Last week's maritime trend news November 24, 2022 - November 30, 2022
|
|
|
Maritime Cybersecurity News by DSLABcompany |
|
|
Recent Cybersecurity Incident Summary |
|
|
|
During a visit to Brussels last week, it was clear to see that the EU’s most important institutions and constituencies are determined to enhance the bloc’s security architecture. Awakened by the Ukraine war, the EU is shoring up its defenses at home and abroad, including in the Gulf region. President of the European Commission Ursula von der Leyen this month spelled out elements of the new security doctrine and the EU’s new approach to Gulf security. At the Manama Dialogue in Bahrain on Nov. 18, she said that the EU and GCC “face a historic opportunity to build new ties between our regions. For our mutual benefit. For today and for the long run.”Her remarks chart a robust new approach, which promises to contribute significantly to the region’s peace, security and prosperity, and put the EU’s relations with regional powers on a stronger footing. While the Ukraine war likely provided the impetus for this shift, it has been some time in the making, as the EU has sought over the past few years to increase its security and political footprint in the region. Iran’s intransigence over reviving the nuclear deal and its meddling in Ukraine have finally persuaded the EU leadership of the destabilizing role Tehran has been playing regionally and globally. Equally important, the widespread killings of peaceful protesters demonstrated the Iranian government’s penchant for repression, including repeated attacks on European soil against the regime’s opponents.
|
|
|
|
This is the biggest programme release to date for Port-IT and comes after receiving feedback from the maritime industry to include new functions. There is a new user interface on vessels and a patch management feature, enabling fleet managers to update their applications and programs remotely. “This version is the biggest release we have ever done” said Port-IT chief executive Youri Hart. “It enables customers to receive feedback on all cyber security services used via a single unique onboard interface; showing true synergies between the products,” he explained. “This is not seen in the industry so far and really is a major step in protecting ships.” Mr Hart said this version had a whole new user interface and service integration, while the addition of patch management was a “long-standing client wish.” Managers can remotely update Vanir endpoint security to this latest version and update their own applications, such as Winzip, across their fleets without involving the crew or outside engineers. |
|
|
|
On Wednesday, 23rd of November, a Maritime Cybersecurity Event took place at Eleon Loft for select members of the Greek Shipping IT community. The event was organized by Oriani Hellas – a leading company in maritime digital technology transformation, and K2 Informatics. The audience was a collection of experienced IT maritime professionals from the Greek Shipping industry. The event was created not only for attendees to hear the viewpoints of the excellent guest speakers, but to enable an open discussion about the latest cyber trends in the shipping industry and what the next steps should be to address them. In addition, there was the presentation of K2-Secure, a complete cybersecurity solution created through the collaboration of Oriani & K2 Informatics. The guest speakers of this elegant evening provided a diverse range of opinions, covering the views from Class, Ship Owners, AMMITEC and Suppliers. |
|
|
|
The offshore oil and gas infrastructure faces cybersecurity risks that the Department of Interior should immediately address, the US Government Accountability Office (GAO) notes in a new report. Consisting of more than 1,600 facilities, the offshore oil and gas infrastructure is divided into two categories, namely exploitation and drilling (including mobile offshore drilling units and fixed and floating production facilities), and midstream (pipelines and related equipment used for transportation). Cybersecurity risks to offshore oil and gas infrastructure are “significant and increasing” and they include threat actors, vulnerabilities, and potential impacts, GAO says. Threat actors such as cybercriminals, nation-states, and others have been observed launching cyberattacks against offshore oil and gas infrastructure, and are expected to continue to do so. China, Iran, North Korea, and Russia are considered the greatest cyber threats, as they can launch disruptive cyberattacks against critical infrastructure. |
|
|
|
Disruptions through the global supply chain continue to create opportunities for criminals to infiltrate and access cargo, said TT Club in the second edition of its Supply Chain Security Bulletin. According to the bulleting, the high levels of disruption can create opportunities for those with criminal intent. Commenting on the latest publication, Mike Yarwood, TT’s Managing Director, Loss Prevention said: The risk landscape is constantly evolving; the criminal organisations providing the threat are getting ever more sophisticated The 2022 year to date, TT claims data highlight the preponderance of electrical goods as targets globally, with the US reporting over 70% of these losses. The split in general between theft from vehicles and depots is in the order of two-thirds versus one-third. This is a consistent finding; though vehicles ‘at rest’ as opposed to hi-jackings are more prevalent targets. |
|
|
|
At the 2022 NATO Summit, US President Joe Biden and other world leaders committed to “building resilience against transnational threats,” particularly those that threaten cyberspace. This comes in the wake of the 3,900% uptick in cyberattacks targeting critical infrastructure — gas pipelines, steel production, logistics operations, and ship navigation, among others — between 2013 and 2020. In fact, a recent act of sabotage derailed Northern Germany’s railway system when the critical cable system for the GSM-R rail communications network was harmed, causing a serious train traffic outage. While in this instance the damage was physical rather than in the cybersphere, the incident demonstrated malicious actors’ growing intent to take critical infrastructure offline with potentially widespread effects. Cybersecurity, it seems, has joined the list of topics topping global discourse — in no small part due to the growing recognition of vulnerability in U.S. critical infrastructure. But what best practices can be adopted to help build cyber resilience? |
|
|
|
Techross’ ballast water management systems received the Cyber Security Capability certification from Lloyd’s Register Classification on November 15. The two models that received the certificate are ECS, direct electrolysis and HYCHLOR, indirect electrolysis. LR Classification announced that Techcross is the first company to receive the Cyber Security Capability certification in the BWMS industry and Asia. With the recent development of smart ships, ship management has transitioned to computer-driven, such as IT and IoT. Voyage log software and digital data operated through the communications network present huge opportunities for improving efficiency and convenience to users. However, they also pose daunting security and safety challenges for a wide range of stakeholders, such as hacking. For this reason, clients have continuously called to build up the capability to respond to cyber attacks and cyber security capability. Techcross responded to such a call by receiving the Cyber Security Capability certificate. |
|
|
info@dslabcompany.com
Samsung IT Harrington Tower 716, Geumcheon-Gu Digital-Ro 9 Gil, Seoul(08511) |
|
|
|
