Posts

Featured Posts
Latest Posts
ShipPaulJobs Weekly Cyber Brief, November Week 1, 2026: A Terminal Down at Le Havre, n0n's Exposed Server, and a US Deadline for Cyber Plans The incidents, CVEs and threat intelligence that matter to ships, ports and shipping companies, as of 2 November 2026 Captain Paul Maritime 4.0 · AI, Data & Cyber Security · LinkedIn This week's brief has one new event and two useful updates. The common thread: the hard questions are about recovery and basic access, not exotic attacks. A container terminal in Le Havre stopped handling boxes for reasons nobody has publicly established, new research suggests the n0n group got in with weak or stolen passwords, and US-regulated operators now have a dated requirement to put their cyber plans on paper.
Agentic Software: How AI Agents Are Restructuring the Software Paradigm Paper review · Zhenfeng Cao · arXiv preprint, June 2026 Captain Paul Maritime 4.0 · AI, Data & Cyber Security Most articles about AI coding tools ask how much faster programmers can work. This paper asks something bigger: if an AI can decide what to do while it runs, is it still the kind of software we have known for fifty years? The answer is interesting, but the most useful part for our industry is a warning buried in the evidence. AI agents that do well on a single task become much less reliable when the work carries on over time, and ship systems stay in service for decades.
How Can a Functional Description in a Manual Be Converted into a Reproducible Test Procedure? Article 8 of a 12-Part Series on UR E27 Strategies for Marine Equipment Suppliers ※ The product examples, Test Case IDs, setting values, and file names described in this article are illustrative examples created to explain how a reproducible UR E27 Test Procedure can be structured. Blue Horizonist (Lew) Maritime & Cyber Security Consultant · ISP Consultant The previous article examined how a statement that a function has been implemented in a product can be converted into verifiable Evidence by linking the applicable requirement, product design, Configuration, and test results. Among these elements, the Test Procedure is one of the areas that generates the most rework in actual projects.
Does CRA Vulnerability Reporting Reach the Shipowner? The Gaps Shipbuilding and Equipment Contracts Must Close Equipment makers now report to EU authorities. Whether that information ever reaches the shipowner, and the ship, depends on the contracts in between. Julius Shin Maritime Technical Consultant · Shipboard Cybersecurity & Compliance - LinkedIn :  https://www.linkedin.com/in/abysstoinfinity The EU Cyber Resilience Act now requires manufacturers to report actively exploited vulnerabilities to EU authorities and to inform their users. On a ship, the "user" is hard to pin down, part of the equipment sits outside the Act, and the timelines do not match a ship's life. This post looks at those three gaps from the owner's side and sets out what contracts need to cover so the information actually reaches the ship.
NIS2 for Shipping Companies: Essential or Important Entity? From Status Assessment to Governance Design Questions every shipping company should settle before NIS2 settles them for it: scope, classification, the owner–manager split, and the governance that has to sit behind the answer. Julius Shin Maritime Technical Consultant · Shipboard Cybersecurity & Compliance - LinkedIn :  https://www.linkedin.com/in/abysstoinfinity NIS2 adds a layer on top of the IMO and IACS cyber requirements that shipping companies already know, and that layer is aimed at the company rather than the ship. This post sets out how to think about NIS2 status, what really separates essential from important entities, and why the more useful question is not "are we in scope?" but "would our structure hold up under any status?"
From Cybersecurity to the Era of Cyber Resilience The question now isn't "how do we block it" — it's "how do we survive it." Richard Principal Maritime Engineering Leader · Digital Ship Innovation & Cyber Security On August 12, I attended the Maritime Cybersecurity Conference 2026 (co-hosted by CYTUR and SecurityNews, held concurrently with ISEC 2026) at the COEX ASEM Ballroom in Seoul. Listening to Hanwha Ocean's presentation, "AI-Era Vessels' New Challenges and Responses," I realized the industry's front line is wrestling with exactly the same questions. This article is a write-up of what that talk left me thinking about. Artificial intelligence (AI) is accelerating digital transformation across the shipbuilding and shipping industries. Smart ships, digital twins, remote maintenance...
Vivit Africa LNG: What Is Known About the Suspected Cyber Incident on an H-Line LNG Carrier A crew reported a cyber attack, the coast guard recorded a malfunction, and the cause is still not established. Why that gap is itself the lesson. Captain Paul Maritime 4.0 · AI, Data & Cyber Security · LinkedIn In early September 2026 the LNG carrier Vivit Africa LNG , owned by South Korea's H-Line Shipping , lost access to some of its control systems while approaching Italy with a US cargo. The crew reported a suspected cyber attack. The Italian Coast Guard recorded a malfunction whose cause could not be identified. The ship left without discharging. As of 30 October 2026 I could find no published finding, so this is an unconfirmed incident, and it should be read that way.
Three Pages for an Entire Ship: Why I Rejected a Shipyard's E26 Vessel Asset Inventory First : Vessel Asset Inventory [E26, 5.1.3] ※ The shipyard and SI company names are anonymized (H*, M*). Jack Superintendent · M**  (M** Shipping Company) I want to share some of the problems I have experienced with cyber security documents for ships being built in China. The first document I want to talk about is the Vessel Asset Inventory under E26, Section 5.1.3. I have a strong message for Chinese shipyards and shipowners: Hire a competent cyber security SI company of Korea.
Completed Series
Fully completed multi-part posts — read the full story from start to finish.
Loading…
📋 Latest Orders View All →
Loading…
🛡️ Cyber Threat Trends & Intelligence View All →
Loading…
⬡ Current Sea Conditions View All →
Loading…
⬡ Visit Context View All →
Loading…
🚢 Vessel Information View All →
Representative vessels (non-live)
Vessel NameTypeFlagMMSIGT
Loading…
📢 Announcements & Updates View All →
🔗 Community 2026.08.30
LinkedIn Maritime Cyber Community is Live!
Connect with professionals worldwide. Share insights on IACS E26, OT security & beyond.
Join →
✍ Platform 2026.08.01
Author Applications Open
Share your expertise with a global maritime audience. Join the crew!
Apply →
Introduction to Ship Systems
Learn the fundamentals of modern ship systems and digital vessel technologies.
Loading…
Introduction to Marine Solutions
Explore practical maritime AI, cybersecurity and digital transformation solutions.
Loading…
Explore All Posts
Browse our complete collection of maritime technology, cybersecurity, AI and digital shipping articles.
Loading…
Top Ranked · All Posts

