ANZ Aotearoa A.I CyberSecurity Scoring
27/02/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for ANZ Aotearoa in 2026.
No incidents recorded for ANZ Aotearoa in 2026.
No incidents recorded for ANZ Aotearoa in 2026.
Сбер — крупнейший банк в России, поставщик надёжных технологических решений и один из ведущих финансовых институтов страны. Мы не боимся меняться и открывать новые горизонты, но в то же время остаёмся верными принципам, сформированным за нашу 180-летнюю историю. Такой подход позволяет нам создавать и развивать десятки технологичных направлений. Нашими сервисами пользуются миллионы людей, а над их созданием и совершенствованием работают десятки тысяч сотрудников. Sber is the largest bank in Russia, supplier of reliable technological solutions and one of the leading national financial institutions. We are not afraid to change and open up new horizons, but at the same time we remain true to the principles that have been formed over our 180-year history. This approach allows us to create and develop dozens of technological areas. Our services are used by millions of people, and thousands of employees are working on their creation and improvement.
Security Bank is one of the Philippines’ best-capitalized private domestic universal banks. Established in 1951 and publicly listed with the Philippine Stock Exchange (PSE: SECB) in 1995, our major businesses cover retail, corporate, commercial, and business (MSME) banking. We’re recognized as an Employer of Choice in Philippine banking by various award-giving bodies for our values-based culture, industry-leading engagement and benefits, and commitment to work-life balance. Most recently, we ranked #2 best employer in the Philippines and #54 globally on the prestigious Forbes’ World’s Best Employers 2023 list. At Security Bank, our approach to Human Capital Management (HCM) is embodied by our Employee Value Proposition (EVP): “YOU matter.” Start your BetterBankingcareer with us today. For the complete list of Security Bank's awards, you may visit: https://www.securitybank.com/about-us/awards/
Bank of China, include BOC Hong Kong, BOC International, BOCG Insurance and other financial institutions, providing a comprehensive range of high-quality financial services to individual and corporate customers as well as financial institutions worldwide. Over the past century, Bank of China played an important role in China’s financial history. It was established in 1912 pursuant to the approval of DR. Sun Yat-sen. In the following 37 years the Bank served as the central bank, international exchange bank and specialized foreign trade bank successively. In 1949, Bank of China became the state-designated specialized foreign exchange bank. In 2003, it was named by the State Council as one of the pilot banks for joint-stock reform of wholly state-owned commercial banks. On August 26, 2004, Bank of China Limited was formally incorporated in Beijing as a state-controlled joint stock commercial bank. Bank of China is the most internationalized commercial bank in China. BOC London Branch, the first overseas branch of the Chinese banks, was established in 1929. Currently, it had over 10000 domestic operations and over 600 overseas operations. In 1994 and 1995, Bank of China became the note issuing bank in Hong Kong and Macao respectively. The Bank prepared a new strategic development plan which was approved by the Board of Directors in March 2009. Strategic Positioning: To be a large multinational banking group based on a diversified and integrated cross-border business platform, with a core business of commercial banking. Strategic Goals: To be a leading international bank delivering growth and excellence.
Societe Generale is one of the leading European financial services groups. Based on a diversified and integrated banking model, the Group combines financial strength and proven expertise in innovation with a strategy of sustainable growth. Committed to the positive transformations of the world’s societies and economies, Societe Generale and its teams seek to build, day after day, together with its clients, a better and sustainable future through responsible and innovative financial solutions. Active in the real economy for over 150 years, with a solid position in Europe and connected to the rest of the world, Societe Generale has over 117,000 members of staff in 66 countries and supports on a daily basis 25 million individual clients, businesses and institutional investors around the world by offering a wide range of advisory services and tailored financial solutions. The Group is built on three complementary core businesses: - French Retail Banking which encompasses the SG and Boursorama brands. Each offers a full range of financial services with omnichannel products at the cutting edge of digital innovation; - International Retail Banking, Insurance and Financial Services, with networks in Africa, Central and Eastern Europe and specialised businesses that are leaders in their markets; - Global Banking and Investor Solutions, which offers recognised expertise, key international locations and integrated solutions. Societe Generale is included in the principal socially responsible investment indices: DJSI (Europe), FTSE4Good (Global and Europe), Bloomberg Gender-Equality Index, Refinitiv Diversity and Inclusion Index, Euronext Vigeo (Europe and Eurozone), STOXX Global ESG Leaders indexes, and the MSCI Low Carbon Leaders Index (World and Europe).
