U.S. Coast Guard Cyber Command released its fifth annual Cyber Trends and Insights in the Marine Environment (CTIME) report. The U.S. Coast Guard continues its commitment to securing critical systems in the Marine Transportation System (MTS) by collaborating with the maritime industry to share best practices and provide insights into evolving cyber risks. The line between the physical and cyber domains continues to blur, where for the first time CGCYBER deployed Cyber Protection Teams alongside traditional law enforcement boarding teams as part of Dark Fleet Maritime Interdiction Operations. Additionally, we observed the maritime industry adopt advanced technologies like artificial intelligence-driven defenses highlighting a rapidly changing threat landscape. CTIME expands on these new frontiers and persistent threats using findings derived from engagements with MTS partners throughout 2025, conducted by Coast Guard Cyber Protection Teams and the Maritime Cyber Readiness Branch.
“The collaborative work between our exceptional workforce and our partners in the public and private sectors is the true foundation of our ability to secure our ports and waterways against any threat," said Rear Admiral Jason Tama, Commander, U.S. Coast Guard Cyber Command.
Three key takeaways from the report include:
- A Terminal Operating System is only as secure as its configuration, making it imperative for organizations to integrate them securely to protect data and operations from disruption.
- Artificial Intelligence Cybersecurity Platforms, like all cybersecurity tools, are only effective when implemented properly—investment must be matched with proper setup to realize value.
- Despite evolving Information Technology landscapes, basic attack vectors persist as attackers adapt traditional techniques.
- Dark Fleet operators' common practices create significant cyber risk to the safe navigation and operations of their vessels.
The full report contains insights and recommendations valuable for all Coast Guard units and organizations ranging from large, cyber-mature organizations to small businesses looking to build out their own cybersecurity programs.