When Visibility Becomes an Attack Surface
Welcome to Tracking Tuesday 22nd September 2026.
Satellite connectivity can extend the view. It also extends the boundary that has to be secured.
More connectivity is usually presented as more visibility. That is often true — but it is not the whole decision.
This week, the Financial Times reported that hackers are increasingly targeting the satellite-linked equipment that connects ships to shore. Maritime cybersecurity company Cydome told the FT that satellite-connected edge devices were involved in 22% of maritime cyberattacks in 2025, up from 3% in 2024.
Those figures are a supplier’s claim, not a complete audited picture of global shipping. The underlying warning is still important: the same communications paths that make remote monitoring possible can become part of the operational attack surface.
This week’s edition looks at:
- why tracking and cybersecurity now need to be evaluated together;
- how gate-based computer vision reportedly helped recover $60,000 in a theft case;
- what Siemens and P&G’s edge-AI inspection rollout says about closing the loop from sensing to action;
- India’s plan to expand AI-led, non-intrusive cargo screening;
- and why rerouted trade lanes can invalidate yesterday’s monitoring assumptions.
The lead: connectivity is not the same as resilience
Satellite links are increasingly useful across maritime operations. They can improve communications, support remote diagnostics and extend the reach of connected systems beyond terrestrial networks.
But a visibility architecture is not just a tracker and a dashboard. It is a chain of devices, gateways, antennas, routers, communications links, cloud services, credentials, APIs, user accounts and operating procedures.
The Financial Times report, published on 18 September, cited suspected cyberattacks on tankers and described a 30-hour communications blackout and operational disruption affecting the VL Prosperity near Gibraltar in August.
It would be wrong to infer that a cargo tracker caused those incidents. It would also be wrong to conclude that satellite connectivity should be avoided. The practical lesson is narrower and more useful: when a shipment-visibility programme depends on connected edge equipment, cybersecurity and continuity are part of the requirement.
For tracking buyers, three risks matter
Availability. Can the device and platform continue to record useful data during a communications outage? Will readings be stored and forwarded later? How will users distinguish a coverage gap from a device failure or a deliberate interruption?
Integrity. Can users trust that a location, sensor value or event has not been altered or associated with the wrong shipment? Which identifiers, time sources and audit records support that confidence?
Control. Who can change configurations, thresholds, geofences, firmware, integrations and user permissions? Who owns patching when equipment comes from several suppliers?
These questions matter most where a team expects to act on the data. A compromised or unavailable feed can delay an intervention, send people towards the wrong exception or weaken the evidence used in an investigation.
Practical buyer questions
Before selecting a connected tracking or visibility solution, ask:
- Which device, gateway, network, platform and integration components handle the data?
- Who owns firmware updates, vulnerability response and credential rotation for each component?
- Are tracker and gateway communications separated appropriately from operational technology and business systems?
- What is recorded locally when connectivity is unavailable, and how is delayed data identified after reconnection?
- How are devices authenticated and retired, and how are lost or stolen units removed from the trust model?
- Can the supplier produce an audit trail of configuration, access and data changes?
- What will operations do if the data is unavailable — or available but no longer trusted?
The point is not to turn every tracking procurement into a naval cybersecurity programme. It is to match the security work to the value at risk, the systems connected, the consequence of bad data and the action the organisation expects to take.
For pharmaceutical and life-science shipments, proportionality remains essential. A high-value, stability-sensitive product on a risky, multi-party lane may justify connected monitoring and a rapid escalation process. A stable product on a controlled lane, where no useful intervention is possible, may be better served by a qualified destination-read logger or existing quality records. Product value, stability, lane risk, custody, intervention capability and evidence requirements should drive the decision — not a blanket claim that every shipment needs the same real-time device.
New! Tracking Tech - Planning, Implementation & Best Practices for 2026
Based on 20+ years experience of implementing 100s of GPS tracking projects, we have written this easy-to-read best practice guide and checklist to help you plan and implement GPS tracking and realtime visibility solutions. Download Your Free 2026 Guide Here
Elsewhere in tracking this week
Gate evidence may be more valuable than another map dot
In a Business Insider interview with eight supply-chain leaders, YMX Logistics’ Matt Yearling said AI-assisted gate automation and computer vision helped a grocery retailer recover $60,000 in a potential cargo-theft case.
That result is a company claim, but the architecture is worth attention. A gate can combine video, time, vehicle or trailer identity and shipment records at a custody transition. For some theft and dispute cases, high-confidence evidence at the handover may be more actionable than increasing the reporting frequency of a tracker in transit.
The buyer questions are simple: was the correct shipment matched to the evidence, how long is the evidence retained, who is allowed to access it, and how quickly can it reach an authorised investigator?
Supplier Quick Quotation Request
Physical AI closes the loop from sensing to action
Siemens and Procter & Gamble announced a worldwide expansion of AI-based visual inspection across P&G manufacturing operations. The system processes results at the edge and can trigger alerts or remove defective products at line speed.
