Cydome, ClassNK, Bureau Veritas, MTS-ISAC and Rakuten Launch the Blue Initiative
Cubierto por 3 fuentesPublicado
Cydome, ClassNK, Bureau Veritas, MTS-ISAC and Rakuten Maritime announced a collaboration called the Blue Initiative, offering the first public database dedicated exclusively to cyber vulnerabilities in IT and OT devices relevant to the maritime industry. The platform is freely accessible through the website blue-initiative.org.
A growing problem
The initiative's backers note that the sheer volume of vulnerabilities reported worldwide makes it difficult to identify which ones actually affect each maritime operator's systems. According to them, more than 350,000 CVEs have been published, with around 200 new entries added daily, making it increasingly complex for shipping organizations to prioritize patches and assess risk.
How the repository works
The new Maritime Vulnerabilities Repository (MVR) allows operators to search for vulnerabilities by equipment, manufacturer or system, filter by specific vendors, access analyst notes prepared by specialists on selected entries, and subscribe to alerts on new vulnerabilities. According to Splash247, the platform currently indexes close to 30,000 vulnerabilities, of which more than 2,000 are classified as critical, drawing on public security advisories combined with automated classification and specialized analysis.
Validation and technical backing
MVR entries are reviewed by cyber researchers from Cydome and the contributing partners, who validate and refine the information before it is made publicly available. Nir Ayalon, CEO of Cydome, stated that identifying which vulnerabilities truly matter to the systems operated by maritime companies is a major challenge, and that the Blue Initiative's goal is to become a public, open source of truth for this sector. Naoki Saito of ClassNK stressed that effective vulnerability management begins with knowing which issues affect the systems in operation, while Panagiotis Anastasiou of Bureau Veritas Marine & Offshore noted that cyber resilience for ships requires an ongoing process throughout their entire operational life.
Open call for participation
The initiative's backers described the Blue Initiative as an open, freely accessible industry collaboration, and invited other maritime sector organizations, equipment manufacturers and cybersecurity specialists to join in order to expand the database. Ayalon further explained that, in most cases, vulnerabilities are published once a patch is available, following standard responsible disclosure processes, and that the initiative links this information to the specific vendors and systems used by maritime operators to enable a rapid response.
