A maritime industry coalition announced the Blue Initiative on 26 October, launching a vulnerability repository that will list only IT and operational-technology flaws relevant to shipping. The group comprises maritime cyber vendors Cydome and Rakuten Maritime alongside the inspection and certification firm Bureau Veritas, the ship classification society ClassNK, and the Maritime Transportation System Information Sharing and Analysis Center. The Maritime Vulnerabilities Repository will be reviewed before publication by researchers from Cydome and other partners, who will validate and refine entries; vulnerabilities are published only once a patch exists. Users will be able to browse CVE detail, filter by equipment or vendor, read expert impact analysis, and subscribe to alerting. The launch addresses a specific complaint — that general-purpose CVE feeds bury the small number of flaws that matter to a specialised fleet, where the same vulnerability may affect bridge, cargo-management or satcom systems sold under different product names. It arrives amid continuing scrutiny of maritime cyber risk following the Anubis-linked attack on an Adriatic port.

• Source article