Cet article est aussi disponible en français.
Normally, when the pro-Russian hacktivist outfit NoName057(16) goes after the maritime and port sector, it picks a handful of sites: a ferry company here, a port authority there. This time, over the past ten days or so, the whole ecosystem and hinterland of the port of Constanța have been worked through.
A recap of the facts first. FortiBleed was disclosed in mid-June 2026 by independent researcher Volodymyr “Bob” Diachenko, who specialises in hunting down databases and servers left open on the Internet. Tellingly, the leak comes from the attackers themselves: Diachenko spotted one of their poorly secured servers, exposing their tooling, their logs and the credential set itself. The operation, which he attributes to a Russian-speaking multi-operator group, is said to have harvested and then cracked the authentication hashes of tens of thousands of FortiGate appliances, enriching each entry with the target’s industry, revenue and headcount - enough to plan future attacks. Several researchers validated part of the batch, among them the British Kevin Beaumont, who confirmed the authenticity of a sample of administration credentials.
The fifth edition of the U.S. Coast Guard’s CTIME report on maritime cybersecurity: expected findings, a few new elements, and the gaps with the European regulatory framework. Let’s unpack it together.
The US Coast Guard has issued two guidance documents for its maritime cyber rule: how to scope the required cybersecurity assessment, and how to request waivers and equivalencies.
The U.S. Maritime Administration has issued a refreshed advisory on cyber and physical risks posed by Chinese-linked port equipment and software, superseding advisory 2025-013 and valid through October 21, 2026.