ICS/OT
Dengiz Koalitsiyasi Kema va Port Tizimlari Uchun Bepul Zaiflik Ma'lumotlar Bazasini Ishga Tushirdi
Blue Initiative kemalar va portlar bilan bog'liq deyarli 30 000 ta IT va OT zaifliklarini indekslaydi, ulardan 37 tasi dengizga xos mahsulotlarda.
Muallif
Eduard Kovacs
| 2026-yil 27-oktabr (ET bo'yicha 3:14)
Bir nechta tashkilotlar Blue Initiative — dengiz sanoatiga ta'sir qiladigan IT va OT zaifliklarini indekslaydigan ochiq zaiflik ma'lumotlar bazasini yaratish uchun birlashdi.
Blue Initiative — kiberxavfsizlik kompaniyasi Cydome, Yaponiyaning ClassNK tasniflash jamiyati, sinov va sertifikatlash giganti Bureau Veritas, Dengiz Transport Tizimi Axborot Almashish va Tahlil Markazi (MTS-ISAC) va Rakuten Symphony'ning dengiz kiberxavfsizligi va raqamli yechimlar bo'limi Rakuten Maritime hamkorligida yaratilgan.
Yangi loyiha dengiz tashkilotlariga o'z tizimlariga tahdid solishi mumkin bo'lgan zaifliklarni aniqlash va ustuvorlashtirishda yordam berishni maqsad qiladi.
"Dengiz kompaniyalari ishlatadigan tizimlar uchun qaysi zaifliklar haqiqatan ham muhim ekanligini aniqlash katta muammo," dedi Cydome bosh direktori Nir Ayalon, "va Blue Initiative bilan bizning maqsadimiz dengiz bilan bog'liq zaifliklar uchun ochiq va umumiy yagona haqiqat manbaini yaratishdir.
"Bu IT va kiber jamoalar, sotuvchilar va tadqiqot muassasalariga o'zlarining aniq kemalariga tegishli xavflarni ancha yo'naltirilgan ko'rinishini taqdim etadi, zaifliklar va xavf boshqaruvini avvalgidan ancha samarali va tezroq qiladi," deb qo'shimcha qildi Ayalon.
Blue Initiative veb-sayti bepul foydalanish mumkin va hamjamiyatdan hissa qo'shish qabul qilinadi. Indeksda ro'yxatga olingan zaifliklar Cydome tadqiqotchilari va hamkor sheriklar tomonidan tekshiriladi.
Reklama. O'qishni davom ettirish uchun pastga aylantiring.
Foydalanuvchilar zaifliklarni ko'rib chiqishlari, aniq kamchiliklarni qidirishlari va natijalarni filtrdan o'tkazishlari mumkin. Foydalanuvchilar indeksga qo'shilgan yangi xavfsizlik teshiklari haqida yangilanishlar va ogohlantirishlar ham olishlari mumkin.
Yozish paytida ma'lumotlar bazasi deyarli 30 000 ta yozuvni o'z ichiga oladi, ulardan 2 000 dan ortig'i CVSS balliga ko'ra jiddiy deb baholangan. 580 dan ortiq zaiflik hujumlarda foydalanilayotgani ma'lum.
Umumiy sonning 37 tasi, shu jumladan bu yil aniqlangan ko'plari, kemalar va portlar uchun maxsus ishlab chiqilgan mahsulotlarga ta'sir qiladi.
Ko'pchilik yozuvlar avtomatik ravishda CISA'ning ICS maslahatlari va KEV katalogidan olinadi va dengiz tizimlariga moslashtiriladi, kichikroq qismi esa qo'lda yozilgan tahlilchi eslatmalarini o'z ichiga oladi.
Bog'liq: Ikki Neft Tankeriga Kiberhujumlar Sohil Xavfsizligi va FBI'ni Kema Bortiga Chiqishga Majbur Qildi
Bog'liq: Sohil Xavfsizligi Dengiz Kiberxavfsizligi Siyosati Ofisini Tashkil Etdi
Bog'liq: Gollandiyalik Port Xakeri Qamoqqa Hukm Qilindi
Yozgan: Eduard Kovacs
Eduard Kovacs (@EduardKovacs) SecurityWeek'da katta boshqaruvchi muharrir. U jurnalistika sohasida 2011-yilda boshlashdan oldin o'rta maktab IT o'qituvchisi bo'lib ishlagan. Eduard sanoat informatika bo'yicha bakalavr darajasiga va elektr muhandisligida kompyuter texnikasi bo'yicha magistr darajasiga ega.
