Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

From navigating hostile weather to safeguarding crew and cargo, resilience is embedded into every operational decision in the maritime industry. Today, however, a new and less visible threat is reshaping what resilience means at sea: cyber risk. Digital transformation is providing great value through satellite navigation, automation, real-time fleet management and integrated logistics. But this connectivity has also expanded the attack surface.

In a world defined by digitization and interconnectivity, the question of sovereignty extends far beyond physical borders. Nations today find themselves grappling with a new reality: how to assert control and protect critical assets when the backbone of their digital existence—cloud infrastructures, distributed systems, and global platforms—operates across jurisdictions, providers, and geopolitical lines.

Drawing on Obrela’s experience managing complex cyber incidents and supporting national-level assurance programmes, Sebastian Bocquier, Head of DFIR, will present a practical, mission-ready framework that shifts accreditation from a static, one-time checkpoint to a continuous assurance capability embedded throughout NATO’s cloud ecosystem.

Muhammed Mayet, Global Sales Engineering Director, at Obrela elaborates on ENISA’s Threat Landscape 2025 and Microsoft’s Digital Defense Report 2025 and discusses how resilience can win over complexity The European Union Agency for Cybersecurity (ENISA), in its Threat Landscape 2025 report, paints a vivid picture of sustained and diverse cyberattacks across the EU.

The UK government is strengthening its cybersecurity legislation with the Cyber Security and Resilience Bill (CSRB), an update to the 2018 Network and Information Systems Regulations. Modelled on the EU’s NIS2 Directive, the new Bill significantly expands cyber risk obligations across the UK’s digital ecosystem, targeting gaps exposed by recent high-profile breaches.

As the Middle East rapidly accelerates its digital transformation across sectors like energy, oil and gas, and manufacturing, the traditional gap between IT and OT cyber security is closing. Industrial operators now rely on interconnected systems to maximize efficiency, but this increasing convergence introduces new vulnerabilities that cannot be addressed in isolation.

Across the Middle East, governments are rapidly introducing new cybersecurity frameworks and regulations in response to the need to protect critical national infrastructure and digital economies. In the UAE, Saudi Arabia, and Qatar, for example, this is reshaping how organizations approach compliance and forcing security leaders to rethink their priorities.

Cyberattacks on supply chains in 2025 have become more frequent and severe, moving from isolated incidents to major multi-sector crises. These crises involve data theft in software patches, ransomware disrupting food, pharmaceutical, and financial pipelines. As attackers target vendors as entry points, defensive measures must adapt. This includes enhanced vendor vetting, code provenance controls, firmware security, and robust third-party risk response.

The DIST Cyber Security Sectoral Analysis 2025 provides valuable insight and advice for navigating cybersecurity threats in the UK. It emphasises that the cybersecurity industry must innovate and adapt continually to address new and emerging technologies, along with wide range of complex cybersecurity threats. The latest sectoral analyses highlighted that cybersecurity is a booming and dynamic industry in the UK, and it thrives on innovation, regulatory evolution and strategic collaboration.