FODPA A.I CyberSecurity Scoring
13/03/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for Federal Office for Defence Procurement armasuisse in 2026.
No incidents recorded for Federal Office for Defence Procurement armasuisse in 2026.
No incidents recorded for Federal Office for Defence Procurement armasuisse in 2026.
Montréal est la plus grande ville francophone d’Amérique et elle se distingue par sa vitalité culturelle exceptionnelle et des forces créatrices reconnues mondialement. Elle se développe un peu plus chaque jour en une ville contemporaine, inclusive et dynamique sur les plans économique, culturel et social. Visant à offrir aux Montréalaises et aux Montréalais un lieu de vie agréable et prospère, la Ville de Montréal veut rester à l’écoute des besoins changeants de sa population afin de s’y adapter de façon continue. Pour ce faire, elle mise sur les compétences et l’expertise de ses 28 000 employés au service de 1,8 million de citoyens.
Är du beredd att tänka nytt och hitta framtidens lösningar? För vårt framtida uppdrag behöver vi medarbetare med hög kompetens, stort engagemang och som strävar efter ständig förbättring. Vid din sida kan du få engagerade kollegor inom hundratals kvalificerade yrken – ekonomer, sjuksköterskor, jurister, radiologer, ingenjörer och kirurger. Stockholms läns landsting är en av landets största arbetsgivare med ett livsviktigt uppdrag. Vi ger två miljoner invånare en effektiv kollektivtrafik och en god hälso- och sjukvård i landets snabbast växande region. Varje dag, dygnet runt.
Cape Town, or the Mother City, is South Africa’s oldest city, its second-most populous and the legislative capital. It is made up of a diverse population, a rich history, world-famous tourist attractions and an exciting calendar of international and local events. More than 231 councillors and 26 225 staff serve 4 million residents across a sprawling and cosmopolitan metro of 2 500 square kilometres. The City provides all the services normally associated with a full-service municipality, such as water, electricity, waste removal, sanitation, new infrastructure, roads, public spaces, facilities, housing developments, the upgrade of informal settlements and existing infrastructure, clinics and more. To meet the current and future needs of its residents, the City of Cape Town has formulated strategies and policies to guide development and growth. Central to these is the Integrated Development Plan (IDP), which is a five-year plan that informs the City’s policy and budget decisions. The City’s strong sense of community makes it one of the best places to live, work and raise a family. We offer rewarding career opportunities, great benefits and competitive salaries. New opportunities are posted at www.capetown.gov.za/careers.
The National Institute of Statistics and Geography of Mexico (INEGI) is an autonomous institution of the Federal Public Sector. INEGI is the coordinator of the National System of Statistical and Geographical Information of Mexico. The main objective of INEGI is to provide statistical and geographical information to the state and to the society of Mexico, in order to contribute to national development under the principles of accessibility, transparency, objectivity and independence.
At the Home Office, we help to ensure that the country is safe and secure. We’ve been looking after UK citizens since 1782. We are responsible for: - working on the problems caused by illegal drug use - shaping the alcohol strategy, policy and licensing conditions - keeping the United Kingdom safe from the threat of terrorism - reducing and preventing crime, and ensuring people feel safe in their homes and communities - securing the UK border and controlling immigration - considering applications to enter and stay in the UK - issuing passports and visas - supporting visible, responsible and accountable policing by empowering the public and freeing up the police to fight crime - fire prevention and rescue These organisations are all part of the Home Office: - Border Force - HM Passport Office (HMPO) - Immigration Enforcement - UK Visas and Immigration (UKVI)
Employment with the State of Ohio is more than ‘just a job’ – it is a privilege to serve our families, friends and neighbors who rely on us throughout our great state. We are a team of dedicated public servants committed to high performance, innovative thinking, and delivering excellent and efficient services. Our goal is to recruit and retain the best talent for our positions, because when we have the best talent, we get the best results for our community. We are #TeamOhio.