Kundalik Axborot Byulleteni
So'nggi kiberxavfsizlik tahdidlari, tendentsiyalar va mutaxassis fikrlari haqida xabardor bo'lish uchun SecurityWeek Email Axborot Byulleteniga obuna bo'ling.
Biznes Email*
emailsignupsource
Qo'shimcha ma'lumot uchun Maxfiylik Siyosatimizni o'qing.
Eduard Kovacsdan Ko'proq
- Node2Shell: Brotli Kamchiligi Microsoft, Node.js, Python Paketlarida Tuzatishlarni Keltirib Chiqardi
- Mirai Botnet Operatorlari PHP2Shell Hujumlariga Qo'shildi, ASLR Bypass Eksploitlari Paydo Bo'ldi
- Atlassian Data Center va Server Mahsulotlarida 75 ta Kamchilikni Tuzatdi
- Eronning Fors Shahzodasi APT C&C'ni 2016-yildan Beri Birinchi Marta AQShda Joylashtirdi
- Texnologiya va Xavfsizlik Kompaniyalari PHP2Shell Zaifliklariga Javob Berdi
- Oracle 2026-yil Oktyabr CPU bilan 1 200 dan Ortiq Zaiflikni Tuzatdi
- Google Chrome'ni ClickFix Hujumlari va Xavfsiz HTTP Ulanishlariga Qarshi Mustahkamladi
- OpenAI Agentlari Xavfsizlik Jamoasi Ogohlantirishlarini Jim Qildi, Moslashuv Monitorini Olib Tashladi
So'nggi Yangiliklar
- Kiberxavfsizlik Muammosi Yangi Meksiko Katta Kasalxonasini Bemorlarni Boshqa Joyga Yo'naltirish va Klinikalari Yopishga Majbur Qildi
- Anthropic Potensial Eng Katta IPO Uchun Ariza Topshirdi, Bosh Direktor AI'dan Insoniyat Uchun Xavf Haqida Ogohlantirdi
- Sanoat Sotuvchilari Mahsulotlarini PHP2Shell Zaifliklari Uchun Tekshirmoqda
- Genesys Hack Ichki Tizimlardan Mijoz Ma'lumotlarini Fosh Qildi
- O'g'irlangan AI Mulohazasi Xitoyga Arzonroq Raqobatchilarni Yaratishda Yordam Berishi Mumkin
- PHP2Shell Ekspluatatsiyasi Tekshiruvlardan Ishlaydigan Shellarga O'tdi
- 953 ta Onlayn Do'kon Uzoq Davom Etgan Zararli Dastur Kampaniyasida Infeksiyalandi
- Gollandiyalik Politsiya Bank Hisoblaridan 400 000 dollardan Ortiq Pulni O'g'irlagan NFC Relay Hujumlari Bo'yicha Ikki Shaxsni Hibsga Oldi
Trend
Node2Shell: Brotli Kamchiligi Microsoft, Node.js, Python Paketlarida Tuzatishlarni Keltirib Chiqardi
Mirai Botnet Operatorlari PHP2Shell Hujumlariga Qo'shildi, ASLR Bypass Eksploitlari Paydo Bo'ldi
SecurityWeek Tahlili: 2024-yil Birinchi Yarimida 178 ta Kiberxavfsizlik M&A Bitimlari E'lon Qilindi
PHP2Shell Ekspluatatsiyasi Tekshiruvlardan Ishlaydigan Shellarga O'tdi
953 ta Onlayn Do'kon Uzoq Davom Etgan Zararli Dastur Kampaniyasida Infeksiyalandi
Sobiq 8200 Bo'limi Ofitserlari Agentik SecOps Startapi Mave Uchun 34 Million Dollar Yig'di
Xitoy APT AI Pentest Vositasini Artex'ni ConnectWise Hujumlarida Ishlatdi
Hujumchilar To'rt Oy Ichida Uchinchi Arista VCO Zero-Day'ni Ekspluatatsiya Qildi
Kundalik Axborot Byulleteni
So'nggi tahdidlar, tendentsiyalar va texnologiyalar haqida xabardor bo'lish, shuningdek, soha mutaxassislarining chuqur fikrlarini olish uchun SecurityWeek Email Axborot Byulleteniga obuna bo'ling.
