AHL A.I CyberSecurity Scoring
19/03/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for Avari Hotel Lahore in 2026.
No incidents recorded for Avari Hotel Lahore in 2026.
No incidents recorded for Avari Hotel Lahore in 2026.
Hospitality
Established in 1975, ITC Hotels Limited has grown to encompass over 140+ hotels across 90+ destinations, solidifying its presence in the Indian subcontinent ITC Hotels seamlessly blends India’s rich tradition of hospitality with globally benchmarked services, offering a collection of hotels and resorts that reflect the unique culture and ethos of each destination. The group operates under six vibrant brands: ITC Hotels and Mementos in the luxury segment, Storii in the boutique premium segment, Welcomhotel in the upper upscale category, Fortune in the midscale segment, and WelcomHeritage in the heritage leisure space
Delaware North is a global leader in the hospitality and entertainment industry. The company annually serves more than a half-billion guests across three continents, including at high-profile sports venues, airports, national and state parks, restaurants, resorts, hotels and casinos. Building on more than a century of enduring partnerships and a commitment to local communities and sustainability, Delaware North’s vision is to delight guests by creating the world’s best experiences today while reimagining tomorrow.
Rosewood Hotel Group is one of the world’s leading global lifestyle and hospitality management groups. It encompasses four brands: ultra-luxury Rosewood; upper-upscale New World Hotels & Resorts; Asaya, an integrated well-being concept; and Carlyle & Co., a modern and progressive private members club. Its combined hotel portfolio consists of 59 properties in 26 countries with more than 30 new properties currently under development. OUR PURPOSE AND CULTURE We are driven to create a future where people and place enrich one another. We are wholly committed to rooting ourselves more deeply in every place we are in while setting new benchmarks for positive impact. As a pioneering collective with a common purpose, we curate extraordinary moments and honor the soul of every place along our journey. At Rosewood Hotel Group, we answer The Calling. Together, we Make the Place. OUR GUIDING PHILOSOPHY We believe in and are guided by Relationship Hospitality. We are all about heartfelt interactions. A desire to build genuine, rewarding and lasting relationships with everyone we meet comes naturally to us. OUR COMMITMENT At Rosewood Hotel Group, your voice is heard – and valued. We’re a community that encourages associates to be themselves, not fit into a fixed culture, and this philosophy shines through in our commitments to reflect and honor the history, culture and geography of our destinations. We’re not only committed to building and nurturing genuine, long-lasting relationships but to transforming them – and our Diversity, Equity and Inclusion (DEI) strategy helps put these principles into practice.
Hilton (NYSE: HLT) is a leading global hospitality company with a portfolio of 24 world-class brands comprising more than 8,400 properties and over 1.25 million rooms, in 140 countries and territories. Dedicated to fulfilling its founding vision to fill the earth with the light and warmth of hospitality, Hilton has welcomed over 3 billion guests in its more than 100-year history, was named the No. 1 World’s Best Workplace by Great Place to Work and Fortune and has been recognized as a global leader on the Dow Jones Sustainability Indices. Hilton has introduced industry-leading technology enhancements to improve the guest experience, including Digital Key Share, automated complimentary room upgrades and the ability to book confirmed connecting rooms. Through the award-winning guest loyalty program Hilton Honors, the more than 210 million Hilton Honors members who book directly with Hilton can earn Points for hotel stays and experiences money can't buy. With the free Hilton Honors app, guests can book their stay, select their room, check in, unlock their door with a Digital Key and check out, all from their smartphone. Visit stories.hilton.com for more information, and connect with Hilton on Facebook, X, LinkedIn, Instagram and YouTube.
Located in the heart of each destination we call home, a stay at any Fairmont hotel is truly unforgettable. Known for grand and awe-inspiring properties and thoughtful and engaging colleagues who aim to make each and every stay a cherished and memorable experience, we have been the stage for some of the most significant moments in global history. As a part of ALL - the Accor Live Limitless Lifestyle Loyalty Program, with 90 exceptional addresses in 32 countries, we are as favored by world leaders and business travelers as we are by families and those with a penchant for luxurious travels. Fairmont Hotels stand at the intersection of elegance and culture, where significant occasions are honored and pivotal global events unfold. Wherever we are situated, our hotels become the cultural and social heart of the community; so immersed in local traditions and so deeply connected to our surroundings, Fairmont Hotels are seen as an essential part of their respective destinations.