HBL, Pakistan’s leading Bank, was the first commercial Bank to be established in Pakistan in 1947. Over the years, HBL has grown its branch network and maintained its position as the largest private sector Bank in Pakistan with over 1,728+ branches and 2,300+ ATMs globally, serving 37million+ clients worldwide. HBL will never ask for customer's personal data on public platforms. Please avoid sharing such data via social media.
“Fired by the spirit of nationalism and founded on the idea that Indians should have a national bank of their own, which would further the economic interest of the country, Punjab National Bank Ltd was the result of the efforts of far-sighted visionaries and patriots, among whom were persons like Lala Lajpat Rai, Mr. E C Jessawala, Babu Kali Prasono Roy, Lala Harkishan Lal and Sardar Dyal Singh Majithia. Incorporated under the Act VI of 1882, Indian Companies Act, the Bank commenced operations on April 12, 1895 from Lahore. Since inception, PNB has always been a "People's bank" serving millions of people throughout the country and also had the proud distinction of serving great national leaders like Sarvshri Jawahar Lal Nehru, Gobind Ballabh Pant, Lal Bahadur Shastri, Rafi Ahmed Kidwai, Smt. Indira Gandhi etc. amongst other who banked with us. Bank has spread its offerings and has grown as technology driven bank with products & services to meet the aspirations of every segment of customers. With more than 122 years of strong existence and a network of 6950 Domestic Branches, 10502 ATMs as on 31st March 2017, Punjab National Bank is serving more than 10 crore esteemed customers. PNB, being one of the largest Nationalised Bank, has continued to provide prudent and trustworthy banking services to its customers. The bank enjoys strong fundamentals, large franchise value and good brand image. With the mission of "Creating Value for all its customers, Investors and Employees for being the first choice for all stakeholders" its presence across India is a strong brand; “The name you can bank upon”. To download PNB One, click here: http://bit.ly/3WwQ4ig Share your feedback here: https://www.pnbindia.in/customers-survey.aspx
Welcome to Huntington. Huntington Bancshares Incorporated is a $210 billion asset regional bank holding company headquartered in Columbus, Ohio. Founded in 1866, The Huntington National Bank and its affiliates provide consumers, small and middle-market businesses, corporations, municipalities, and other organizations with a comprehensive suite of banking, payments, wealth management, and risk management products and services. Huntington operates approximately 972 branches in 13 states, with certain businesses operating in extended geographies. Visit Huntington.com for more information. We are committed to doing the right thing for our customers, colleagues, and communities. Our “Welcome” philosophy means they are at the center of everything we do. Here’s how we look out for people: • We aim to make banking easier for our customers. Our comprehensive suite of innovative banking tools and products is specifically designed to strengthen the financial health of those we serve. • Our internal culture is built around making things great—rather than just good enough—and to be the best place our colleagues will ever work. We offer a flexible work environment with opportunities for growth, and we’ll provide all the resources needed to create a lasting and rewarding career path. • Our $40 billion Community Plan, environmental sustainability strategy, and robust small-business lending program are just a few of the ways we are helping to improve the economic vitality of the areas where we live and work. Explore Huntington Career opportunities at https://huntington-careers.com. Huntington is an Equal Opportunity Employer. The Huntington National Bank, Member FDIC. The logo mark and Huntington® are federally registered service marks of Huntington Bancshares Incorporated. Huntington Social Media Community Guidelines & Terms: http://bit.ly/HuntingtonSocialMedia
Crédit Agricole CIB is the corporate and investment banking arm of Crédit Agricole Group, 9th largest banking group worldwide in terms of balance sheet size in 2023 (The Banker, July 2024). Nearly 8,600 employees across Europe, the Americas, Asia-Pacific, the Middle East and North Africa support Crédit Agricole CIB's clients, meeting their financial needs throughout the world. Crédit Agricole CIB offers its large corporate and institutional clients a range of products and services in capital markets activities, investment banking, structured finance, commercial banking and international trade. The Bank is a pioneer in the area of climate finance, and is currently a market leader in this segment with a complete offer for all its clients.
We’re the bank that turns possibilities into progress. We understand our customers, their worlds, and what matters to them. We help them see the opportunities and navigate a rapidly changing world. And we’re simplifying our business so that we can anticipate our customers’ needs and react to them quickly. Our business is UK centred and covers retail, commercial and private banking customers, with more offshore and further afield. Our services bring together our people’s incredible specialist knowledge with a sense of innovation, and carefully designed technology-driven journeys. As one of the leading supporters of UK business, we’re using enterprise as a force for change. We’re focusing on the people and communities who have traditionally faced the highest barriers to entry and figuring out ways to remove them. That includes learning and education, whether directed at young people or building financial confidence in adults. And by fostering a leading learning culture in our business, our people also prosper.
