Cydome and ClassNK, along with Bureau Veritas, MTS-ISAC, and Rakuten Maritime, announced the start of a new collaboration called the "Blue Initiative," aimed at providing the first public database of cyber vulnerabilities specific to the maritime industry. This database will be freely accessible through the website blue-initiative.org.
Challenges in Identifying Vulnerabilities
With the increasing number of identified vulnerabilities (over 350,000 CVEs published and 200 new entries each day), identifying and prioritizing system patches and the cyber risks associated with each organization has become a very complex task. This new initiative is designed to help shipping companies more effectively address the cyber vulnerabilities that affect their specific systems and equipment.
Resources and Expertise
The CEO of Cydome, Niri Aylon, stated: "Identifying vulnerabilities that are truly significant for maritime systems is a major challenge, and our goal with the Blue Initiative is to provide a public and reliable source of vulnerabilities related to the maritime industry. This database offers IT and cyber teams, vendors, and research centers a centralized view of the risks associated with their specific vessels, making vulnerability and risk management more effective and faster than ever before."
This database includes entries that have been reviewed and validated by cyber researchers from Cydome and participating partners. Users will be able to:
- Browse vulnerabilities and their details
- Filter vulnerability searches based on related equipment or vendors
- Access expert information on vulnerabilities and their impacts
- Subscribe for updates and alerts on new vulnerabilities
Currently, vulnerabilities are typically published when a patch is available, and the Blue Initiative connects this information to vendors and specific systems used by maritime users, allowing them to quickly access patches and preventive measures.
