MARITIME CYBER SECURITY Archives - Page 12 of 40 - SHIP IP LTD

Information Fusion Centre (IFC) released its latest infographic, providing an overview of incidents against ships in the Singapore Strait as of 5 October 2021.

According to the inforgraphic below, there are a total of 2 incidents that happened in the month of September, which occurred in the eastbound lane of the Traffic Separation Scheme in the Singapore Strait.

Of note, in one incident, perpetrator reportedly carried a gun-like object.

SOURCE READ THE FULL ARTICLE

https://safety4sea.com/infographic-2-incidents-in-singapore-strait-during-september/


Royal Navy’s HMS Trent is bound for the waters of the Gulf of Guinea, as it heads for security patrols and a mission to support allies in West Africa.

HMS Trent is now turning its attentions south to the tropical waters of the Gulf of Guinea for the next three months as it becomes the first Royal Navy ship to sail to the region in three years.

With Royal Marines of 42 Commando on board, the ship will carry out a range of joint exercises and training to strengthen ties and develop plans for future operations in the region.

Trent will visit Nigeria, Ghana, Senegal, Gambia and Cape Verde, and will take part in French-led multinational exercises that will bring together international partners in the area, known as Exercise Grand African Nemo.

SOURCE READ THE FULL ARTICLE

https://safety4sea.com/royal-navy-to-support-maritime-security-effort-in-gulf-of-guinea/


Currently, there are about 100,000 seafarers stranded at sea beyond their regular stints of typically 3-9 months, according to the International Chamber of Shipping (ICS). Many of them do not even have a day’s break on land, while another 100,000 are stuck on shore, unable to board the ships. This year’s World Maritime Day focuses on the struggles that seafarers face today and provides a message of support.

For a better glimpse into this dire situation, during summer almost 9% of merchant sailors were stuck aboard their ships beyond their contracts’ expiry, according to data compiled by the Global Maritime Forum non-profit group from 10 ship managers together responsible for over 90,000 seafarers. The maximum allowed contract length is 11 months, as stipulated by a U.N. seafaring convention.

This crew change crisis derives from restrictions imposed by major maritime nations across Asia, such as South Korea, Taiwan and China, which host many of the world’s busiest container ports. More specifically, in these countries, requirements range from mandatory testing for crews who come from or have visited certain countries, to outright bans on crew changes and berthing operations.

SOURCE READ THE FULL ARTICLE

https://safety4sea.com/cm-world-maritime-day-2021-seafarers-are-the-core-of-shippings-future/


Nautilus International is urging the UK government to waive certain medical patents to ensure greater access to Covid-19 vaccines worldwide, particularly in the global south.

Namely, in a letter addressed to prime minister Boris Johnson and maritime minister Robert Courts, Nautilus general secretary Mark Dickinson calls on the UK to back a waiver of the usual patent rights offered under the World Trade Organization’s TRIPS agreement, in order to help increase manufacturing and access to Covid vaccines around the world.

Studies from the UK, Southeast Asia and Latin America have also shown that workers transporting people and goods are at a heightened risk of contracting serious Covid infections and are much more likely to die.

Moreover, the pandemic has had a serious impact on the welfare of key transport workers travelling across international borders. At the start of the year, for example, around 400,000 seafarers were stranded on ships, working long past the end of their contracts and unable to be repatriated.

SOURCE READ THE FULL ARTICLE

https://safety4sea.com/nautilus-urges-uk-to-support-global-vaccine-patent-waiver/


The State of California and the Port of Los Angeles are providing $12 million in funding to AltaSea, a nonprofit corporation, to fund the construction of a new blue economy ocean research and development centre.

Berth 58 – the site of the initial 60,000 square feet of the planned 180,000 feet of the Center of Innovation at AltaSea – will be the first fully renovated structure on AltaSea’s 35-acre campus at the Port of Los Angeles.

The centre will house ocean-focused businesses specialising in sustainable aquaculture, offshore renewable energy, and underwater robotics. Construction is expected to commence by mid-2022 and be completed in the first half of 2023.

