Critical ports and maritime systems are under attack
Maritime infrastructure is increasingly in the crosshairs of state-affiliated and independent nefarious cyber actors. Breaches of IT and OT systems can bring operations at critical ports to a standstill and even control the operation of vessels and equipment.
7/31/25
Ports must prepare now for ‘forever war’ with cyber threats, including infrastructure targeting from China
Vulnerable ports must prepare for “forever war” with malicious cyber actors who eye the sector – with frequently outdated systems supporting critical civilian and military operations – as ripe for attack, experts said at a Thursday event urging imperative action to better secure maritime infrastructure. The McCrary Institute for Cyber and Critical Infrastructure Security, which runs Threat Beat, and Booz Allen hosted the discussion to launch the report “Anchored in Zero Trust: Taking Action to Create Resilient U.S. Port Infrastructure” and spotlight its findings and recommendations.
7/29/25
Anchored in zero trust: Taking action to create resilient U.S. port infrastructure
Amid ongoing cyber intrusions targeting U.S. critical infrastructure, foreign adversaries are now extending their reach into U.S. ports, prompting urgent need for stronger maritime cybersecurity measures, according to a new report from Booz Allen and the McCrary Institute for Cyber and Critical Infrastructure Security. Read on for a summary of the report and why it demands immediate attention.
7/21/25
Ports at risk from outdated policy and lack of ‘dedicated strategic attention’ to cyber threats, NATO report warns
Blurred lines of responsibility and policy that hasn’t kept up with the threat environment have put global ports under increased risk as the sector comes under “unprecedented cybersecurity threats from state-linked actors,” a new NATO report says. The Cooperative Cyber Defence Centre of Excellence policy briefunderscores that the current NATO Alliance Maritime Strategy, a 2011 document that analysts have called sorely outdated, lacks formalized frameworks “for engagement with commercial port operators, despite their critical role in maritime security and NATO logistics operations.”
7/17/25
New maritime cybersecurity regulations go into effect
New cybersecurity regulations for the maritime sector went into effect Wednesday for all U.S.-flagged vessels, offshore facilities such as energy projects and maritime transportation facilities handling certain volumes of cargo and ships. The Coast Guard released the Cybersecurity in the Marine Transportation System rule Jan. 17, requiring covered entities to create a cybersecurity plan, designate a cybersecurity officer to oversee plan implementation and updates and have a response plan with “instructions on how to respond to a cyber incident and identifies key roles, responsibilities and decision-makers amongst personnel,” among other measures.
6/4/25
Maritime industry hit by more AI-assisted cyberattacks, ‘unprecedented’ attack speed
The maritime industry is weathering a surge in AI-assisted cyberattacks and “unprecedented” attack speed in which an adversary moves through a targeted network, according to a global maritime cyber threat report recently released by Marlink’s Security Operations Center. “The average breakout time — the period it takes for an adversary to move laterally within a network — has been significantly reduced, now taking less than an hour in most incidents, with some cases occurring in under a minute,” the report states. The cybercriminal ecosystem also has become more organized as they “increasingly turned to access broker services to gain entry into corporate environments.”
5/20/25
Coast Guard calls for better OT security to mitigate ‘significant supply-chain risk’ posed by Chinese cranes
Coast Guard Cyber Protection Team (CPT) Operations noted a 71% year-to-year increase in cyberattacks that used stolen or compromised credentials while finding that “baseline cybersecurity posture has improved” across the marine transportation system (MTS), according to a new report from U.S. Coast Guard Cyber Command. The fourth annual Cyber Trends and Insights in the Marine Environment (CTIME) report said that “supply-chain risks and other observed vulnerabilities exist within ship-to-shore cranes manufactured in China” as better technology on vessels has expanded the attack surface. “While there are significant operational benefits, this creates cybersecurity risks that did not exist before,” the report states. “Cyberattacks impacting a company’s enterprise network are now far more likely to impact shipboard Information Technology (IT) systems and potentially impact vessel operations.”
Read More
