Rethinking OT security for project heavy shipyards

Help Net Security

January 12, 2026 at 7:00 AM

Overview

In an interview, Hans Quivooij, the Chief Information Security Officer at Damen Shipyards Group, discusses the unique cybersecurity challenges faced by shipyards that operate on a project basis. He emphasizes that the combination of long-term industrial equipment with short-term projects and rotating contractors complicates access control and increases the threat surface. Quivooij points out that integrating IT and operational technology (OT) systems can introduce additional risks, especially in legacy environments that may lack adequate visibility. This situation is critical for shipyards as it affects their ability to secure sensitive operational data and maintain safety standards. As the shipbuilding industry evolves, understanding these complexities is essential for protecting against potential cyber threats.

Key Takeaways

Affected Systems: Shipyards, operational technology (OT), industrial control systems (ICS)
Action Required: Implement robust access control measures, enhance visibility in legacy environments, ensure proper integration of IT and OT systems.
Timeline: Ongoing since [timeframe]

Original Article Summary

In this Help Net Security interview, Hans Quivooij, CISO at Damen Shipyards Group, discusses securing OT and ICS in the shipyard. He outlines how project-based operations, rotating contractors, and temporary systems expand the threat surface and complicate access control. Quivooij also covers visibility in legacy environments and the risks introduced by IT and OT integration. Shipyards blend long-lived industrial equipment with short-lived projects and contractors. How does that project-based operating model change the threat surface … More → The post Rethinking OT security for project heavy shipyards appeared first on Help Net Security.

Impact

Shipyards, operational technology (OT), industrial control systems (ICS)

Exploitation Status

The exploitation status is currently unknown. Monitor vendor advisories and security bulletins for updates.

Timeline

Ongoing since [timeframe]

Remediation

Implement robust access control measures, enhance visibility in legacy environments, ensure proper integration of IT and OT systems

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to Critical.

Read Original Article

Related Coverage

Vercel attack fallout expands to more customers and third-party systems

CyberScoop

Vercel has reported finding more signs of a security compromise affecting its customer base, raising concerns about potential risks to downstream systems. While the exact nature of the exposure remains unclear, the company is actively investigating the situation and working to assess the impact on its clients. This incident is significant because it may not only affect Vercel's direct customers but also third-party systems connected to them, amplifying the risk of broader security issues. Companies using Vercel's services should remain vigilant and monitor for any unusual activity as the investigation unfolds. The situation is still developing, and further updates are expected as Vercel continues to analyze the extent of the compromise.

Apr 23, 2026

China-Backed Hackers Are Industrializing Botnets

darkreading

Chinese state-sponsored hackers are increasingly using networks of compromised devices, known as botnets, to carry out cyberattacks. This approach allows them to conduct operations with minimal costs and risks, while maintaining plausible deniability. The use of botnets amplifies their capabilities, enabling them to launch large-scale attacks against various targets without the need for extensive resources. This trend poses significant risks to organizations worldwide, as it complicates detection and response efforts. Companies and users should be vigilant about securing their devices to prevent them from being hijacked for these malicious purposes.

Apr 23, 2026

Dragos: Despite AI use, new malware targeting water plants is ‘hype’

CyberScoop

A new piece of malware named ZionSiphon has emerged, reportedly aimed at disrupting water supplies in Israel. However, experts from Dragos, a cybersecurity firm specializing in operational technology, have assessed the malware as ineffective and likely the work of inexperienced individuals utilizing artificial intelligence. This raises questions about the actual capabilities of the malware and the seriousness of the threat it poses. Despite the sensational headlines, experts suggest that the hype surrounding ZionSiphon may outweigh its real-world impact. Understanding the limitations of such attacks is crucial for water facility operators, who must remain vigilant but not overly alarmed by exaggerated claims.

Apr 23, 2026

A dozen allied agencies say China is building covert hacker networks out of everyday routers

CyberScoop

A coalition of twelve allied agencies has issued a warning regarding a shift in tactics by Chinese hackers, who are reportedly using common routers to build covert hacking networks. These everyday devices, often overlooked in terms of security, can be exploited to gain unauthorized access to sensitive information. Organizations are advised to enhance their security measures by regularly updating router firmware, changing default passwords, and monitoring network traffic for unusual activity. This development is particularly concerning given the widespread use of consumer-grade routers, which could be leveraged to compromise a vast number of networks. The implications are significant, as this tactic could enable attackers to infiltrate both personal and corporate systems without detection.

Apr 23, 2026

Over $12M stolen in North Korean crypto heist against web developers

SCM feed for Latest

A North Korean hacking group known as HexagonalRodent has reportedly stolen up to $12 million in cryptocurrency from Web3 developers. This operation, linked to the state-backed group Famous Chollima, took place between January and March of this year. The attackers targeted individuals and organizations involved in Web3 technology, which includes decentralized applications and blockchain development. The stolen funds could be used to finance North Korea's activities, raising concerns about the implications for both the cryptocurrency industry and international security. As the threat from state-sponsored cybercrime continues to grow, developers in the tech space need to enhance their security measures to protect against such sophisticated attacks.

Apr 23, 2026

Actively exploited SharePoint spoofing bug continues to threaten over 1,300 instances

SCM feed for Latest

A critical vulnerability in Microsoft SharePoint, identified as CVE-2026-32201, is currently being exploited by attackers. Over 1,300 SharePoint servers exposed to the internet remain at risk, with fewer than 200 instances patched since the last Patch Tuesday. This zero-day spoofing flaw allows unauthorized access, which could lead to significant data breaches or further intrusions. Organizations using SharePoint should prioritize applying available updates to mitigate the risk and secure their systems against ongoing attacks. The situation underscores the urgency for users to remain vigilant and proactive in patch management.

Apr 23, 2026