Last week's maritime trend news
December 22, 2022 - December 28, 2022
Maritime Cybersecurity News   by DSLABcompany
Highlight
NOMINATED FOR SMART4SEA CYBER SECURITY AWARDS
 SAFETY4SEA, the world’s top 10 media supporter focused on safety and environmental protection in the maritime industry, holds an SMART4SEA Award that aims to foster excellence and share best practices across shipping. The event targets Technical, Safety, Operations & Marine departments of Ship Operators and other industry stakeholders. This year, the awards aim to recognize organizations that have demonstrated outstanding performance in fostering maritime digitalization and smart shipping.

Fortunately, DSLAB Company has been nominated for the SMART4SEA Cyber Security Award. We are offering a cyber threat intelligence system for the maritime industry. The product, which is being developed with DSME and supported by Ministry of Oceans and Fisheries in South Korea, collects and analyzes cyber threat data on ship attack surfaces and supply chain. 

We would appreciate your vote to support our growth
.
 
To vote, click the bottom button, click on the company logo, and then click the “Continue” button in the bottom right corner.
Weekly Hot Trend
  The Cyber Resilience Act is intended to protect consumers and businesses from products with inadequate security features. If passed, the legislation – a world-first on connected devices – will bring mandatory cybersecurity requirements for products with digital elements throughout their whole lifecycle. The legislation of connected devices is about to change in a big way. In September, the European Commission introduced a proposed Cyber Resilience Act which obliges manufacturers to protect their internet-connected electronic products from unauthorized access at all stages of their life cycle. The act will impact all devices used in Europe. For example, the legislation sets rules around the prohibition of default and weak passwords, support of software updates and mandatory testing for security vulnerabilities. In the face of cheap devices and cybersecurity holes, this is exactly what’s needed in the internet of things (IoT). In fact, some observers compare the legislation favorably to Europe’s General Data Protection Act (GDPR) in that it sets industry-wide tech standards across the bloc. Let’s look deeper into this regulation and consider its impact on device makers, developers and consumers.
Weekly News
  The chief executive of one of Europe’s biggest insurance companies has warned that cyber attacks, rather than natural catastrophes, will become “uninsurable” as the disruption from hacks continues to grow. Insurance executives have been increasingly vocal in recent years about systemic risks, such as pandemics and climate change, that test the sector’s ability to provide coverage. For the second year in a row, natural catastrophe-related claims are expected to top $100 billion (€113.5 billion). But Mario Greco, chief executive at insurer Zurich, told the Financial Times that cyber was the risk to watch. In September, Lloyd’s of London defended a move to limit systemic risk from cyber attacks by requesting that insurance policies written in the market have an exemption for state-backed attacks. At the time, a senior Lloyd’s executive said the move was “responsible” and preferable to waiting until “after everything has gone wrong.” But the difficulty of identifying those behind attacks and their affiliations makes such exemptions legally fraught, and cyber experts have warned that rising prices and bigger exceptions could put off people buying any protection.
  Decarbonisation, digitalisation and cyber security will be major drivers in the shipping industry according to DNV chief executive Knut Ørbeck-Nilssen. He highlighted the unpredictability of shipping markets, influenced by geopolitics such as Russia’s invasion of the Ukraine, and how it impacts shipping demand and charter rates. “There have been political shocks and a super-cycle in container shipping with growth in newbuildings and high rates.” Mr Ørbeck-Nilssen described how maritime regulations will be affected by international concerns over climate change. “Decarbonisation is setting the agenda, affecting regulatory requirements,” he said.
   National Security Agency Cyber Director Rob Joyce said Thursday he remains concerned about significant cyberattacks from Russia, warning that Moscow could unleash digital assaults on the global energy sector in the coming months. “I would not encourage anyone to be complacent or be unconcerned about the threats to the energy sector globally,” Joyce said. “As the [Ukraine] war progresses there’s certainly the opportunities for increasing pressure on Russia at the tactical level, which is going to cause them to reevaluate, try different strategies to extricate themselves.” The remarks came as Joyce briefed reporters about the agency’s annual year in review report, which focuses in part on Russian cyberattacks in Ukraine. Joyce said NSA has seen “spillover” from Ukrainian hacks to neighboring countries and particularly Poland due to its status as a supply channel to Ukraine. The report portrays cyberspace as a critical domain in the Ukraine war and notes that in the weeks leading up to and following Russia’s invasion at least seven new families of destructive data wipers were used.
  In this round up, we reveal which threat vectors cyber security experts believe will rise to prominence in 2023, and they offer their advice on how best to combat them. When asked in mid-2022 by Cyber Security Hub which threat vectors posed the most dangerous threat to their organizations, 75 percent of cyber security professionals said social engineering and phishing. Since the survey closed, multiple organizations such as Dropbox, Revolut, Twilio, Uber, LastPass and Marriott International have suffered from such attacks further highlighting the importance to cyber security practitioners of staying aware of phishing threat.
Contents: 1. Smart devices as a hacking target, 2. Phishing and social engineering, 3. Crime as-a-service, 4. Multiple threat vectors used in attacks, 5. Attacks on cloud security, 6. Third-party access risks, 7. Lack of cyber security knowledge, 8. Cyber attacks by nation states, 9. Smart devices as a hacking target
info@dslabcompany.com
Samsung IT Harrington Tower 716, Geumcheon-Gu Digital-Ro 9 Gil, Seoul(08511)