AltaSea’s signed anchor tenants include the University of Southern California, the Southern California Marine Institute (made up of 23 universities, colleges, and institutes), Braid Theory, Holdfast Aquaculture, Montauk Technologies, and Pacific Mariculture.

Also among the tenants is the Ocean Exploration Trust (OET) and the research vessel Nautilus, which docks at AltaSea. OET has plans to build a 10,000 square foot interactive research and educational centre at AltaSea.

“AltaSea’s focus on the rapid growth of the blue economy adds a new dimension to our pursuit of sustainable solutions and expands the diversity of jobs across our port ecosystem,” said Port Executive Director Gene Seroka.

“The blue economy will not only provide workers with pathways to sustain and grow their professional and personal lives, but these jobs will allow them to be a crucial part of the solution to some of the world’s most challenging issues, including climate change.”

SOURCE READ THE FULL ARTICLE

$12m in funding for LA ocean research and development centre


A remotely operated harbour tug developed by Keppel Offshore & Marine has become the first such vessel in the world to receive the Remote Control Navigation Notation from class society ABS.

A trial of the 65-metre tug, controlled from a remote location at the Maritime and Port Authority of Singapore’s Maritime Innovation Lab, was successfully performed in April 2021. The second phase of the project, scheduled for late 2021, will see the vessel perform autonomous collision avoidance tasks while under remote supervision. The Maju 510 tug is owned and operated by Keppel O&M’s joint-venture company Keppel Smit Towage.

“As the overall system integrator, Keppel O&M is able to provide technology solutions and integrate best-in-class systems to offer customisable remote and autonomous functions for vessels,” said Tan Leong Peng, Managing Director (New Builds), Keppel O&M.

“With the offshore and marine sector evolving rapidly, we are leveraging our engineering expertise and harnessing advanced technologies to stay at the forefront of the industry. In line with Keppel’s Vision 2030, we are also collaborating with the Keppel ecosystem of companies, such as M1 with its connectivity solutions, to enhance our value add.”

ABS recently published its Guide for Autonomous and Remote-Control Functions, which introduced the REMOTE-CON notation and another recognising autonomous functions. The Guide sets out a goal-based framework for the implementation of these technologies on vessels and offshore units.

The Guide’s goal-based framework also covers interactions with relevant stakeholders such as port authorities and other vessels, using a risk-based approach to determine the requirements for the assessment and implementation of autonomous and remote-control functions.

SOURCE READ THE FULL ARTICLE

Keppel O&M tug granted remote control notation


Daewoo Shipbuilding & Marine Engineering (DSME) has been awarded a CyberSafety Product Design Assessment (PDA) for its DS4 Smart Platform by classification society ABS.

“We are pleased to have earned the ABS CyberSafety PDA to demonstrate the security of our DS4 Smart Platform. Digitalisation of fleet data is of benefit to owners and allows for condition-based maintenance strategies to be developed without increasing cyber security risk,” said Choi Dong Kyu, DSME Executive Vice President.

The DS4 Smart Platform collects data from equipment and systems on board a vessel for processing and visualisation to provide operational information to the ship operator. The ABS CyberSafety PDA process included a review of the system’s vulnerabilities listed in the vendor report and verification of mitigation measures undertaken during type testing.

“Increased levels of connectivity and reliance on more digitally-enabled systems introduce risks into the maritime supply chain and downstream owners,” said John McDonald, ABS Executive Vice President and Chief Operating Officer.

“Addressing risk in the supply chain allows the owner to mitigate potential negative impacts when that equipment is integrated on board vessels or offshore asset. The ABS CyberSafety PDA gives the owner installing the system confidence that the known vulnerabilities can be managed to minimise the impact on the vessel’s cyber security posture, while providing useful operational information.”

SOURCE READ THE FULL ARTICLE

DSME data platform completes ABS cyber assessment


Jan De Nul Group has moved its entire fleet of 82 vessels and jack-up barges to a new connectivity set-up, rolling out VSAT from Castor Marine with Iridium L-band back-up following the agreement of a long-term contract.

