity professional certifications as well as offer certification for maritime specific knowledge. In addition, the body will maintain a register of maritime cyber security service suppliers, detailing the qualifications and expertise of those working for them.

Denmark-based Danelec reports it has become the first Voyage Data Recorder (VDR) manufacturer to receive new DNV Cyber Security Type Approval for IACS UR E27, for its advanced DM100 VDR platform.The International Association of Classification Societies (IACS) has introduced the new IACS Unified Requirements E27 to enhance cyber safety and protect maritime assets from cyber threats, which is now mandatory for all classed ships contracted for construction from July 1, 2024. Covering both operational and information technology systems on ships…

Chinese government-linked hackers have burrowed into U.S. critical infrastructure and are waiting "for just the right moment to deal a devastating blow," FBI Director Christopher Wray said earlier this month.An ongoing Chinese hacking campaign known as Volt Typhoon has successfully gained access to numerous American companies in telecommunications, energy, water and other critical sectors, with 23 pipeline operators targeted, Wray said in a speech at Vanderbilt University on April…

With supply chain attacks on the rise, and nation-state attackers constantly looking for new ways to disrupt national security and economic stability, one of the most vulnerable areas is the security around our maritime operations. The Biden-Harris Administration's recent Executive Order to fortify the cybersecurity of U.S. ports underscores this concern, spotlighting the urgency of addressing vulnerabilities in a sector that drives over $5.4 trillion in economic activity annually.

As dusk descends upon our nation's ports, casting shadows over the waterfront, another shadow looms in the digital landscape — the threat of cyber warfare. In an era where connectivity reigns supreme, our maritime infrastructure stands at a critical juncture, balancing vulnerability and resilience. The recent White House announcement of a Presidential Executive Order, and a hefty $20 billion in Inflation Reduction Act funding proposal to fortify our ports, underscores the gravity of the situation.It is a fact that at this time China has manufactured 80% of our nation’s ship-to-shore cranes…

President Biden on Wednesday signed an Executive Order aiming to strengthen cybersecurity at U.S. ports amid growing threats to America's vital maritime supply chains.The directive bolsters the Department of Homeland Security’s authority to address maritime cyber threats, including through the creation of new standards to ensure the security of networks and systems throughout the nation’s marine transportation system (MTS), which supports $5.4 trillion in economic activity each year."Most critical infrastructure owners and operators have a list of safety regulations they have to comply with…

Marlink has further strengthened its cyber security portfolio with the addition of CyberGuard Unified Threat Management (CyberGuard UTM) to secure its customers’ digital transformation strategies.CyberGuard UTM reflects the growth of cyber threats in the maritime industry and the need to protect people and assets across a broader range of digital solutions. In particular, the growth of new LEO and 4G/5G services with greater bandwidth speed and lower latency require increased…

Korean Register (KR) has awarded Approval in Principle to K Shipbuilding and ForceTEC for their design technology focusing on ship cyber resilience in accordance with the International Association of Classification Societies (IACS) Unified Requirement (UR) E26.KR, K Shipbuilding, and ForceTEC in January embarked on a joint research project aimed at applying and validating the rules of ship cyber resilience, in a proactive response to the forthcoming adoption of IACS UR E26.IACS UR E26, introduced in April 2022, establishes unified requirements for cyber resilience in ships.

DNV will acquire Helsinki-headquartered cyber security services firm Nixu following a public tender offer which resulted in DNV taking ownership of more than 93% of Nixu’s shares. DNV will combine its cyber security businesses with Nixu following a process to acquire the remaining shares in Nixu and de-list the company from the Nasdaq Helsinki Stock Exchange. The $107-million deal will create one of Europe’s fastest growing cyber security services businesses.

AI-powered Endpoint Security solution replaces SkyFile Antivirus with protection for onboard IT environments against cyber threatsMarlink unveiled the latest upgrade to its suite of cyber security tools, adding Endpoint Security to the CyberGuard portfolio. CyberGuard EDR (Endpoint Detection & Response) is optimized for the satellite communications environment, in particular by operating in a Master/Client architecture, which permits the regular, automated distribution of signature…

Korean Register (KR) has awarded an approval in principle (AIP) to HD Hyundai Heavy Industries (HD HHI) and HD Korea Shipbuilding & Offshore Engineering (HD KSOE) for their 'Technical Procedures and Methodology for Implementation of Ship Cyber Resilience (IACS UR E26).'Ship cyber resilience encompasses measures taken to reduce cyber accidents and mitigate their impact on the operational technology systems essential for the safe navigation of ships. IACS UR E26, introduced in April 2022…

Satellite communications solutions firm Marlink has signed a strategic agreement with NORMA Cyber to strengthen the cybersecurity intelligence and resilience of its maritime customer base.The Norwegian Maritime Cyber Resilience Centre (NORMA Cyber) is a joint venture between risk insurance provider Den Norske Krigsforsikring for Skib (DNK) and the Norwegian Shipowners’ Association. NORMA Cyber provides centralized cybersecurity services to Norwegian shipowners and other entities and aims to be the leading hub for operational cyber security efforts within the national maritime sector.

