The war in Iran has dominated headlines with reports of airstrikes and escalating military activity. But beyond the immediate devastation, the conflict has also illuminated a quieter and rapidly growing danger: the vulnerability of ships, and the people who operate them, to disruption of their navigation systems.

Modern shipping depends heavily on GPS satellite navigation. When those signals are disrupted or manipulated, ships can suddenly appear to their navigators and to other ships to be somewhere they are not. In some cases, vessels have been shown jumping across maps, drifting miles inland or appearing to circle in impossible patterns. The risk is even higher in war zones, where ships could be misdirected into harm’s way.

As a cybersecurity researcher studying critical infrastructure and maritime systems, I investigate how digital threats affect ships and the people who operate them.

To understand the threat from GPS disruptions, it helps to first understand how GPS works. GPS systems determine location using signals from satellites orbiting Earth. A receiver calculates its position by measuring how long those signals take to arrive. Because those signals are extremely weak by the time they reach Earth, they are relatively easy to disrupt.

GPS jamming and spoofing

In GPS jamming, an attacker blocks the real satellite signals by overwhelming them with electromagnetic noise so receivers cannot detect them. When this happens, navigation systems lose their position. On a phone, it might look like the map freezing or jumping erratically.

GPS spoofing is more sophisticated. Instead of blocking signals, an attacker transmits fake satellite signals designed to mimic the real ones. The receiver accepts these signals and gives a false location. Imagine driving north while your navigation system suddenly insists you are traveling south. The receiver is not malfunctioning; it has simply been tricked.

For mariners at sea, spoofing can have serious consequences. In the open ocean, there are few landmarks to verify a ship’s position if GPS behaves strangely. Nearshore, the margin for error disappears: Water depths change quickly and hazards are everywhere, especially in narrow routes like the Strait of Hormuz near Iran, where reports indicate that GPS spoofing has been happening since the outbreak of the war. Because ships are large and slow to maneuver, even small navigation errors can lead to groundings or collisions.

Red Sea grounding

One example came in May 2025. While transiting the Red Sea, the container ship MSC Antonia began showing positions far from its true location. To navigators onboard, this looked like they had jumped hundreds of miles south on the map and started moving in a new direction. This caused the crew to become disoriented, and the ship eventually ran aground. The grounding caused millions of dollars in damage and required a salvage operation that lasted over five weeks.

Incidents like the MSC Antonia are not isolated. Vessel-tracking data has revealed clusters of ships suddenly appearing in impossible locations, sometimes far inland or moving in perfect circles. These anomalies are increasingly linked to GPS spoofing in regions experiencing geopolitical conflict.

But GPS interference is only one type of cyber threat facing ships. Industry reports have documented ransomware attacks on shipping companies, supply chain compromises and increasing concern about the security of onboard control systems, including engines, propulsion and navigation equipment. As ships become more connected through satellite internet systems and remote monitoring tools, the number of potential entry points for cyberattacks is growing.

Military vessels often address these risks through stricter network segregation and regular training exercises such as “mission control” drills, which simulate operating with compromised communications or navigation systems. Some cybersecurity experts argue that similar practices could help commercial shipping improve its resilience, although smaller crews and limited resources make adopting military-style procedures more difficult.

Mariners’ experiences

Much of the public discussion around maritime cybersecurity focuses on technical vulnerabilities in ship systems. But an equally important piece of the puzzle is the people who must interpret and respond to these technologies when something goes wrong.

In recent research, my colleagues and I interviewed professional mariners about their experiences with cyber incidents and their preparedness to respond to them. The interviews included navigation officers, engineers and other crew members responsible for ship systems. What emerged was a consistent picture: Cyber threats are increasingly occurring at sea, but crews are not well prepared to deal with them.

Many mariners told us that their cybersecurity training focused almost entirely on email phishing and USB drives. That kind of training may make sense in an office, but it does little to prepare crews for cyber incidents on a ship, where navigation and control systems can be the primary targets. As a result, many mariners lack clear guidance on how cyberattacks might affect the equipment they rely on every day.

This becomes a problem when ship systems begin behaving strangely. Mariners described GPS showing incorrect positions or temporarily losing signal. It can be difficult to tell whether these incidents are equipment failures or signs of cyber interference.

Even when mariners suspect something may be wrong, many ships lack clear procedures for responding to cyber incidents. Participants frequently described situations where they would have to improvise if navigation or other digital systems behaved unexpectedly. Unlike equipment failures, which have established checklists and procedures, cyber incidents often fall into a gray area where responsibility and response plans are unclear.

Another challenge is the gradual disappearance of traditional navigation practices. For centuries, mariners relied on paper charts and celestial navigation to determine their position. Today, most commercial vessels rely almost entirely on electronic systems.

Many mariners noted that paper charts are not available onboard, and celestial navigation is rarely practiced. If GPS or electronic navigation systems fail, crews have limited ways to independently verify their position. One mariner bluntly described the risk to us: “If you don’t have charts and you’re being spoofed, you’re a little screwed.”

Increasing connectivity, increasing risk

At the same time, ships are becoming more connected. Modern vessels increasingly rely on satellite internet systems like Starlink and remote monitoring tools to manage operations and communicate with shore.

While these technologies improve efficiency, they also expand the vulnerability of ship systems. Connectivity that allows crews to send emails or access the internet can also provide pathways for cyber threats to reach onboard systems.

As GPS spoofing becomes more common in regions experiencing geopolitical conflict, the challenges mariners described in our research are becoming harder to ignore. The oceans may seem vast and empty, but the digital signals that guide modern ships travel through crowded and contested space.

When those signals are manipulated, the consequences do not stay confined to military systems. They reach the commercial vessels that carry most of the world’s goods and the crews responsible for navigating them safely.

Anna Raymaker receives funding from the National Science Foundation and the Department of Energy for her research.