Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems
Blue Initiative indexes nearly 30,000 IT and OT vulnerabilities relevant to ships and ports, 37 of them in maritime-specific products.
Excerpt from the primary source: SecurityWeek
Who is affected
Critical infrastructure
What you should do · Be aware
No immediate action is indicated. Share this with the relevant teams and watch for updates.
Automated guidance based on this story's classification. Check the linked advisories for specifics.
Sources
We link to original and authoritative sources. Headlines and excerpts belong to their publishers.
Related
CISA confirms PHP2Shell vulnerabilities now exploited in attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch their systems by Thursday.
Source reporting says attackers are already exploiting this, so exposed affected systems are at immediate risk.
Apply the vendor's security update for the affected products.
Long Term Support Channel Update for ChromeOS
A new LTS-150 version 150.0.7871.287 (Platform Version: 16700.68.0), is being rolled out for most ChromeOS devices. This version includes selected security fixes including: 562038679 High CVE-2026-103629 Integer overflow in Skia 566496747 High CVE-2026-110166 Buffer overflow in Animation 570093145 Critical CVE-2026-113279 Memory corruption in Accessibility 540138836 High CVE-2026-19175 Use after free in…
Apply the vendor's security update for the affected products.
Apple Patches for October 2026, (Mon, Oct 26th)
Apple today released patches for 304 vulnerabilties. This number is still in line with prior Apple updates, and comes just about a month after the last apple update.
VU#701544: mpc-lib Hardened Derivation Fails to Protect Ancestor Isolation
Overview Fireblocks' mpc-lib library contains a cryptographic fail-open vulnerability in its BIP32 hardened derivation implementation in the case of a missing private parent key. This breaks the ancestor isolation property of hardened derivation, allowing an attacker with a compromised lower-level signer share to recover the higher-level share it was derived from. Description Fireblocks is a digital-asset custody…