AI Vulnerabilities Pose Growing Risk to Maritime Sector

The rapid adoption of artificial intelligence is shortening the window for cyberattacks, with 60% of new vulnerabilities weaponized within 48 hours.

The global maritime industry’s rapid adoption of artificial intelligence for operations and maintenance is leaving the sector vulnerable to autonomous cyberattacks that are increasingly difficult to detect.

New data indicates that the window between the discovery of a software vulnerability and an active attack has collapsed. In 2018, the average time from a flaw's publication to an exploit was 63 days. By 2024, that figure dropped to five days. Today, AI-driven hacking tools can target systems within 15 minutes of a flaw being detected, with most weaponized in under 48 hours.

A research paper published this week, the Cydome Maritime Cyber Trends Report 2026, found that 87% of organizations now identify AI-related vulnerabilities as their fastest-growing risk. While AI streamlines recruitment and navigation, experts warn it also enables "flawless deception."

Theofano Somaripa, group CIO with dry bulk operator Newport S.A., said cyberattacks in 2026 are defined by a shift from simple digitalization to a radical restructuring of business models through AI.

The report found that 83% of phishing emails now use AI to target multinational crews in their native languages. This has contributed to a 1,600% surge in voice phishing, or "vishing," where AI clones the speech patterns of executives to authorize fraudulent transactions. In one instance, a deepfake audio clone of a CFO was used to trick staff at a European energy firm into a $25 million wire transfer.

Identity fraud has also risen by 195%. One firm reportedly hired an operative who used an AI-enhanced photograph and a stolen identity to pass four separate video interviews. The fraudster used a "laptop farm" to mask their location while attempting to infiltrate internal servers.

Physical infrastructure remains a primary target. Attacks on edge network devices, including routers and firewalls, increased by 800% in 2025. In one breach, hacktivists disconnected a fleet of 116 tankers from the internet by wiping the network edge of a connectivity provider, resulting in a total loss of ship-to-shore communication.

"Shipping companies are deploying AI faster than they are defining cyber accountability," said Katerina Raptaki, IT manager at Navios. "The question after an incident won’t be 'was the AI wrong?' but 'why was it trusted?'"

Experts suggest that as organizations become more digitally integrated, the most significant risks will move inside the perimeter. Resilience will depend on the ability to detect subtle signals of compromised or accidental insider threats rather than just defending the network edge.

About the Author

Jesse Jacobs is assistant editor of SecurityToday.com.

Featured

New Products

  • Camden CV-7600 High Security Card Readers

    Camden CV-7600 High Security Card Readers

    Camden Door Controls has relaunched its CV-7600 card readers in response to growing market demand for a more secure alternative to standard proximity credentials that can be easily cloned. CV-7600 readers support MIFARE DESFire EV1 & EV2 encryption technology credentials, making them virtually clone-proof and highly secure.

  • A8V MIND

    A8V MIND

    Hexagon’s Geosystems presents a portable version of its Accur8vision detection system. A rugged all-in-one solution, the A8V MIND (Mobile Intrusion Detection) is designed to provide flexible protection of critical outdoor infrastructure and objects. Hexagon’s Accur8vision is a volumetric detection system that employs LiDAR technology to safeguard entire areas. Whenever it detects movement in a specified zone, it automatically differentiates a threat from a nonthreat, and immediately notifies security staff if necessary. Person detection is carried out within a radius of 80 meters from this device. Connected remotely via a portable computer device, it enables remote surveillance and does not depend on security staff patrolling the area.

  • PE80 Series

    PE80 Series by SARGENT / ED4000/PED5000 Series by Corbin Russwin

    ASSA ABLOY, a global leader in access solutions, has announced the launch of two next generation exit devices from long-standing leaders in the premium exit device market: the PE80 Series by SARGENT and the PED4000/PED5000 Series by Corbin Russwin. These new exit devices boast industry-first features that are specifically designed to provide enhanced safety, security and convenience, setting new standards for exit solutions. The SARGENT PE80 and Corbin Russwin PED4000/PED5000 Series exit devices are engineered to meet the ever-evolving needs of modern buildings. Featuring the high strength, security and durability that ASSA ABLOY is known for, the new exit devices deliver several innovative, industry-first features in addition to elegant design finishes for every opening.