AW A.I CyberSecurity Scoring
08/02/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for AECOM - Water in 2026.
No incidents recorded for AECOM - Water in 2026.
No incidents recorded for AECOM - Water in 2026.
Some 45 years ago, we set out with the ambitious goal of providing affordable housing, working to make Brazilian dreams come true. Over the last few years, we have crafted and shaped our story, becoming a brand-leading platform that offers a variety of housing solutions for individuals and families from all walks of life – after all, each person is an individual – and every individual is as important as the next. Our company has joined together the efforts of some 30,000 staff members aiming to build dreams that transform the world – because we believe that purchasing a home is not the end of the line, but the beginning of life-changing transformation and the origin of many dreams for the future. Our company is present in more than 160 cities and 22 states, seeking to bring quality of life, comfort and innovation to the doorstep of thousands of families. And it is our great pleasure to announce that, today, one in every 150 Brazilians has an MRV that they call home. But we don’t stop there. Each development comes with the essential building blocks of a community such as daycare centers, health clinics, paved streets, green spaces, reforestation and much, much more. Because growth and urban development require the balance of social responsibility and sustainability, in addition to meeting the true needs of each community – an essential part of our DNA and an example of our commitment to the people of our communities. Click here to take a look at our company’s day-to-day routine and what we mean when we say: ‘to be MRV’.
Egis is a leading global architectural, consulting, construction engineering, operations and mobility services firm. We create and operate intelligent infrastructure and buildings that both respond to the climate emergency and contribute to balanced, sustainable and resilient development. Our 22,000 employees operate across over 100 countries, deploying their expertise to develop and deliver cutting-edge innovations and solutions for clients. Through the wide range of our activities, we are central to the collective organisation of society and the living environment of citizens all over the world.
We are the world’s leading Geo-data specialist, collecting and analysing comprehensive information about the Earth and the structures built upon it. Through integrated data acquisition, analysis and advice, we unlock insights from Geo-data to help our clients design, build and operate their assets in a safe, sustainable and efficient manner. Learn more about us: https://www.youtube.com/fugro https://www.facebook.com/fugro https://twitter.com/fugro https://www.instagram.com/fugro/
Ventia provides essential services to make infrastructure work for communities in Australia and New Zealand. We pride ourselves on safe and sustainable services for our corporate and government clients across a broad range of sectors, including transport, telecommunications, utilities, defence, water, energy, resources and social infrastructure. In July 2020, Ventia acquired Broadspectrum. In November 2021, Ventia listed on the ASX and NXZ under the ticker VNT.
Ferrovial is a leading global infrastructure company transforming highways, airports, and energy around the world. Its distinctive integrated business model supports the entire lifecycle of complex projects, from design and financing to construction, operation and maintenance. The company has a global presence and employs more than 22,500 people worldwide. North America is Ferrovial’s growth engine, where it developed and is currently operating five Express Lanes across Texas, North Carolina and Virginia, and is managing the 407 ETR highway in Toronto, Canada. The company is also leading the development of the New Terminal One at JFK International Airport. Ferrovial shares trade under the ticker symbol FER on three stock markets: U.S. (Nasdaq‑100 Index), Spain (IBEX‑35), and the Netherlands. The company is included in globally recognized sustainability indices such as the Dow Jones Best in Class Index.
Enabling communities to thrive. It’s what we’ve done for more than 150 years. Solving problems. Making the extraordinary run smoothly every day. We’re keeping the lights on and the water flowing. Running the hospitals that take care of us. Delivering the transport that takes us from A to B. Maintaining communication networks that keep people connected. Helping our Government and Defence customers keep them protected. Delivering train fleets. Building bridges, roads and streets. Now we’re building momentum too. Moving forward even faster. Across Australia and New Zealand, we’re transforming the way we work. Unlocking our potential to lead by example. Using our passion and expertise to deliver complex projects and turn fresh ideas into solutions that make society a better place. Creating opportunities for our people, growth and value for our shareholders, and world-class solutions for our customers. Imagining. Innovating. Engineering. Enabling.
