Modern vessels and yachts are equipped with a lot of specialized equipment communicating over internal control and IT networks, and connected to Internet. Due to my background, I was curious to know how modern vessels navigate and how the ship electronic is working. This is why I asked for an access to a big expensive yacht to assess its security. I quickly found several attack vectors were and some of them already made it into the news. The Backbone network of the vessels is nowadays based on NMEA0183 or the newer NMEA2000 (or also called SeaTalk NG), which is electrically similar to CAN Bus. The main IT network is connected to the backbone ship’s control network via the Ethernet-to-NMEA gateways. Voila! We have a swimming IoT device with many attack vectors.