The Group managed to successfully migrate 98% of the fleet within three months of signing the deal, with up to six migrations taking place per day, the companies said.

The vessels have implemented a tailored VSAT system, with quality of service specified on the VLAN level. Bandwidth can be scaled up as required, based on ad hoc demands from each vessel.

Along with the VSAT and Iridium services, Castor Marine delivered 15 new Sailor 900 VSAT antennas and Sailor 4300 Iridium Certus antennas to replace existing hardware onboard. For the newbuild offshore jack-up installation vessel Voltaire and the offshore heavy lift vessel Les Alizés, Castor Marine supplied a set of antenna systems from the recently launched Sailor 1000 XTR VSAT range, including below deck equipment.

“It is nice to work with an agile and technically advanced partner. Flexibility is very important to Jan De Nul to cater for temporary project upgrades and downgrades. Castor Marine monitors these developments and communication lines are very short. We attach great importance to mutual trust. So far, everything is going as desired with our new Ku- and L-band supplier,” said Nils Crabeel, Communication Manager at Jan De Nul Group.

SOURCE READ THE FULL ARTICLE

Jan De Nul moves fleet to new connectivity system


Intellian has signed a new contract worth 71.1 billion won (approx. $61 million) with satellite operator SES, to build antennas for the O3b mPOWER medium Earth orbit (MEO) satellite network, to be located 8000 km above the Earth’s equator.

The deal covers antennas for both terrestrial and marine use in various sizes.

SES plans to introduce the O3b mPOWER service in the first half of next year, launching additional satellites to supplement its existing O3b service.

The new satellite network is expected to provide communication services between 50Mbps and 20Gbps using the Ka-band frequency, through a total of 20 medium-orbit communication satellites located 8000km above the Earth’s equator.

 

SOURCE READ THE FULL ARTICLE

Intellian to build SES MEO antennas in $61m deal


actively exploited in the wild.

Apache Software Foundation has released HTTP Web Server 2.4.51 to address an actively exploited path traversal vulnerability (CVE-2021-41773) that was only partially addressed with a previous release.

An attacker can trigger the flaw to map URLs to files outside the expected document root.

“A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the expected document root.” reads the advisory. “If files outside of the document root are not protected by “require all denied” these requests can succeed. Additionally this flaw could leak the source of interpreted files like CGI scripts.”

The vulnerability affects only version 2.4.49, earlier versions are not impacted. A few days ago, Apache released Apache HTTP 2.4.50 to address the CVE-2021-41773

Immediately after the release of the Apache HTTP 2.4.50 experts disclosed that the exploitation of the flaw could lead to remote code execution when the mod_cgi module was loaded and the default “Require all denied” option was missing.

According to an updated advisory, Apache released version 2.4.51 to definitively fix the vulnerability. This new path traversal flaws is tracked as CVE-2021-42013.

“It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives,” announced Apache in an updated advisory. “If files outside of these directories are not protected by the usual default configuration “require all denied”, these requests can succeed. If CGI scripts are also enabled for these aliased pathes, this could allow for remote code execution.”

The vulnerability was reported by Juan Escobar from Dreamlab Technologies, Fernando Muñoz from NULL Life CTF Team, and Shungo Kumasaka.

The United States Computer Emergency Readiness Team (US-CERT) warns of ongoing active scanning of Apache HTTP Server CVE-2021-41773 and CVE-2021-42013 that could lead to imminent exploitation, for this reason, the US-CERT urges organizations to immediately patch their installs.

 

SOURCE READ THE FULL ARTICLE

Apache rolled out a new update in a few days to fix incomplete patch for an actively exploited flaw


Company DETAILS

SHIP IP LTD
VAT:BG 202572176
Rakovski STR.145
Sofia,
Bulgaria
Phone ( +359) 24929284
E-mail: sales(at)shipip.com

ISO 9001:2015 CERTIFIED