Latest updates, reports, and threat intel affecting the global network.
Crimson Education names former New Zealand prime minister Sir John Key chair as it accelerates global expansion and ramps up AI-driven...
AI is reshaping data privacy in Australia and New Zealand, exposing shadow tools, privilege sprawl and weak identity controls, experts warn.
As cyber threat landscape evolves, ANZ and 2degrees talk up the benefits of working with an unnamed NZ tech company.
Glenn Maiden, Chief security officer of Fortinet ANZ, joins Herald NOW to discuss the rise of scams during the holiday period.
ANZ New Zealand has rolled out a suite of advanced fraud-prevention tools that are transforming how it detects, blocks, and prevents scams.
Australian and New Zealand organisations are experiencing significant hourly costs from high-impact IT outages, according to findings from a...
NZ businesses are not doing enough to protect themselves from cybercrime even though 28% have taken new cybersecurity actions in the past...
The cyber threat landscape in Australia and New Zealand has deepend in the first half of 2025 after some worrying previous quarters.
Westcon-Comstor expands partnership with Cohesity to deliver AI-driven cybersecurity solutions amid growing threats in New Zealand's USD...
FOSSBilling is a free, open-source billing and client management system. In versions 0.5.6 through 0.7.2, when a `ClientPasswordReset` record already exists for a client (from a previous unexpired reset request), subsequent calls to the `reset_password` guest API endpoint reuse the existing token instead of generating a new one. The 15-minute validity window is anchored to the first request's `created_at` timestamp, not the time of the most recent email. An attacker who obtained the original reset link remains able to use it even after the victim requests a new reset, because the original token is never invalidated or rotated. Version 0.8.0 patches the issue. Some workarounds are available. Configure a reverse proxy (e.g., Nginx, Apache, Cloudflare) to apply per-IP rate limiting to the `/client/reset-password` endpoint to minimize the window of opportunity, and/or manually clear expired `client_password_reset` records from the database after a client reports a suspected compromise.
FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 allow a low-privileged staff account to grant arbitrary module permissions to itself through the admin API, resulting in persistent privilege escalation. A staff user that only has `staff.create_and_edit_staff` can call `/api/admin/staff/permissions_update` targeting their own account and write any permission structure, bypassing the intended role-based access control boundary. Version 0.8.0 patches the issue. Some workarounds are available. Restrict the `staff.create_and_edit_staff` permission to only highly trusted staff members and/or use a reverse proxy or WAF to restrict access to `/api/admin/staff/permissions_update` to specific trusted roles.
FOSSBilling is a free, open-source billing and client management system. Versions 0.5.3 through 0.7.2 allow authenticated clients to both read and reset API key service secrets for orders that are no longer in an `active` state (e.g., `suspended`, `canceled`). The root cause is missing order-state validation in two client API endpoints, despite an `isActive()` helper already existing in the `Serviceapikey` module and the frontend UI correctly gating access on `order.status == 'active'`. Version 0.8.0 contains a fix. Some workarounds are available. If the `Serviceapikey` module is not needed, uninstall it to remove the affected endpoints. One may also use a reverse proxy or WAF to restrict access to `/api/client/order/service` and `/api/client/serviceapikey/reset` based on application-level order-state logic.
FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 allow low-privileged staff accounts to perform unauthorized actions via admin API endpoints. The root cause is a combination of the `can_always_access` module flag (which grants all staff access to certain modules) and insufficient permission checks or unsafe parameter handling on individual endpoints. Version 0.8.0 contains a fix. Some workarounds are available. Restrict staff accounts to only those who need access to sensitive settings and/or use a reverse proxy or WAF to restrict access to the affected endpoints to trusted IP addresses or higher-privilege roles.
FOSSBilling is a free, open-source billing and client management system. In versions 0.5.6 through 0.7.2, when the "Require Email Confirmation" setting is enabled, a logged-in client with an unverified email address (`email_approved = 0`) can access all client-area pages (e.g. `/client/balance`, `/client/order/list`, `/client/invoice`) and read real account data, including wallet balances and transaction history. The API-side enforcement correctly restricts unverified clients to only profile-related endpoints, but the page-side enforcement is overly permissive, allowing any request whose path starts with `/client`. Version 0.8.0 contains a fix. No known workarounds that don't involve modifying the source code are available.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.