Texas Health and Human Services, also known as the Texas Health and Human Services Commission (HHSC), helps more than 7.5 million Texans every month. The agency supports the needs of mothers, children and families through programs such as Medicaid, CHIP, SNAP, women’s health and behavioral health services. HHSC provides long-term services and supports for seniors and people with disabilities, and operates state supported living centers for residents with intellectual and developmental disabilities and state psychiatric hospitals. HHSC also regulates health care providers, professions and facilities to protect the health and safety of Texans.
The Commission represents and upholds the interests of the EU as a whole, and is independent of national governments. The European Commission prepares legislation for adoption by the Council (representing the member countries) and the Parliament (representing the citizens). It administers the budget and the policy programmes (agriculture, fisheries, research etc.) in cooperation with authorities in the member countries. Visit http://www.europa.eu/ if you want to learn more about the EU, or call the free service number 00 800 6789 10 11 from anywhere in the EU, they speak all 24 official languages. Disclaimer: The European Commission is working to ensure that social networks respect the highest standards of data protection. All users of social networks should be particularly careful about how they disclose their personal information and about how it may be used by third parties and the social network themselves. The presence of the European Commission on LinkedIn does not mean that we endorse or in any way agree with the privacy policy or practices of this professional social media network. Read more about our social media policy → europa.eu/!dyJq74
Region Västra Götaland is governed by democratically elected politicians and with just over 50,000 employees is one of Sweden’s biggest employers. It is tasked with offering good healthcare and dental care and providing the prerequisites for good public health, a rich cultural life, a good environment, jobs, research, education and good communications. All together, these provide a foundation for sustainable growth in Västra Götaland. Koncernen Västra Götalandsregionen finns till för människorna i Västra Götaland och för allt som ligger invånarna nära: jobb, utbildning, hälso- och sjukvård, kultur och kommunikationer. Västra Götalandsregionen ska bidra till hälsa och trygghet i vardagen och för ett livskraftigt Västra Götaland nu och i framtiden. Vi har ett gemensamt ansvar att se till den enskilda människans behov och till regionmedborgarnas samlade behov för att uppnå visionen Det goda livet. Det gör vi inom våra tre ansvarsområden: Hälso- och sjukvård, tillväxt och utveckling och kollektivtrafik. Koncernen har drygt 50 000 medarbetare som arbetar inom framförallt hälso-och sjukvård men även inom kollektivtrafik, kulturverksamhet, skolor, folktandvård, lokal- och fastighetsförvaltning och folkhälsofrågor. Att arbeta i Västra Götalandsregionen gör avtryck – hos människor, i samhället och för framtiden. Lediga tjänster finns på: www.vgregion.se/jobb
Latest updates, reports, and threat intel affecting the global network.
COREB (Communauté régionale de la Broye) is a strategic regional development organisation supporting the transformation of the Broye region...
These are scenes one recognizes from dictatorships: masked agents from the Immigration and Customs Enforcement (ICE) agency hunt down...
More than 35000 Black Hornet drones are already in service; armasuisse now adds vehicle-integrated nano-drones to Piranha 8x8 fleets under a...
Delivery of the Black Hornet UAV systems to Swiss Armed Forces will include drones with software and integration kit specially designed to...
Defense procurement agency Armasuisse aims to sharply increase funding for academic research, focusing on drones, cyber security and...
The Swiss army plans to massively expand its research budget by 2030 and work more closely with universities to bring the army up to speed...
The Swiss military plans to massively expand its research budget by 2030 and work more closely with universities to bring the military up to...
From 1 January 2026, Dr Roland Meier will assume leadership of the Cyber Security team in the division Cyberdefence at armasuisse Science...
ArmaSuisse, the Federal Office for Defence Procurement has asked Elbit Systems the manufacturer of the ADS 15 (Hermes 900 HFE) reconnaissance drone to...
A remote attacker who controls a container registry may be able to direct a client's token request to a host of the attacker's choice, and disclose the victim's registry credentials to that host. This vulnerability is addressed in containerization version 0.41.0.
