Maritime coalition launches database for ship cyber flaws

An industry coalition has launched a new database dedicated to IT and OT vulnerabilities for the maritime sector. Blue Initiative, announced on 26 October 2026, is a collaboration between Cydome and Rakuten Maritime, with Bureau Veritas, ClassNK and the Maritime Transportation System Information Sharing and Analysis Center (MTS-ISAC).

The group says the Maritime Vulnerabilities Repository (MVR) will be the first to list vulnerabilities specifically relevant to maritime IT and operational technology, helping ship operators prioritise vulnerability management and alerting more proactively. Proposed entries will be reviewed by researchers from Cydome and other Blue Initiative partners before publication, and users will be able to browse CVEs, filter by equipment or vendors, access expert insights and subscribe for updates. Vulnerabilities will be published only once a patch is available.

Cydome CEO Nir Ayalon framed the project as addressing a critical vulnerability gap in a shifting threat landscape, arguing the public repository will give IT and cyber teams, vendors and research facilities a focused view of risks relevant to their vessels. The MTS-ISAC’s Christy Coffey echoed the need for continuous cyber resilience as ships' onboard systems face emerging vulnerabilities.

The article notes ongoing maritime cyber activity: the US Coast Guard and FBI boarded two Gulf of Mexico oil tankers in August after cyber-attacks that reportedly affected IT and OT networks including propulsion and navigation, and the n0n extortion group added global maritime targets to its leak site in October, though victims have not publicly confirmed incidents.

Bureau Veritas’ Panagiotis Anastasiou stresses that vulnerability management must be ongoing, as information is often scattered across general databases and vendor advisories.