ABS Wavesight, an ABS-affiliated software-as-a-service (SaaS) company, today announced a new alliance with ActZero, a managed detection and response (MDR) service provider, to help safeguard fleets from the growing threat of cyberattacks.ActZero will provide cybersecurity protection to ABS Wavesight clients alongside ABS Wavesight’s portfolio of vessel and voyage management tools. “Offering ABS Wavesight users a cyber solution is not just a natural next step; it’s a necessary one,” said Paul Sells, CEO of ABS Wavesight.

After prototype testing in January 2023, classification society ABS has issued the world's first ABS CyberSafety Product Design Assessment (PDA) certification for the main engine and main propulsion remote control systems (M-800 series) from Nabtesco Corporation.“In vessel operations today, more and more components are connected and reliant on digitally enabled systems that introduce new risks and vulnerabilities into the maritime supply chain. By addressing the risks early at the individual component and equipment levels, equipment manufacturers can help mitigate potential negative impacts.

Athens-based maritime artificial intelligence (AI) company METIS announced Eleni Polychronopoulou has been appointed as the firm’s new CEO.Polychronopoulou has been METIS president during the company’s development phase over the past three years. METIS is majority-owned by maritime-focused environmental engineering group ERMA FIRST.Polychronopoulou is currently president of HEMEXPO, vice chair at Sea Europe, and a senior executive at EPE and ERMA FIRST.METIS aims to be a player in the maritime industry’s ongoing digital transformation…

Techcross’ ballast water management systems have received Lloyd's Register's Cyber Security Capability certification.The company said that the two models that received the certificate are ECS, direct electrolysis and HYCHLOR, indirect electrolysis.According to, LR Classification that Techcross is the first company to receive the Cyber Security Capability certification in the BWMS industry and Asia. With the recent development of smart ships, ship management has transitioned to being computer-driven…

ABS has been announced as the industry collaborator to build the Maritime Testbed of Shipboard Operational Technology (MariOT) Systems. The project is led by iTrust, Center for Research in Cyber Security at the Singapore University of Technology and Design (SUTD), in collaboration with ABS and Singapore Polytechnic’s Centre of Excellence in Maritime Safety (CEMS).The MariOT will support a host of cybersecurity activities to meet the challenges in the maritime industry’s push towards digitalization. MariOT will be the world's first industrial-grade, cyber-physical platform, combining essential shipboard OT systems with virtual simulation models. “We will build virtual models of ship OT systems using advanced multi-physics modeling and simulation.

The 2022 Maritime Risk Symposium scheduled to be held November 15-17, 2022, hosted by Argonne National Laboratory, will feature a panel discussion entitled "Training the Next Generation of Maritime Cyber Warriors."The cyber threats to the maritime environment are increasing in scope and magnitude while the talent stream struggles to keep up. This panel will address some of the innovative ways in which the next generation of cyber warriors are being prepared by expanding experiential learning through directed practical experience.

Cyber attack attempts are becoming more common at U.S. ports and terminals, according to findings published this week by law firm Jones Walker LLP.The firm publicly released the findings of its 2022 Ports and Terminals Cybersecurity Survey, examining cybersecurity preparedness in U.S.-based ports and terminals. The report outlining the results of the survey is authored by four of the firm’s attorneys and the findings was presented by two of them, Jim Kearns and Andy Lee, during the Inland Rivers…

The Port of Corpus Christi has become the first port in the state to obtain the Texas Cyberstar Certification, issued by the Texas Department of Information Resources (DIR).The Cyberstar Certificate Program was launched in May by the Texas DIR to recognize public and private organizations in the state that voluntarily meet specific criteria for cybersecurity best practices.“We remain committed to our CyberSecurity program at the Port of Corpus Christi. Our cyber team consistently strives to reach new milestones and protect against an ever-changing threat landscape…

A New York state regulator on Friday fined cruise line operator Carnival Corp $5 million for "significant" cybersecurity violations, following four security breaches from 2019 to 2021 that exposed substantial amounts of sensitive customer data.New York's Department of Financial Services said Carnival violated a state cybersecurity regulation by failing to use multi-factor authentication that would make it harder for wrongdoers to access its internal network.It also said Carnival…