A recent policy brief from NATO's Cooperative Cyber Defence Centre of Excellence (CCDCOE) indicates that Europe's civilian ports, which handle approximately 80% of international trade and support NATO logistics, are increasingly targeted by cyberattacks linked to state-affiliated actors. The report identifies a rise in disruptions affecting port access control systems and vessel traffic management across various countries, with suspected involvement from groups associated with Russia, Iran, and China.

The document notes that NATO's current maritime strategy lacks formal mechanisms to engage with commercial port operators, who manage critical infrastructure exposed to cyber threats. It calls for updated strategic frameworks to improve coordination between civil and military sectors, and to enhance cybersecurity and resilience across digital, operational, and energy systems in ports.

The brief outlines common attack methods, such as denial-of-service, phishing, ransomware, and malware, which have affected numerous maritime organisations in 2024.

Key recommendations include:

• Updating NATO's 2011 maritime strategy to integrate cybersecurity and establish engagement channels with commercial port operators.
• Establishing sector-specific intelligence-sharing frameworks to support timely incident response.
• Developing coordinated public-private action plans and resilience measures at both national and alliance levels.