[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fY1qOAaNLNS9OQpRlzvjE9CcQWL8g3MnTE2wjNjQ_Ugk":3},{"article":4,"iocs":51,"watch_terms":52,"solutions":53,"lesson":143},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":28,"category":29,"article_tags":33},"64aac52f-e5d6-45b6-ac84-916aad0fd1a8","Cyberattacks on Two Oil Tankers Prompt Coast Guard, FBI to Board Vessels","cyberattacks-on-two-oil-tankers-prompt-coast-guard-fbi-to-board-vessels-dccde9","The Coast Guard confirmed evidence of malicious cyber activity on the VL Prosperity, but has not attributed the attack to Iran. The post Cyberattacks on Two Oil Tankers Prompt Coast Guard, FBI to Board Vessels appeared first on SecurityWeek.","US Coast Guard and FBI personnel boarded two oil tankers after cyberattacks disrupted their voyages. Evidence of malicious cyber activity was found on the VL Prosperity, with attackers allegedly accessing navigation, cargo, and engine room systems, and cutting communications. While Iran has been mentioned as a potential perpetrator, the US has not publicly attributed the attacks, and investigations are ongoing.","Cyberattacks on two oil tankers prompt Coast Guard and FBI boarding.","https:\u002F\u002Fwww.securityweek.com\u002Fcyberattacks-on-two-oil-tankers-prompt-coast-guard-fbi-to-board-vessels\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2026\u002F09\u002Foil-tanker-ship-maritime-vessel.jpeg","2026-09-17T17:09:40+00:00","2026-09-17T18:00:28.532567+00:00",7,[17,20,23,26],{"name":18,"type":19},"VL Prosperity","product",{"name":21,"type":22},"Iran","threat_actor",{"name":24,"type":25},"OT systems","technology",{"name":27,"type":25},"IoT devices","6cbdd207-aaa1-4176-9534-e156b125e917",{"id":28,"icon":30,"name":31,"slug":32},null,"Nation-state","nation-state",[34,36,41,46],{"category":35},{"id":28,"icon":30,"name":31,"slug":32},{"category":37},{"id":38,"icon":30,"name":39,"slug":40},"c5eccf7c-abbc-4bd3-bbed-e6da5cba8e73","Incident Response","incident-response",{"category":42},{"id":43,"icon":30,"name":44,"slug":45},"d6f63bb8-0801-486a-be7f-171400700454","IoT\u002FOT","iot-ot",{"category":47},{"id":48,"icon":30,"name":49,"slug":50},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18],{"controls":54,"vendors":142},[55,84,113],{"slug":56,"name":57,"problem":58,"products":59},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[60,68,76],{"vendor_slug":61,"vendor_name":62,"vendor_logo":63,"product_slug":64,"product_name":65,"url":66,"description":67},"sentinelone","SentinelOne","\u002Fvendor-logos\u002Fsentinelone.png","singularity-endpoint","Singularity Endpoint","https:\u002F\u002Fwww.sentinelone.com\u002Fplatform\u002Fendpoint-security\u002F","Endpoint protection and detection with automated response and rollback.",{"vendor_slug":69,"vendor_name":70,"vendor_logo":71,"product_slug":72,"product_name":73,"url":74,"description":75},"elastic","Elastic","\u002Fvendor-logos\u002Felastic.png","elastic-security","Elastic Security","https:\u002F\u002Fwww.elastic.co\u002Fsecurity","SIEM and endpoint security built on Elasticsearch, with open detection rules.",{"vendor_slug":77,"vendor_name":78,"vendor_logo":79,"product_slug":80,"product_name":81,"url":82,"description":83},"sophos","Sophos","\u002Fvendor-logos\u002Fsophos.png","sophos-endpoint","Sophos Endpoint","https:\u002F\u002Fwww.sophos.com\u002Fen-us\u002Fproducts\u002Fendpoint-security","Endpoint protection with Intercept X anti-ransomware technology and EDR.",{"slug":85,"name":86,"problem":87,"products":88},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",[89,97,105],{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":93,"product_name":94,"url":95,"description":96},"illumio","Illumio","\u002Fvendor-logos\u002Fillumio.png","illumio-segmentation","Illumio Segmentation","https:\u002F\u002Fwww.illumio.com\u002Fillumio-segmentation","Maps traffic between workloads and enforces segmentation across data centre, cloud and endpoints.",{"vendor_slug":98,"vendor_name":99,"vendor_logo":100,"product_slug":101,"product_name":102,"url":103,"description":104},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","zero-trust-endpoint-firewall","Zero Trust Endpoint Firewall","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fzero-trust-endpoint-firewall","Centrally managed host firewall with device-level and dynamic access rules, to limit which machines can talk to each other.",{"vendor_slug":106,"vendor_name":107,"vendor_logo":108,"product_slug":109,"product_name":110,"url":111,"description":112},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","guardicore-segmentation","Akamai Guardicore Segmentation","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fakamai-guardicore-segmentation","Software-based microsegmentation with traffic