Siemens says the deployment has reduced scrap by 10–20%, depending on the product, and that new implementations can be commissioned five to ten times faster than bespoke vision systems. Those are company figures.
The transferable lesson is the operational loop: sense, interpret, decide and act. Temperature, shock, light, door, location and dwell data need the same discipline. A sensor is not an outcome; it is evidence for a defined decision.
AI cargo screening moves towards intelligence-led intervention
India’s customs chief said the country intends to expand AI, advanced image analytics and non-intrusive cargo scanning, with a long-term ambition to screen every consignment while reducing disruption to legitimate trade.
That is a stated direction, not a completed national capability. Its success will depend on more than detection accuracy: throughput, false positives, evidence provenance, escalation and the treatment of legitimate exceptions all matter. For brand protection and anti-diversion work, trusted product and shipment identifiers are likely to be as important as the image model.
New routes require new monitoring assumptions
Reuters reported that Russian grain exports are being redirected through repurposed Baltic and Arctic terminals after disruption to Black Sea routes.
Whatever the cargo or geography, rerouting changes the monitoring requirement. A longer rail leg, different port dwell, colder conditions, new handovers or changed connectivity can affect battery life, sensor exposure, roaming and alert ownership. A pilot should represent the lane being used now, not the one shown in last year’s process map.
Satellite observation adds context, not item-level identity
Rocket Lab launched another Synspective Strix radar satellite on 18 September. Synthetic-aperture radar can observe through cloud and darkness and is used for infrastructure and disaster monitoring.
This is different from GNSS positioning and different again from satellite communications. Earth-observation data can add context around a route or facility, but it does not replace a package, pallet, trailer or container tracker. Clear architecture begins by separating those roles.
The Tracking Tuesday verdict
Visibility is becoming a broader systems question.
Coverage, battery life and sensor accuracy still matter. So do device identity, access control, firmware ownership, outage behaviour, evidence integrity and the manual process used when data cannot be trusted.
The best procurement question is no longer only “Can this device report from the route?” It is also “What decisions will we make from the data — and what happens when the connected chain breaks?”
Strategic Tracking helps organisations define shipment, condition and asset-tracking requirements, compare suitable technologies and suppliers, design representative pilots and integrate data into operating workflows.
- Evaluate a real-time visibility use case
- Compare high-value and theft-sensitive goods tracking
- Review pharmaceutical and cold-chain monitoring approaches
.
Industry event radar
Parcel+Post Expo — 23–24 September 2026, ExCeL London
Parcel automation, delivery technology, smart logistics and last-mile operations. Immediate opportunity for courier, ecommerce and tracking-technology conversations. https://parcelandpostexpo.com/
RAIN in Action — 29 September–1 October 2026, Novotel Madrid Centre
RAIN RFID case studies, demonstrations and workshops across retail and supply-chain applications. https://www.raininaction.org/event/2026/home
CPHI Milan — 6–8 October 2026, Fiera Milano
Major pharmaceutical gathering with dedicated cold-chain, logistics, labelling, packaging and AI/technology zones. https://www.cphi.com/europe/
Cold Chain Live! — 13–14 October 2026, Telford International Centre
The Cold Chain Federation’s UK flagship event, focused on temperature-controlled logistics, resilience, data and future operations. https://www.coldchainfederation.org.uk/events/cold-chain-live-2026/
IoT Tech Expo Europe — 19–20 October 2026, RAI Amsterdam
IoT, connectivity, edge AI, embedded systems, IoT security and Physical AI — directly relevant to connected tracking architecture. https://www.iottechexpo.com/europe/
NEPCON Asia — 27–29 October 2026, Shenzhen World Exhibition & Convention Center (Baoan)
Electronics manufacturing, components, smart manufacturing and Asian production relationships for tracking hardware. https://www.nepconasia.com/en-gb.html
electronica — 10–13 November 2026, Munich
Global electronics ecosystem covering components, embedded technology, connectivity and manufacturing partnerships. https://electronica.de/en/
Pharma Logistics Summit Europe — 2–3 December 2026, Munich
Cold-chain operations, traceability, temperature monitoring and pharmaceutical distribution resilience. https://innovatrix.eu/events/pharma-logistics-summit-europe/
Pharmapack Europe — 27–28 January 2027, Paris Expo Porte de Versailles
Pharmaceutical packaging, labelling, drug delivery and medical devices, with direct smart-packaging and sensing relevance. https://www.pharmapackeurope.com/
IoT Tech Expo Global — 3–4 February 2027, Olympia London
Industrial IoT, edge computing, connectivity, device security and analytics for connected enterprises. https://www.iottechexpo.com/
Manifest Vegas — 8–10 February 2027, The Venetian, Las Vegas
End-to-end supply-chain and logistics technology, with shippers, providers, startups and investors. https://manife.st/
XPONENTIAL Europe — 16–18 March 2027, Düsseldorf
Autonomy, robotics, sensors and uncrewed systems across air, ground, maritime and space. https://www.xponential-europe.com/
