Over the last week, DP World, a Dubai, United Arab Emirates-based international shipping and logistics company that manages a significant part of the logistics across Australian ports, was the target of an unspecified cyber event. There were significant repercussions along the supply chain, resulting in considerable downtime of the IT systems governing traffic in and out of the Australian ports. It has been speculated that the root cause may be a ransomware attack which exploited the CitrixBleed vulnerability for intrusion; however, there is no information to corroborate such speculations. While investigations reportedly continue, the port operations resumed on Sunday, 12 November. The incident serves as a reminder of the crucial role of securing the supply chain, particularly in connection with critical infrastructure.
- Clipeus