Aarhus University A.I CyberSecurity Scoring
01/04/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for Aarhus University in 2026.
No incidents recorded for Aarhus University in 2026.
No incidents recorded for Aarhus University in 2026.
PRIVACY POLICY at the University of Copenhagen: https://informationssikkerhed.ku.dk/english/protection-of-information-privacy/privacy-policy/ With over 40,000 students and more than 9,000 employees, the University of Copenhagen is the largest institution of research and education in Denmark. The purpose of the University – to quote the University Statute – is to ’conduct research and provide further education to the highest academic level’. Approximately one hundred different institutes, departments, laboratories, centres, museums, etc., form the nucleus of the University, where professors, lecturers and other academic staff, as well as most of the technical and administrative personnel, carry out their daily work, and where teaching takes place. These activities take place in various environments ranging from the plant world of the Botanical Gardens, through high-technology laboratories and auditoriums, to the historic buildings and lecture rooms of Frue Plads and other locations.
Latest updates, reports, and threat intel affecting the global network.
After almost 25 years at Aalborg University, Jens Myrup Pedersen is moving to Aarhus University. In this role, the professor of...
Kvantify is partnering with Aarhus and Aalborg Universities on a DKK 17.4 million project to develop quantum software for drug discovery.
At Munich's twin security gatherings, leaders warned that cyber conflict, transatlantic rifts and weaponised AI are pushing the rules-based order into a...
Both the Dean of Tech, Eskild Holm Nielsen, and the director of Enterprise and Innovation, Lone Ryg Olsen, have been extended for another...
In its own words, Aarhus University wants to be the epicentre for research, education and innovation in cyber security and is investing DKK...
Following a major public outcry, a clarification in the EU's controversial “Chat Control” law appeared to secure a victory for privacy...
As part of the Danish Foundation Models project, eight high-performance GPUs are now being installed at SDU's national research cloud,...
Socket has acquired Coana, a startup founded in 2022 by researchers from Aarhus University in Denmark that tells users which vulnerabilities they can safely...
Coana, a cybersecurity startup founded by researchers from Aarhus University, has been acquired by U.S.-based Socket in a strategic move...
Requesting a user or organization profile page (`GET /{username}`) with an `Accept: application/rss+xml` or `Accept: application/atom+xml` header returned the owner's activity feed without the visibility check that the profile page and the `.rss` and `.atom` routes apply. Anonymous users, restricted users and non-members could confirm the existence of limited or private users and private organizations and read their profile details and public activity, also when `[other] ENABLE_FEED` was disabled. Activity in private repositories was not included.
The Gitea API endpoint for creating push mirrors (`POST /api/v1/repos/{owner}/{repo}/push_mirrors`) checked only whether mirroring was enabled and not the `[mirror] DISABLE_NEW_PUSH` setting that the web interface enforces. A repository administrator could therefore create new push mirrors on instances where the site administrator had disabled them. A push mirror pushes all refs of the repository to a remote chosen by the caller, on each commit or on a schedule.
The Gitea API endpoint `GET /api/v1/repos/{owner}/{repo}/media/{filepath}` wrote files of up to 1 KiB that are stored directly in Git, not in LFS, to the response without the content type and disposition headers Gitea uses for user content. An HTML file committed to a repository was therefore rendered by the browser on the Gitea origin. A user who can push to a repository could run JavaScript in the session of a victim who opens the media URL and act with the victim's permissions.
With `[repository] FORCE_PRIVATE = true`, Gitea creates new repositories as private, but the post-receive hook still applied the `repo.private=false` push option to an empty repository created by push. Any user who can create repositories could make their new repository public in violation of the instance policy. The default configuration is not affected.
The Gitea push mirror API checked whether the repository owner, instead of the requesting user, may use local file system paths. On instances with `[security] IMPORT_LOCAL_PATHS = true`, a repository administrator who is not allowed to import local paths could add a push mirror to a local path on the server when the repository owner has that permission. Gitea then pushed the repository's refs into an existing Git repository at that path with the permissions of the Gitea process.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.