visibility.",{"slug":114,"name":115,"problem":116,"products":117},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",[118,126,134],{"vendor_slug":119,"vendor_name":120,"vendor_logo":121,"product_slug":122,"product_name":123,"url":124,"description":125},"nozomi-networks","Nozomi Networks","\u002Fvendor-logos\u002Fnozomi-networks.png","guardian","Nozomi Networks Guardian","https:\u002F\u002Fwww.nozominetworks.com\u002Fplatform\u002Fguardian","Passive monitoring, asset inventory and threat detection for OT and IoT networks.",{"vendor_slug":127,"vendor_name":128,"vendor_logo":129,"product_slug":130,"product_name":131,"url":132,"description":133},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-ot-security","Tenable OT Security","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fot-security","Asset inventory, vulnerability and threat detection for industrial networks.",{"vendor_slug":135,"vendor_name":136,"vendor_logo":137,"product_slug":138,"product_name":139,"url":140,"description":141},"claroty","Claroty","\u002Fvendor-logos\u002Fclaroty.png","xdome","Claroty xDome","https:\u002F\u002Fclaroty.com\u002Findustrial-cybersecurity\u002Fxdome","Asset inventory, vulnerability management and threat detection for industrial networks.",[],{"slug":144,"title":145,"body":146,"framework_refs":147,"framework_notes":159},"cyberattacks-on-oil-tankers-expose-critical-otit-security-gaps-in-maritime-sector","Cyberattacks on Oil Tankers Expose Critical OT\u002FIT Security Gaps in Maritime Sector","Attackers allegedly gained access to navigation, cargo, and engine room systems aboard the VL Prosperity, demonstrating a dangerous convergence of IT and operational technology (OT) networks with insufficient isolation. The ability to cut communications while simultaneously compromising multiple critical shipboard systems suggests a lack of network segmentation and weak access controls on industrial control systems. This incident matters because disruption of maritime navigation and propulsion systems poses direct threats to crew safety, environmental security, and global supply chains. Nation-state involvement (potentially Iran) further elevates the threat profile, highlighting that critical maritime infrastructure is a high-value geopolitical target requiring hardened cyber defenses.",[148,149,150,151,152,153,154,155,156,157,158],"NIST SP 800-82 (Guide to ICS Security)","NIST CSF: PR.AC-5 (Network Integrity Protection)","NIST CSF: DE.CM-1 (Network Monitoring)","NIST CSF: RS.CO-2 (Incident Reporting)","CIS Control 12 (Network Infrastructure Management)","CIS Control 13 (Network Monitoring and Defense)","CIS Control 6 (Access Control Management)","IEC 62443 (Industrial Automation and Control Systems Security)","BIMCO Maritime Cyber Security Guidelines","IMO Maritime Cyber Risk Management (MSC-FAL.1\u002FCirc.3)","NIST SP 800-160 (Systems Security Engineering)",{"NIST CSF: DE.CM-1 (Network Monitoring)":160,"NIST CSF: RS.CO-2 (Incident Reporting)":161,"NIST SP 800-82 (Guide to ICS Security)":162,"BIMCO Maritime Cyber Security Guidelines":163,"CIS Control 6 (Access Control Management)":164,"NIST SP 800-160 (Systems Security Engineering)":165,"CIS Control 13 (Network Monitoring and Defense)":166,"NIST CSF: PR.AC-5 (Network Integrity Protection)":167,"CIS Control 12 (Network Infrastructure Management)":168,"IMO Maritime Cyber Risk Management (MSC-FAL.1\u002FCirc.3)":169,"IEC 62443 (Industrial Automation and Control Systems Security)":170},"Monitoring shipboard networks would help detect intrusions into navigation and engine systems before multiple systems were compromised.","Clear incident reporting procedures help ship operators alert authorities and owners quickly when shipboard systems are compromised.","ICS security guidance stresses isolating operational systems from IT networks, the separation apparently missing aboard the VL Prosperity.","Industry maritime cyber guidelines help shipowners assess and segment onboard systems, addressing the weaknesses exposed here.","Strong access controls on industrial shipboard systems make it harder for attackers to take over navigation and engine room controls.","Systems security engineering builds isolation and resilience into vessel systems from the start, rather than relying on bolt-on controls.","Network monitoring and defence aboard vessels would provide visibility of attacks against navigation and cargo systems.","Network integrity protection through segmentation would keep attackers from moving between navigation, cargo and engine room systems.","Managing and segmenting network infrastructure aboard ships keeps IT compromises from reaching critical operational systems.","IMO guidance requires cyber risk to be managed within ship safety management systems, covering the IT and OT gaps exploited here.","IEC 62443 sets out zones and conduits for industrial control systems, providing the segmentation that would have limited this attack."]