Last month maritime trend news
October 01, 2023 - October 31, 2023
Maritime Cybersecurity News   by CYTUR
Highlight
Monthly Hot Trend
News
IACS enhances requirements on cyber security
  As IACS points out, in an increasingly digitalised and interconnected world, where the maritime industry continues to adopt, at pace, new digital technologies, it remains imperative to focus on cyber threats and attacks that could compromise operations, safety and data integrity.
To address the need to enhance the cyber resilience of ships, last year IACS published UR E26 “Cyber Resilience of Ships”, and UR E27, “Cyber Resilience of On-Board Systems and Equipment”, which apply to new ships from 1 January 2024.
Since the publication of these requirements, and as experience of cyber security oversight in the maritime sector grows, the need for a standardized approach to survey requirements has been identified along with further enhancements resulting from industry feedback.
Monthly News
News
South Korea warns against cyber security threat from North Korea
  It has come to light that North Korea has set its sights on shipbuilding companies as part of its strategic efforts to bolster its naval military capabilities. South Korea has reported that North Korea is currently engaged in a series of extensive hacking attacks.
The objective of these attacks is to infiltrate internal systems and distribute phishing emails to unsuspecting employees. Once successful, the hackers proceed to install malicious code, thereby compromising the targeted networks.
According to South Korean authorities, the attack is believed to have been driven by North Korea’s requirement for shipbuilding instructions, specifically pertaining to the construction of medium to large warships.
  Bureau Veritas (BV) has released a new report exploring the benefits of digital collaboration in the maritime sector, and the potential gains available from increased data sharing among stakeholders.
Written by consultancy Thetius, the report, titled Common Interest, aims to benchmark shipping’s progress in the use of technology to support collaboration on decarbonisation goals and looks at how industry frontrunners are dealing with the technical, legal, financial and cultural barriers to digitalisation.
The publication identifies a number of key areas where the authors believe that digital collaboration has the potential to open new opportunities for growth and optimisation.
Article
Putting the Port of Nagoya Cyberattack in Context
  The recent cyberattack on the Port of Nagoya has once again highlighted both the criticality of the maritime industry and how the threat of ransomware is not going away. One of the busiest ports in Japan, the Port of Nagoya was reportedly forced to halt cargo loading operations in early July following a ransomware attack.
Threat actors associated with Lockbit 3.0 claimed responsibility. While the port has since been able to recover operations, this event once again underscored that cybersecurity is at the core of maintaining secure maritime infrastructure and facilitating robust economic supply chains. From the typical IT business networks that facilitate administrative processes like any other industry, to the operational technology (OT) assets that handle the movement of cargo around the facility, the attack surface and significance of ports can represent an attractive target for a variety of bad actors.
   Shipping is an exciting and relatively easy target for cyber hackers who are looking for a quick thrill, concludes a new report exploring the state of cybersecurity in the maritime industry. Citing a 350 percent increase in ransom demands in the past year and an average payment of $3.2 million, the report prepared by law firm HFW and maritime cybersecurity company CyberOwl sees progress while warning “there is still huge room for improvement.”
The report highlights the dramatic growth in the use of technology, citing the rapid growth in the amount of data and functions incorporated into the systems, along with the vital link between ships and the home office. While they believe a better understanding is emerging of the risks, the report also highlights that as shipping companies as now testing advanced satellite communications such as Low Earth Orbit networks to improve connectivity, they are also widening the opportunity for cyber criminals to infiltrate backdoor vulnerabilities.
   A mid growing cyber risks, engineering cyber security into vessel design will ensure compliance with the upcoming IACS Unified Requirements and enable strong protection against external threats while ensuring compliance with new regulations during the operational phase.
As digitalization makes great strides in the shipping world, connectivity and system integration expose ships to growing cyber risks. This means that cyber security must be engineered into the design of every new vessel. Suppliers must deliver secure sys-tems, and yards must combine these systems into a secure, painstakingly documented overall concept that provides a strong foundation for cyber-secure operation over the lifetime of the vessel.
   In an age when technology appears to rule everything, cybersecurity is more crucial than ever for the marine industry. Technologies are required for ship navigation and maintenance, and their effective use is critical for crew safety.
Electronic operational technology (OT) systems that physically operate the ship are being integrated with information technology (IT) systems as maritime technology progresses. Ships will need to be more careful as they upgrade their systems to include more complex, electronically controlled components because IT systems are subject to attack and outside control. In this post, we’ll go through the different kinds of cyber attacks in the maritime industry and present some best practices to help crew members prepare for attacks and misuse. Mariners may be able to lessen the likelihood of cyber threats by understanding how and why they occur.
info@cytur.net
Samsung IT Harrington Tower 716, Geumcheon-Gu Digital-Ro 9 Gil, Seoul(08511)