Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems

Several organizations have teamed up to create Blue Initiative, a public vulnerability database that indexes IT and OT vulnerabilities impacting the maritime industry.

Blue Initiative is the work of cybersecurity company Cydome, Japan’s ClassNK classification society, testing and certification giant Bureau Veritas, the Maritime Transportation System Information Sharing and Analysis Center (MTS-ISAC), and Rakuten Symphony’s maritime cybersecurity and digital solutions unit, Rakuten Maritime.

The new project aims to help maritime organizations identify and prioritize vulnerabilities that could threaten their systems.

“Identifying which vulnerabilities actually matter to the systems maritime companies operate is a major challenge,” said Cydome CEO Nir Ayalon, “and our vision with the Blue Initiative is to have a public and open single source of truth for maritime-related vulnerabilities.

“This will provide IT and cyber teams, vendors and research facilities a much more focused view of risks relevant to their specific vessels, making vulnerabilities and risk management much more effective and faster than before,” Ayalon added.

The Blue Initiative website is freely accessible and contributions from the community are welcome. Vulnerabilities listed in the index are reviewed by Cydome researchers and contributing partners.

Users can browse vulnerabilities, for specific flaws, and filter results. Users can also receive updates and alerts for new security holes added to the index.

At the time of writing, the database contains nearly 30,000 entries, including more than 2,000 rated critical based on their CVSS score. More than 580 vulnerabilities are known to be exploited in attacks.

Of the total, 37 vulnerabilities, including many discovered this year, affect products specifically designed for ships and ports.

Most entries are pulled automatically from CISA’s ICS advisories and KEV catalog and mapped to maritime systems, while a smaller number include hand-written analyst notes.

Related : Cyberattacks on Two Oil Tankers Prompt Coast Guard, FBI to Board Vessels

Related : Coast Guard Establishes Office of Maritime Cybersecurity Policy

Related : Dutch Port Hacker Sentenced to Prison

iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18

Apple patched 286 vulnerabilities in iOS and macOS 27.2 and brought the fix for an exploited CoreGraphics zero-day to older iPhones.

Industrial Vendors Check Products for PHP2Shell Vulnerabilities

Siemens, Schneider Electric, ABB and others have confirmed that some of their products are affected by the PHP2Shell vulnerabilities.

PHP2Shell Exploitation Moves From Probes to Working Shells

Attackers successfully exploited the PHP2Shell flaws against honeypots, launching 35 shells from two IP addresses on October 24.

Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages

An out-of-bounds write in Google’s Brotli decoder affects Node.js, .NET, PowerShell, and Python packages, and can lead to code execution.

Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge

Researchers tie PHP2Shell attempts to a Mirai botnet and show an ASLR bypass, but no successful compromise has been confirmed yet.

Attackers Exploit Third Arista VCO Zero-Day in Four Months

The critical-severity SQL injection flaw allows attackers to access privileged internal functionality and gain operator privileges.

Atlassian Patches 75 Flaws in Data Center and Server Products

Atlassian’s October bulletin lists 176 vulnerability entries, including 14 critical-severity issues, all in third-party components.

Cybersecurity Funding

Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform

The Amsterdam-based company plans to use the funding for research and development and commercial expansion in Europe and the Middle East.