Cyberattack on VLCC Highlights Maritime Cybersecurity Risks
Article Content
- •A VLCC and an LNG carrier experienced cyberattacks in August 2026.
- •The U.S. Coast Guard and FBI responded to the incidents without confirming operational disruptions.
- •The attacks highlight vulnerabilities in maritime cybersecurity and coincide with proposed regulatory changes.
In August 2026, a very large crude carrier (VLCC) was reportedly targeted by a cyberattack while en route to Texas. The U.S. Coast Guard and FBI intervened, boarding the vessel to assess potential compromises to its operational technology and information systems. Iranian state media claimed that attackers accessed critical systems, including propulsion and cargo management, leading to a communications blackout. Another LNG carrier also experienced control system disruptions, reversing course after losing access to internal systems. The incidents underscore vulnerabilities in the Maritime Transportation System and coincide with the proposed MTS CYBER Act of 2026, which aims to enhance cybersecurity regulations in the maritime sector. No physical damage or operational disruptions were confirmed, but the incidents raised alarms about the potential for information warfare. Stakeholders are advised to evaluate their cybersecurity practices in light of increased scrutiny.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Common questions
What systems were compromised?
Who is responsible for the attacks?
What actions should maritime companies take?
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…