Biznes Email*
emailsignupsource
Qo'shimcha ma'lumot uchun Maxfiylik Siyosatimizni o'qing.
Vebinar: Sizning Google Workspace'dagi AI Kirish Xavfi Allaqachon Mavjud
2026-yil 19-oktabr
Google Workspace'ga ulangan AI vositalari millionlab maxfiy elektron pochta va fayllarga kirishi mumkin. Tashkilotingizning xavfini aniqlash va AI kirishini boshqarish uchun ramkani o'rganish uchun ushbu sessiyaga qo'shiling.
Ro'yxatdan O'ting
Virtual Tadbir: CISO Forum 2026 Sammiti
2026-yil 10 va 11-noyabr
CISO'lar, yuqori darajadagi kiberxavfsizlik rahbarlari, amaliyotchilar, soha mutaxassislari va boshqa xavfsizlik rahbarlarini amaliy tajriba almashish va korporativ kiberxavfsizlik strategiyasini shakllantiradigan masalalarni ko'rib chiqish uchun birlashtiramiz.
Ro'yxatdan O'ting
Harakatdagi Odamlar
Cequence Security Russ Schaferni CMO etib tayinladi.
Mona Harrington DHS'da Kiber Integratsiya Yordamchi Direktori etib nomlandi.
iCOUNTER Mark H. FitzPatrickni CFO etib tayinladi.
Harakatdagi Ko'proq Odamlar
Mutaxassis Fikrlari
AI Dasturiy Ta'minot Xavfsizligining Kaliti Tezlik Emas, Balki Yetuklikdir
Sizning ishlab chiquvchilaringiz AI qabul qilish shkalasida qayerda joylashgani sizning xavfsizlik xavfini qanday hal qilayotganingizga haqiqiy ta'sir ko'rsatadi. (Matias Madou)
Zamonaviy Kiberhujumlarga Qarshi Kurashda Kontekst Qirol
Kontekstual himoya xavfsizlik jamoalariga signallarni bog'lash, keyin nima kelishini oldindan bilish va tahdidlarni kuchayishidan oldin to'xtatishga yordam beradi. (Etay Maor)
AI Hujum Tezligini O'zgartirdi, Xavfsizlik Asoslarini Emas
AI zaifliklarni aniqlash va ekspluatatsiya qilishni tezlashtirgan sari, virtual tuzatish hali ham himoya chuqurligi va kuchli ilova xavfsizligi asoslariga bog'liq. (Joshua Goldfarb)
Kelajak Uchun Katta Rejalar Tuzgan To'rtta Kiber Tahdid
- AI, ta'minot zanjiri ta'siri, kvant hisoblash va geosiyosiy ziddiyat xavfsizlik dasturlarini sinovdan o'tkazmoqda. Buzilishlarga tayyorgarlik kundalik operatsiyalarning bir qismiga aylanishi kerak. (Steve Durbin)
Oxiridan Boshlang: Agentik Tuzatishni Qanday Faollashtirish Kerak
Agentik tuzatish ishonch harakati emas. Biz ma'lum muammolarni tuzatish haqida gaplashyapmiz, notanish xavf haqida hukm chiqarish emas. (Nadir Izrael)
ICS/OT
Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems
Blue Initiative indexes nearly 30,000 IT and OT vulnerabilities relevant to ships and ports, 37 of them in maritime-specific products.
By
Eduard Kovacs
| October 27, 2026 (3:14 AM ET)
*
Several organizations have teamed up to create Blue Initiative, a public vulnerability database that indexes IT and OT vulnerabilities impacting the maritime industry.
Blue Initiative is the work of cybersecurity company Cydome, Japan’s ClassNK classification society, testing and certification giant Bureau Veritas, the Maritime Transportation System Information Sharing and Analysis Center (MTS-ISAC), and Rakuten Symphony’s maritime cybersecurity and digital solutions unit, Rakuten Maritime.
