Rising Cyber Security Threats in the Maritime Industry: Key Insights and Upcoming USCG Regulations

In the maritime domain, cyber security threats have been on the rise, with Initial Access tactics being the most prevalent in the first six months of the year. According to Marlink’s Security Operations Center (SOC) report, these tactics accounted for 48% of the 204,763 incidents, primarily involving phishing fraud and spam abusive content. Command & Control (C2) tactics followed closely at 36%, driven largely by the execution of malicious files and links, while Execution and Defence Evasion tactics made up 14% of the total incidents. Although Exfiltration and Credential Access attacks were less frequent, they still pose significant risks, emphasizing the need for strong defenses against various cyber threats.

The analysis underscores the relentless nature of cyber attackers targeting multiple stages of the attack chain, from phishing to execution, and ultimately, command and control. The U.S. Coast Guard (USCG) is set to introduce new cyber security rules that will impact the maritime and offshore energy industries. To learn more about these rules and their implications for vessel owner/operators, OEMs, and shipyards, individuals in New Orleans on November 13, 2024, can sign up for a free lunch and moderated conference discussion featuring key speakers such as Rear Admiral Wayne R. Arguin Jr. from the U.S. Coast Guard, Dain Detillier from Harvey Gulf, LLC, Stewart Alpert from Hornblower Group, Angeliki Zisimatou from the American Bureau of Shipping, and Phillip Bannerman from Marlink.

Overall, the cyber security landscape in the maritime sector is evolving rapidly, with attackers showing no signs of slowing down in their efforts to breach defenses and gain unauthorized access to critical systems. The upcoming introduction of new cyber security rules by the USCG highlights the need for industry stakeholders to stay informed and prepared for potential threats. The conference in New Orleans offers a valuable opportunity for professionals to engage with experts and peers, gaining insights into the latest developments and best practices in maritime cyber security.

Source