We are committed to addressing the world’s biggest challenges in the areas of water, energy and communities. GHD is a global network of multi-disciplinary professionals providing clients with integrated solutions through engineering, environmental, design and construction expertise. Our future-focused, innovative approaches connect and support communities around the world, resiliency and sustainability for generations to come. Established in 1928, we remain wholly owned by our people. We are 10,000+ diverse and skilled individuals connected by over 200 offices, across five continents – Asia, Australia, Europe, North and South America, and the Pacific region. See our list of office locations and contact numbers in ghd.com/en/about-ghd/office-locations ---------------------------------------------------------------------------------------- GHD reconnaît et comprend que le monde est en constante évolution. Nous sommes engagés à résoudre les plus grands défis mondiaux dans les secteurs de l’eau, de l’énergie et de l’urbanisation. Nous sommes une entreprise de services professionnels dotée d’une expertise de pointe en ingénierie, en construction et en architecture. Nos démarches avant-gardistes et innovatrices rapprochent et soutiennent les communautés à l’échelle mondiale. En livrant d’excellents résultats sociaux et économiques, nous visons à bâtir des relations durables avec nos partenaires et nos clients. Fondée en 1928, GHD appartient entièrement à ses employés Nous sommes plus de 10 000 employés diversifiés et qualifiés dans plus de 200 bureaux et sur cinq continents : Amérique du Nord et Amérique du Sud, Asie, Australie et Europe, ainsi que dans la région du Pacifique. Apprenez-en davantage sur nous à ghd.com
A civil engineer is a person who practices civil engineering – the application of planning, designing, constructing, maintaining, and operating infrastructures while protecting the public and environmental health, as well as improving existing infrastructures that have been neglected. Civil engineering is one of the oldest engineering disciplines because it deals with constructed environment including planning, designing, and overseeing construction and maintenance of building structures, and facilities, such as roads, railroads, airports, bridges, harbors, channels, dams, irrigation projects, pipelines, power plants, and water and sewage systems. ------------------------------------------------------------------- If you want you, your company or products/content to be featured on our page, fill up this 𝗚𝗼𝗼𝗴𝗹𝗲 𝗙𝗼𝗿𝗺 (https://forms.gle/jCqprbdF9yyvKTWc7) in detail or 𝗿𝗲𝗮𝗰𝗵 𝘂𝘀 𝗮𝘁 [email protected].
AECOM is the global infrastructure leader, committed to delivering a better world. As a trusted professional services firm powered by deep technical abilities, we solve our clients’ complex challenges in water, environment, energy, transportation and buildings. Our teams partner with public- and private-sector clients to create innovative, sustainable and resilient solutions throughout the project lifecycle – from advisory, planning, design and engineering to program and construction management. AECOM is a Fortune 500 firm that had revenue of $16.1 billion in fiscal year 2024. Learn more at aecom.com.
Latest updates, reports, and threat intel affecting the global network.
As Primary Designer, AECOM will support the delivery of the major new investment program to transform Scotland's water and wastewater...
High-profile incidents disrupting energy infrastructure, such as the attacks on the Nord Stream gas pipelines and anchor dragging incidents, have made asse.
SINGAPORE (August 15, 2025) — A Binnies and AECOM (NYSE: ACM) joint venture today announced that it has been appointed by PUB,...
We are pleased to present the June 2025 issue of Smart Water Magazine Print Edition, with a special focus on sanitation, wastewater treatment, and reuse.
AECOM will provide technical advice and support for the development and delivery of VicGrid's energy infrastructure program.
AECOM (NYSE: ACM), the trusted global infrastructure leader, today announced it has acquired Scotland-based Allen Gordon LLP, a leading provider of technical...
AECOM (NYSE: ACM), the trusted global infrastructure leader, today announced it has been selected as a Design Development Partner for Sydney Water.
The Company has sustained a 100%-win rate on recompete contracts whose expected framework value is more than double the value of the respective frameworks...
This new £400 million framework, FA1980, covers asset, capital and engineering professional services, and brings together a series of separate Thames Water...
Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.
Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.
Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.
Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.
Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.