Skip to content
NewA calmer, faster ZeroHour
StoryToolslow

Maritime coalition launches free Blue Initiative vulnerability database

2 sources · 2 articlesFirst reported Updated ()1
What's new

October 27: SecurityWeek added scale—nearly 30,000 flaws, over 2,000 critical, 37 ship- or port-specific, and more than 580 known exploited, largely from CISA ICS and KEV.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

A maritime coalition’s free Blue Initiative database now indexes nearly 30,000 IT and OT flaws, published only after patches.

On October 26, Cydome, Rakuten Maritime, Bureau Veritas, ClassNK and MTS-ISAC launched Blue Initiative, a free public index of IT and OT vulnerabilities for maritime operators. SecurityWeek reports nearly 30,000 entries, more than 2,000 critical, 37 tied to ship- or port-specific products, and more than 580 known exploited. Most records come from CISA ICS advisories and the KEV catalog and are mapped to maritime systems; Cydome and partners review them, and a smaller set includes analyst notes. Infosecurity Magazine says a vulnerability is published only after a patch exists. Users can search, filter and get alerts, and the project accepts community contributions; Infosecurity says the launch follows n0n listing dozens of maritime organizations on October 12, with none confirming incidents.

Key facts
  • Cydome, ClassNK, Bureau Veritas, MTS-ISAC and Rakuten Maritime launched it October 26.
  • SecurityWeek counts nearly 30,000 flaws, including over 2,000 critical.
  • Thirty-seven entries affect products designed specifically for ships and ports.
  • More than 580 indexed vulnerabilities are known to be exploited.
  • Most entries are mapped from CISA ICS advisories and the KEV catalog.
  • Infosecurity says listings appear only after a patch exists.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Timeline

dated events in the reporting · oldest first
  1. Oct 12, 2026n0n listed dozens of maritime organizations. · Infosecurity Magazine
  2. Oct 26, 2026Partners launched the Blue Initiative vulnerability database. · Infosecurity Magazine

What each outlet adds

beyond the shared facts
  • Infosecurity MagazinePatch-only rule and unconfirmed n0n maritime leak-site listings.
  • SecurityWeekFlaw counts, CISA ICS and KEV sourcing, and community contributions.
Vendors
CydomeRakuten Maritime
Products
Blue InitiativeMaritime Vulnerabilities Repository
Threat actors
n0n
Organizations
CydomeClassNKBureau VeritasMTS-ISACRakuten MaritimeCISA
Countries
United States

Coverage

oldest first · one row per article · UTC
  1. · 4d ago Infosecurity MagazineFirst report

    Blue Initiative launches maritime-only vulnerability database for shipping IT and OT

    The database will publish only vulnerabilities for which a patch is available, and no n0n leak-site victims have confirmed incidents.

  2. · 3d ago SecurityWeek

    Maritime coalition opens free vulnerability database for ships and ports

    Blue Initiative lists nearly 30,000 flaws, including over 2,000 critical and 37 ship- or port-specific issues.