Popular Posts

🧭 What We Cover

ShipPaulJobs is an independent, practitioner-led platform covering maritime cybersecurity, smart ship systems, and regulatory compliance, with more than 240 articles and free tools. Content is based on field experience and ongoing research by maritime professionals.

IACS UR E26 / E27

Our largest topic. UR E26 and E27 set cyber resilience requirements for ships contracted from 1 July 2024. Coverage runs clause by clause through CBS inventory, zones and conduits, the integrator's role, type approval, and supplier documentation, with IEC 62443 cross-references and complete guides.

Next: continuing the UR E27 supplier series, and moving from what the rule says to how it holds up in operation.

Maritime Compliance · Completed Series · Class Guidelines

Maritime OT & Ship Systems

Bridge, propulsion, power, cargo and safety systems are increasingly networked, with long lifecycles and real-time constraints that IT practice does not cover. We explain how each system works, then how to secure it: asset inventory, vulnerability handling, secure remote access and evaluating security products.

Next: filling in the remaining ship system groups and adding practical evaluation guides for solutions.

Ship Systems · Marine Solutions

Cyber Threats & Incidents

Incidents, CVEs and threat intelligence affecting ships, ports and shipyards, read for what they mean on board. Reported facts are kept apart from unverified claims, and an incident timeline shows how events connect.

Next: a regular Maritime Cyber Threat Brief, and updating incident posts as findings are published.

Threat Trends & Intelligence · Maritime Weekly

AI in Maritime Operations

How LLMs, RAG and AI agents apply to class rules, safety manuals, fleet data and compliance work, including their failure modes and governance. Learning series and research paper reviews help operators, surveyors and yard teams judge AI without vendor hype.

Next: more paper reviews, and giving ShipJobs AI answers grounded in this blog's own articles.

Publications · ShipJobs Bot

Industry Trends, Talent & Careers

Regulation, digitalisation and decarbonisation are changing what the industry needs from people. We analyse industry news and newbuilding orders, map the roles and skills emerging across OT and cyber security, and share field notes from practitioners on building a career in this space.

Next: clearer role-by-role career guidance, and more contributing authors from across the industry.

Industry Insights · Smart Jobs · Ship Orders

Free Tools & Community

Working tools for daily practice: a compliance assistant, vessel tracking, sea conditions, and live news, jobs and order feeds, plus reference documents. Articles come from a growing group of contributing practitioners, published under our editorial policy.

Next: linking tools and articles more closely, and growing the practitioner community around them.

Maritime Tools · Editorial Policy · Write for Us