En.Portnews.Ru IAPH Calls for ISPS Code Update Amid Rising Maritime Cyber Threats
Article Content
- •IAPH's survey shows 83% of maritime stakeholders see cybersecurity as a major weakness.
- •The ISPS Code has not been significantly updated since its adoption in 2002.
- •Over 120 maritime incidents have been reported this year, highlighting security vulnerabilities.
The International Association of Ports and Harbors (IAPH) has urged the International Maritime Organization (IMO) to revise the International Ship and Port Facility Security (ISPS) Code due to increasing cybersecurity threats. A recent survey of 181 maritime stakeholders revealed that 83% identified cybersecurity and digitalization as weaknesses, with the code receiving an average effectiveness score of only 42.15 out of 100. The call for an update comes as over 120 incidents have been recorded in the Strait of Hormuz and significant attacks in the Black Sea and Gulf of Aden this year. The IAPH presented its findings at the World Ports Conference in London on November 5, 2026, emphasizing the need for updated guidance to address modern port operations and technology risks. The last major revision of the ISPS Code was in 2002, and stakeholders are advocating for mandatory security audits and a more risk-based approach to security. The IMO is set to discuss these issues at its upcoming Maritime Safety Committee meeting in December 2026.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Common questions
What specific weaknesses were identified in the survey?
When was the last update to the ISPS Code?
What actions are being proposed to improve maritime security?
Continue Reading
Volt Typhoon's Silent Train Network Targets US Critical Infrastructure The Chinese state-sponsored hacking group Volt Typhoon has been linked to a covert network called Silent Train, which has exploited at least four zero-day vulnerabilities over three years. This network utilizes rapidly rotating chains of compromised SOHO routers, IoT devices, and enterprise infrastructure to access…
GitLab Issues Emergency Patch for Critical RCE Vulnerability GitLab has released emergency patches for a critical remote code execution vulnerability, CVE-2026-97229, affecting its Community and Enterprise Editions. This flaw, stemming from an integer overflow in the CI/CD regular expression compiler, allows unauthenticated attackers to execute arbitrary code via specially…