The new project aims to help maritime organizations identify and prioritize vulnerabilities that could threaten their systems.
“Identifying which vulnerabilities actually matter to the systems maritime companies operate is a major challenge,” said Cydome CEO Nir Ayalon, “and our vision with the Blue Initiative is to have a public and open single source of truth for maritime-related vulnerabilities.
“This will provide IT and cyber teams, vendors and research facilities a much more focused view of risks relevant to their specific vessels, making vulnerabilities and risk management much more effective and faster than before,” Ayalon added.
The Blue Initiative website is freely accessible and contributions from the community are welcome.Vulnerabilities listed in the index are reviewed by Cydome researchers and contributing partners.
Advertisement. Scroll to continue reading.
Users can browse vulnerabilities, search for specific flaws, and filter results. Users can also receive updates and alerts for new security holes added to the index.
At the time of writing, the database contains nearly 30,000 entries, including more than 2,000 rated critical based on their CVSS score. More than 580 vulnerabilities are known to be exploited in attacks.
Of the total, 37 vulnerabilities, including many discovered this year, affect products specifically designed for ships and ports.
Most entries are pulled automatically from CISA’s ICS advisories and KEV catalog and mapped to maritime systems, while a smaller number include hand-written analyst notes.
Related: Cyberattacks on Two Oil Tankers Prompt Coast Guard, FBI to Board Vessels
Related: Coast Guard Establishes Office of Maritime Cybersecurity Policy
Related: Dutch Port Hacker Sentenced to Prison
Written ByEduard Kovacs
Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.
Business Email*
emailsignupsource
Read our Privacy Policy for more information.
More from Eduard Kovacs
- Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages
- Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge
- Atlassian Patches 75 Flaws in Data Center and Server Products
- Iran’s Prince of Persia APT Hosts C&C in US for First Time Since 2016
- Tech and Security Companies Respond to PHP2Shell Vulnerabilities
- Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU
- Google Hardens Chrome Against ClickFix Attacks, Insecure HTTP Connections
- OpenAI Agents Silenced Security Team Alerts, Removed Misalignment Monitor
Latest News
- Cybersecurity Issue Forces a Major New Mexico Hospital to Divert Patients and Close Clinics
- Anthropic Files for Potentially the Biggest IPO Ever as CEO Warns of Risk to Humanity From AI
- Industrial Vendors Check Products for PHP2Shell Vulnerabilities
- Genesys Hack Exposes Customer Data From Internal Systems
- Stolen AI Reasoning Could Help China Build Cheaper Rivals
- PHP2Shell Exploitation Moves From Probes to Working Shells
- 953 Online Stores Infected in Long-Lasting Malware Campaign
- Dutch Police Arrest Two Over NFC Relay Attacks That Drained $400,000+ From Bank Accounts
Trending
Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages
Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge
SecurityWeek Analysis: 178 Cybersecurity M&A Deals Announced in First Half of 2024
PHP2Shell Exploitation Moves From Probes to Working Shells
953 Online Stores Infected in Long-Lasting Malware Campaign
Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup Mave
China APT Uses AI Pentest Tool Artex in ConnectWise Attacks
Attackers Exploit Third Arista VCO Zero-Day in Four Months
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Business Email*
emailsignupsource
Read our Privacy Policy for more information.
Webinar: The AI Access Risk Already in Your Google Workspace
October 19, 2026
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
Register
Virtual Event: CISO Forum 2026 Summit
November 10 & 11, 2026
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
Register
People on the Move
Cequence Security has appointed Russ Schafer as CMO.
Mona Harrington has been named Assistant Director for Cyber Integration at DHS.
iCOUNTER has appointed Mark H. FitzPatrick as CFO.
More People On The Move
Expert Insights
*
The Key to AI Software Security Isn’t Speed, It’s Maturity
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.(Matias Madou)
Context Is King in the Fight Against Modern Cyberattacks
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.(Etay Maor)
AI Has Changed Attack Speed, Not Security Fundamentals
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.(Joshua Goldfarb)
Four Cyber Threats Harboring Big Plans for the Future
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.(Steve Durbin)
Begin at the End: How to Enable Agentic Remediation
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.(Nadir Izrael)