Threats · 4h ago
US authorities confirmed in mid-September that they boarded multiple US-bound energy tankers after signs the ships’ networks had been compromised. On the VL Prosperity, the Coast Guard and FBI spent four days aboard and said they found malicious cyber activity, but no reported operational disruption, vessel instability, crew danger, or environmental impact.
The key lesson is not dramatic sabotage. Maritime plants often carry several vendor-connected control systems, and removable media can bridge an expected air gap if it has touched an infected machine elsewhere; once that path exists, isolation is only a policy, not a barrier. For operators with remote support links or USB-based transfer workflows, the exposure is the shipboard control environment itself, even when no outage has been confirmed.
1 source covering this story
Inside Maritime OT's Isolation Problem: Tanker Cyber Incidents, an AI Test Breakout, and APT36's USB Route to Air-Gapped Networks
Part of the PlainSec briefing for 2026-10-05