Bankinfosecurity Maritime Coalition Launches Vulnerability Database for Critical Systems
Article Content
- •The Blue Initiative database catalogs nearly 30,000 maritime vulnerabilities.
- •Over 2,000 vulnerabilities are rated critical, with 580 known to be exploited.
- •The initiative is a collaboration among major maritime cybersecurity organizations.
The Blue Initiative, a new public vulnerability database, was launched on October 26, 2026, to catalog IT and operational technology vulnerabilities affecting the maritime sector. Developed by Cydome, ClassNK, Bureau Veritas, Rakuten Maritime, and MTS-ISAC, the database aims to help maritime organizations identify and prioritize vulnerabilities that could threaten their systems. It currently contains nearly 30,000 entries, with over 2,000 rated as critical based on their CVSS scores. The database is designed to provide a focused view of risks relevant to specific vessels, improving vulnerability management. Users can browse vulnerabilities, filter results, and receive alerts for new entries. The initiative is open for contributions from the maritime community. The urgency of this launch is underscored by recent cyberattacks on oil tankers linked to unpatched vulnerabilities.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (9)
Following this threat?
Track Mirai and Bureau Veritas in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What types of vulnerabilities are included?
How can organizations contribute to the database?
What is the significance of the critical vulnerabilities listed?
Continue Reading
Critical PHP Vulnerabilities Exploited Before Public Disclosure Two critical vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619, were exploited before their public disclosure on October 21, 2026. Amazon Threat Intelligence reported that attempts to exploit these vulnerabilities began on October 17, 2026, targeting its MadPot honeypot network. Both…
Cling Botnet Exploits Realtek SDK Flaw Using STUN Traffic for C2 The Cling botnet has been identified as exploiting a critical vulnerability (CVE-2021-35394) in the Realtek Jungle SDK, allowing attackers to deploy malware that disguises command-and-control (C2) traffic as legitimate STUN protocol exchanges. This vulnerability, which has a CVSS score of 9.8, was first exploited…