Whistic’s Post

World's largest aircraft lessor AerCap was hit by #ransomware. The extent of the damage is still unclear, but this once again raises the importance of #cybersecurity in all forms of transportations for the safety of the riding public. This reminds me of my work from a couple of years ago trying to improve #cybersecurity in the #ElevatorIndustry by adding requirements in the codes (standards) for #elevators and other moving conveyances. Together with colleagues from Elevator Industry Work Preservation Fund and ElevatorInfo we did a lot of work to add some serious measures for cybersecurity requirements, while facing fierce resistance from certain commercial entities. The result was an improvement in standards, but a lot more is needed. #elevatorsafety #cybersecurityawareness https://lnkd.in/egmCVPZ4

What happens when a cruise ship suffers a malware incident on its OT systems? On November 12 Christopher Stein, Lead Engineer, Maritime Cybersecurity, Royal Caribbean Group will speak about a real event where a cruise ship suffered a malware incident on its OT systems and causing massive disturbance of its essential systems. Human error, combined with multiple factors, can lead to the failure of the ship’s automation and navigation systems, limiting the ability to sail the ship and continue the cruise. Does the ship return to port? How do we get the ship back to an operational state? How could this have been prevented? https://lnkd.in/dnzSac2E Industrial Security Conference CPH https://lnkd.in/gbN5XFxp #otsec #maritimesec #malware

𝐏𝐢𝐜𝐭𝐮𝐫𝐞 𝐭𝐡𝐢𝐬: 𝐲𝐨𝐮’𝐫𝐞 𝐭𝐡𝐞 𝐜𝐚𝐩𝐭𝐚𝐢𝐧 🧑✈️ 𝐨𝐟 𝐚 𝐥𝐚𝐫𝐠𝐞 𝐜𝐨𝐧𝐭𝐚𝐢𝐧𝐞𝐫 𝐬𝐡𝐢𝐩, 𝐜𝐫𝐮𝐢𝐬𝐢𝐧𝐠 𝐭𝐡𝐫𝐨𝐮𝐠𝐡 𝐭𝐡𝐞 𝐒𝐮𝐞𝐳 𝐂𝐚𝐧𝐚𝐥. 🚢 Suddenly, it feels like your ship’s turning; yet the systems indicate that nothing’s amiss.   🚨 Is this a malfunction, or are you the target of a cyber-attack? 🚨   Now, the Ever Given (the container ship that ran aground and blocked the Suez Canal for six whole days in 2021) was, as far as we know, not hacked. That being said, ships being hacked is a very real possibility these days!   In fact, DNV reports that over 🌊 90% of maritime professionals 🌊 anticipate disruptions to ship and/or fleet operations due to cyber incidents.   In our latest Threat Talks episode, host Lieuwe Jan Koning is joined by special guest Hans Quivooij of Damen ⚓️ , as well as Threat Intel Specialist Luca C., as they continu their discussion from the ONE Conference: What can maritime companies do to make sure they don’t drown in the rising tide of marine cybercrime?   🎥 𝐓𝐮𝐧𝐞 𝐢𝐧 𝐚𝐧𝐝 𝐟𝐢𝐧𝐝 𝐨𝐮𝐭 𝐞𝐱𝐚𝐜𝐭𝐥𝐲 𝐡𝐨𝐰 𝐚 𝐛𝐨𝐚𝐭 𝐜𝐨𝐮𝐥𝐝 𝐛𝐞 𝐡𝐚𝐜𝐤𝐞𝐝! 🎥 https://lnkd.in/ezX_mUpY      #ONEConference #Cybersecurity #HackTheBoat #MaritimeSecurity #ZeroTrust

📱#TechToday | #Cybersecurity experts are raising concerns about a significant rise in #GPS "spoofing," a type of digital attack that can mislead #aircraft about their location and even interfere with their onboard systems. ➡ This new cyberattack can create problems in navigating to the destination, leading to complications. Read more 👉 https://lnkd.in/gwXNTEd8

Hack the Boat 🚢 ⚓️ 🛳️ IT vs OT: The two sides of marine cybercrime Did you know that the Port of Los Angeles faces 40 million ransomware, malware, and spear-phishing attacks monthly—double what it saw a few years ago?   While industries like banking and retail have long been cyber targets, maritime operations were previously less affected. This was due to the limited use of IT in ships, which mostly relied on operational technology (OT) and rarely connected to the internet.   Modern shipping operations however rely heavily on both Information Technology (IT) and Operational Technology (OT) for navigation, communication, and operational management. This reliance makes ships susceptible to cyber-attacks that target these technologies.   In this ‘Hack the Boat’ episode of our Threat Talks podcast, host Lieuwe Jan Koning is joined by special guest Hans Quivooij (CISO at Damen Shipyards) and Luca C. (Threat Intel Specialist) as they talk about the reality of cyber risks in the maritime industry.   With marine cybercrime steeply on the rise, what can maritime companies do to bring their IT and OT in line with today’s cybersecurity standards?   www.threat-talks.com #maritime #transportation #IT #OT

Stay Tuned for Chapter 1!!!

Can not be there 😥 But, if you can, do not miss Infosecurity Europe (4-6 June, Excel London) and meet Probely team there to get a deep insight about your Web App & API Security. #infosec #cybersecurity #webapplicationsecurity #APIsecurity #appsec #DevOps #Dast

Given what we know about threats to critical infrastructure and supply chain, I give the Congressman from NY kudos for his insistence on a thorough cyber investigation. "We cannot rule out foul play or malicious interference until every single component from that ship's electrical switchboards and computer networks is torn down and inspected for malicious code," Williams stated. "It's the 21st century—if this was a cyber attack, we have to get to the bottom of it." #dglawny #cybersecurity #privacylaw #privacylawyer #criticalinfrastructure #supplychain

🔐✨ #SecurityInsight: Lengthen to strengthen! Moving from a 6-character to a 12-character password can drastically enhance security, increasing the cracking effort from mere seconds to a near-impossible feat. Imagine choosing a number out of 100 versus locating one specific grain of sand in the vast Sahara desert. Boost your digital defense with more extended passwords. #CyberSafety #TechAdvice #EliteOps

Check out this article written by our President Maritime, Tore Morten Olsen, for Splash Maritime and Offshore News (splash247.com). He addresses the challenges that a more complex, regulated landscape for vessel operators has brought around applications and network security. Click the link below to find out more about the recent arrival of LEO services from #Starlink and #OneWeb and how this can help accelerate a digital strategy in the present day. https://lnkd.in/evnXwtpy #Maritime #LEO #Digitalisation #CyberSecurity