The original text is in EN, taken from the source site. Source ↗

ICS/OT

Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems

Blue Initiative indexes nearly 30,000 IT and OT vulnerabilities relevant to ships and ports, 37 of them in maritime-specific products.

By

Eduard Kovacs

| October 27, 2026 (3:14 AM ET)

*

  • Flipboard
  • Reddit
  • Whatsapp
  • Whatsapp
  • Email

Several organizations have teamed up to create Blue Initiative, a public vulnerability database that indexes IT and OT vulnerabilities impacting the maritime industry.

Blue Initiative is the work of cybersecurity company Cydome, Japan’s ClassNK classification society, testing and certification giant Bureau Veritas, the Maritime Transportation System Information Sharing and Analysis Center (MTS-ISAC), and Rakuten Symphony’s maritime cybersecurity and digital solutions unit, Rakuten Maritime.

The new project aims to help maritime organizations identify and prioritize vulnerabilities that could threaten their systems.

“Identifying which vulnerabilities actually matter to the systems maritime companies operate is a major challenge,” said Cydome CEO Nir Ayalon, “and our vision with the Blue Initiative is to have a public and open single source of truth for maritime-related vulnerabilities.

“This will provide IT and cyber teams, vendors and research facilities a much more focused view of risks relevant to their specific vessels, making vulnerabilities and risk management much more effective and faster than before,” Ayalon added.

The Blue Initiative website is freely accessible and contributions from the community are welcome.Vulnerabilities listed in the index are reviewed by Cydome researchers and contributing partners.

Advertisement. Scroll to continue reading.

Users can browse vulnerabilities, search for specific flaws, and filter results. Users can also receive updates and alerts for new security holes added to the index.

At the time of writing, the database contains nearly 30,000 entries, including more than 2,000 rated critical based on their CVSS score. More than 580 vulnerabilities are known to be exploited in attacks.

Of the total, 37 vulnerabilities, including many discovered this year, affect products specifically designed for ships and ports.

Most entries are pulled automatically from CISA’s ICS advisories and KEV catalog and mapped to maritime systems, while a smaller number include hand-written analyst notes.

Related: Cyberattacks on Two Oil Tankers Prompt Coast Guard, FBI to Board Vessels

Related: Coast Guard Establishes Office of Maritime Cybersecurity Policy

Related: Dutch Port Hacker Sentenced to Prison

Written ByEduard Kovacs

Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Business Email*

emailsignupsource

Read our Privacy Policy for more information.

More from Eduard Kovacs

  • Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages
  • Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge
  • Atlassian Patches 75 Flaws in Data Center and Server Products
  • Iran’s Prince of Persia APT Hosts C&C in US for First Time Since 2016
  • Tech and Security Companies Respond to PHP2Shell Vulnerabilities
  • Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU
  • Google Hardens Chrome Against ClickFix Attacks, Insecure HTTP Connections
  • OpenAI Agents Silenced Security Team Alerts, Removed Misalignment Monitor

Latest News

  • Cybersecurity Issue Forces a Major New Mexico Hospital to Divert Patients and Close Clinics
  • Anthropic Files for Potentially the Biggest IPO Ever as CEO Warns of Risk to Humanity From AI
  • Industrial Vendors Check Products for PHP2Shell Vulnerabilities
  • Genesys Hack Exposes Customer Data From Internal Systems
  • Stolen AI Reasoning Could Help China Build Cheaper Rivals
  • PHP2Shell Exploitation Moves From Probes to Working Shells
  • 953 Online Stores Infected in Long-Lasting Malware Campaign
  • Dutch Police Arrest Two Over NFC Relay Attacks That Drained $400,000+ From Bank Accounts

Trending

Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages

Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge

SecurityWeek Analysis: 178 Cybersecurity M&A Deals Announced in First Half of 2024

PHP2Shell Exploitation Moves From Probes to Working Shells

953 Online Stores Infected in Long-Lasting Malware Campaign

Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup Mave

China APT Uses AI Pentest Tool Artex in ConnectWise Attacks

Attackers Exploit Third Arista VCO Zero-Day in Four Months

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Business Email*

emailsignupsource

Read our Privacy Policy for more information.

Webinar: The AI Access Risk Already in Your Google Workspace

October 19, 2026

AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.

Register

Virtual Event: CISO Forum 2026 Summit

November 10 & 11, 2026

Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.

Register

People on the Move

Cequence Security has appointed Russ Schafer as CMO.

Mona Harrington has been named Assistant Director for Cyber Integration at DHS.

iCOUNTER has appointed Mark H. FitzPatrick as CFO.

More People On The Move

Expert Insights

*

  • Flipboard
  • Reddit
  • Whatsapp
  • Whatsapp
  • Email

The Key to AI Software Security Isn’t Speed, It’s Maturity

Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.(Matias Madou)

Context Is King in the Fight Against Modern Cyberattacks

Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.(Etay Maor)

AI Has Changed Attack Speed, Not Security Fundamentals

As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.(Joshua Goldfarb)

Four Cyber Threats Harboring Big Plans for the Future

  • AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.(Steve Durbin)

Begin at the End: How to Enable Agentic Remediation

Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.(Nadir Izrael)