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the djust live transport resolves the LiveView to mount from a client-supplied dotted path by calling `__import__(module_path, ...)`. The module is imported — running its top-level code (import side effects) — before the framework checks that the resolved object is a `LiveView` subclass and before any per-view authentication. The `LIVEVIEW_ALLOWED_MODULES` allowlist that should contain this is fail-open (`if allowed_modules:` — skipped when the setting is unset, the framework default) and uses loose `startswith` matching. An unauthenticated WebSocket client (the WS handshake does not require auth; per-view auth runs only after import + instantiate) can therefore send a `mount` / `live_redirect_mount` / `url_change` frame (or an SSE mount) with `view = "<any.importable.module>.AnyName"` and cause the server to import — and execute the top-level code of — any importable Python module by name. Version 1.0.7 fixes the issue with a fail-closed resolution gate (`djust._view_resolution.is_view_import_allowed`): a client view path resolves only if (a) its module is already loaded (`sys.modules` — so resolving runs no new code; URL-routed views loaded by URLconf at startup keep working with zero config) or (b) it matches `LIVEVIEW_ALLOWED_MODULES` on a module-segment boundary (explicit opt-in for lazily-imported views). The gate runs before `__import__` at all three sinks (+ defense-in-depth inside `_instantiate_view`). As a workaround, set `LIVEVIEW_ALLOWED_MODULES` to the narrow list of modules that contain your mountable LiveView classes. (Note: pre-patch the allowlist is `startswith`-matched and the import still precedes the subclass check, so this is mitigation, not a complete fix.)
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, djust's per-object authorization (`get_object` + `has_object_permission`, ADR-017) was enforced on the WebSocket mount and event paths but not on three other render entry points: (a) the initial HTTP GET render, (b) SPA `url_change` navigation, and (c) `{% live_render %}` embedded child views. An authenticated user could therefore view (and on some paths act on) an object they are not authorized for by loading the page directly, navigating to it via SPA url-change, or composing it as an embedded child — a classic IDOR / broken object-level access control on object-scoped views. This is fixed in djust 1.0.7. All render entry points now route through a shared `enforce_object_permission` chokepoint: HTTP GET returns 403, `url_change` emits a `permission_denied` frame and skips the render, and `{% live_render %}` (eager + lazy) refuses the embed. Views without a custom `get_object` are unaffected (no-op). No reliable workaround short of upgrading. Do not expose object-scoped views through the HTTP-GET / url_change / live_render paths until patched.
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the WebSocket `handle_mount` and `ViewRuntime._build_request` rebuild an `HttpRequest` via `RequestFactory().get(...)` with no `HTTP_HOST`, so `request.get_host()` defaulted to `"testserver"` on the live path. Host/subdomain/domain `TenantResolver`s then misresolved the tenant — `None` on the live path while the HTTP path resolved correctly. With `STRICT_MODE=False` the tenant-scoped managers returned unscoped rows (cross-tenant disclosure); with the default they returned an empty queryset (broken tenancy). This is fixed in djust 1.0.7. The handshake Host is extracted from the ASGI scope, validated against `ALLOWED_HOSTS` (the same logic as the CSWSH Origin gate, parsed with Django's `split_domain_port` so malformed Hosts are rejected at the boundary), and propagated — with the TLS scheme — into the reconstructed request, so live-path tenant resolution matches HTTP exactly. There is no known workaround on the live path short of upgrading. Users are most exposed when combined with `STRICT_MODE=False`.
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, when a Django `Model` instance is assigned to a public view attribute, djust serialized it to the client with no sensitive-field denylist — sending fields such as `password` (the hash), privilege flags (e.g. `is_staff` / `is_superuser`), tokens, and other PII to the browser. Because exposing model objects to templates is a normal djust pattern, this could leak credentials/PII without the developer realizing the full object crossed the wire. This is fixed in djust 1.0.7. Model serialization applies a secure-by-default sensitive-field denylist (password/hash/token/secret-style fields and known privilege flags are withheld) with an identity-subset fallback. As a workaround, keep `Model` instances on `_private` attributes and expose only the specific fields needed, until patched.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.