Cydome Security 🛡️⚓

🔊🔔 This week's maritime cybersecurity newsletter is here! 𝗦𝗼𝗺𝗲 𝗼𝗳 𝘁𝗵𝗶𝘀 𝘄𝗲𝗲𝗸'𝘀 𝗺𝗮𝗶𝗻 𝗻𝗲𝘄𝘀: ▶ New vulnerability in NAVTOR NavBox discovered by Cydome ▶ New vulnerabilities in Palo Alto Networks PAN-OS And much more: buff.ly/w5CiJTQ

🔊🔔 Our weekly maritime cybersecurity update is out - read it now to get informed: buff.ly/hBerOHg

Let's meet at Posidonia next week, where teams from both Cydome and Rakuten Maritime will be available to present our solution.

With Cydome and Rakuten Maritime, vessels have seamless protection for both their IT and OT environments throughout the vessel lifecycle, unified threat management, lower operational costs, and full compliance with the latest regulatory requirements.

𝗪𝗲’𝗿𝗲 𝗲𝘅𝗰𝗶𝘁𝗲𝗱 𝘁𝗼 𝗮𝗻𝗻𝗼𝘂𝗻𝗰𝗲 𝗼𝘂𝗿 𝗽𝗮𝗿𝘁𝗻𝗲𝗿𝘀𝗵𝗶𝗽 𝘄𝗶𝘁𝗵 𝗥𝗮𝗸𝘂𝘁𝗲𝗻 𝗠𝗮𝗿𝗶𝘁𝗶𝗺𝗲 𝘁𝗼 𝗽𝗿𝗼𝘃𝗶𝗱𝗲 𝗮 𝘀𝗲𝗰𝘂𝗿𝗲 𝗱𝗶𝗴𝗶𝘁𝗮𝗹 𝗯𝗮𝗰𝗸𝗯𝗼𝗻𝗲 𝗮𝗰𝗿𝗼𝘀𝘀 𝘁𝗵𝗲 𝗳𝘂𝗹𝗹 𝗹𝗶𝗳𝗲𝗰𝘆𝗰𝗹𝗲 𝗼𝗳 𝘃𝗲𝘀𝘀𝗲𝗹𝘀!

Let's get together in Posidonia next week 🚢 Our team will be on-site in Athens and ready to discuss how to secure your maritime operations and maintain full compliance without adding extra stress to your IT teams. Contact us or drop a message below to schedule a meeting!

🔊🔔 This week's maritime cybersecurity newsletter is here! Read it now to get informed: buff.ly/pY9oNWR

🔊🔔 Our weekly maritime cybersecurity update is out - read it now to get informed: buff.ly/XSorMWF

A big thank you to the ABB team for the great collaboration.

𝐖𝐞 𝐚𝐫𝐞 𝐞𝐱𝐜𝐢𝐭𝐞𝐝 𝐭𝐨 𝐚𝐧𝐧𝐨𝐮𝐧𝐜𝐞 𝐨𝐮𝐫 𝐧𝐞𝐰 𝐩𝐚𝐫𝐭𝐧𝐞𝐫𝐬𝐡𝐢𝐩 𝐰𝐢𝐭𝐡 𝐀𝐁𝐁! By teaming up to bring context-aware cybersecurity to complex IT and OT networks, we are empowering IT teams to secure their critical operations with confidence.

📢 𝐇𝐞𝐚𝐝𝐢𝐧𝐠 𝐭𝐨 𝐑𝐢𝐬𝐤𝐭𝐞𝐜𝐡 𝐌𝐚𝐫𝐢𝐧𝐞 2026? Marc Oppenheim, our Regional Business Development Director, will be there to join discussions around digital complexity, operational resilience, and cyber risk in the maritime industry. Contact us to schedule a meeting.

🔊🔔 Our weekly maritime cybersecurity update is out - read it now to get informed: buff.ly/zJdv0rr

🔊🔔 Our weekly maritime cybersecurity update is out - read it now to get informed: buff.ly/gHHT9RU

Bottom line: true resilience comes from protecting the whole attack surface, not just addressing a single system. 👉️ 𝐑𝐞𝐚𝐝 𝐟𝐮𝐥𝐥 𝐫𝐞𝐩𝐨𝐫𝐭 𝐡𝐞𝐫𝐞: buff.ly/SKNQCYb

However, our research team recently analyzed the “digital signature” of vessels and found that a vessel location can still be visible externally through the VSAT, even without transmitting an AIS signal. Worse, an exposed VSAT can also serve as an entry point for a cyber attack.

🚨 𝐍𝐞𝐰 𝐂𝐲𝐝𝐨𝐦𝐞 𝐫𝐞𝐬𝐞𝐚𝐫𝐜𝐡: 𝐭𝐮𝐫𝐧𝐢𝐧𝐠 𝐨𝐟𝐟 𝐀𝐈𝐒 𝐝𝐨𝐞𝐬 𝐧𝐨𝐭 𝐦𝐚𝐤𝐞 𝐭𝐡𝐞 𝐯𝐞𝐬𝐬𝐞𝐥 Disabling AIS has become an increasingly common tactic for vessels transiting high-risk zones.

Have any questions? Feel free to reach out to our maritime cyber research team!

▶️ CISA Adds Critical Apache ActiveMQ RCE (CVE-2026-34197) to actively exploited catalog. The flaw exists in the Jolokia JMX-HTTP bridge and allows attackers to execute arbitrary OS commands on the broker’s JVM.

🔊Attention maritime IT managers and security professionals! 🔔 Maritime cybersecurity updates for this week: