Pirates of the North Sea - Red Team Operations on Ships and Maritime Infrastructure

Explore real-world Red Team operations targeting maritime infrastructure in this 24-minute DEF CON 33 conference talk. Gain firsthand insights into how cybersecurity professionals infiltrated cruise ships as undercover passengers to assess vulnerabilities in both IT systems and critical operational areas. Learn about the techniques used to physically access restricted zones including communication rooms and engine control rooms while maintaining cover among guests and crew. Discover how vulnerabilities in shipboard infrastructure enabled testers to manipulate or disable essential systems such as navigation and onboard communications across both passenger and cargo vessels. Understand the unique security challenges facing the maritime industry and the methods employed to identify weaknesses in ship-based systems and physical security protocols.