Minor Hotels is a global hospitality leader with over 560 hotels and resorts across six continents, a diverse portfolio of F&B businesses and a selection of luxury transportation services. With over four decades of experience, we build stronger brands, foster lasting partnerships, and drive business success by staying focused on what matters most to our guests, team members and partners. Our diverse hotel brands - from the luxury of Anantara and Tivoli to the vibrant style of Avani and nhow - bring our guests to the most desirable hotel and resort destinations around the world. We also own a collection of related hospitality businesses, including luxury residences, private jets, restaurants and bars, spa and wellness, and river cruises and rail journeys. #MinorHotels
Hilton Grand Vacations is a global leader in vacation ownership, developing, marketing and operating a portfolio of high-quality, shared-ownership properties in highly desired vacation destinations. Our company also manages and operates innovative club membership programs providing exclusive exchange, leisure travel, and reservation services for our Members. At Hilton Grand Vacations, our culture of hospitality extends to our more than 10,000 Team Members who collectively play an important role in delivering exceptional service, quality accommodations, and memorable travel experiences. That’s why we’ve created a workplace that supports growth, opportunity, work-life balance, and respect throughout our Club affiliated properties, sales centers, and corporate offices around the globe.
Radisson Hotel Group is an international hotel group, operating in EMEA and APAC with over 1,320 hotels in operation and under development in +95 countries. The international hotel group is rapidly expanding with a plan to significantly grow the portfolio. The Group’s overarching brand promise is Every Moment Matters with a signature Yes I Can! service ethos. The Radisson family of brands portfolio includes Radisson Collection, art’otel, Radisson Blu, Radisson, Radisson RED, Radisson Individuals, Park Plaza, Park Inn by Radisson, Country Inn & Suites by Radisson, and prizeotel brought together under one commercial umbrella brand Radisson Hotels. Radisson Rewards is Radisson Hotel Group’s loyalty program, which delivers an elevated experience that makes Every Moment Matter. As the most streamlined program in the sector, members enjoy exceptional advantages and can access their benefits from day one across a wide range of hotels in Europe, Middle East, Africa, and Asia Pacific. Radisson Meetings provides tailored solutions for any event or meeting, including hybrid solutions placing guests and their needs at the heart of its offer. Radisson Meetings is built around three strong service commitments: Personal, Professional and Memorable, while delivering on the brilliant basics and being uniquely 100% Carbon Neutral. At Radisson Hotel Group we care for people, communities and planet and aim to be Net Zero by 2050 based on the approved near-term Science Based Targets. With unique solutions such as 100% carbon neutral Radisson Meetings, we make sustainable hotel stays easy. To facilitate sustainable travel choices, all our hotels are becoming verified on Hotel Sustainability Basics.
Since it was founded in 1950 and it created the all-inclusive vacation concept, Club Med has been the world leader on its market, and has developed a resolutely upscale, friendly and multicultural spirit. Club Med boasts 70 resorts located in the most beautiful sites in the world, a cruise ship and Luxury Villas & Chalets and, now more than ever, is associated with dreams and happiness. There are 20,000 Gentle Organizers (G.Os) and Gentle Employees (G.Es) at Club Med, who work in the villages, but also at the Paris, Lyon, Singapore, Shanghai, Rio de Janeiro and Miami headquarters, in the sales offices situated in dozens of countries and in travel agencies.
Latest updates, reports, and threat intel affecting the global network.
Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.22 and 4.0.0-RC1 through 4.17.15, an attacker with only a GitHub account can plant a JavaScript payload in a craftcms/cms issue title. When a Craft admin uses the CraftSupport widget’s "Give feedback" screen and types a search term that returns the poisoned issue, the payload executes in the admin’s control panel session. No control panel account or elevated privileges are required on the attacker’s side. This issue has been fixed in versions 4.17.16 and 5.9.23.
Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.21 and 4.0.0-RC1 through 4.17.14, theAssetsController::actionDeleteFolder() only requires the deleteAssets:<volume-uid> permission for the target folder. It never enforces deletePeerAssets:<volume-uid>, even though Assets::deleteFoldersByIds() cascades deletion to every descendant folder and every asset inside, regardless of the uploader's assigned privileges. A low-privilege user who has been granted folder-management rights on a shared volume can therefore destroy assets uploaded by other users (peer assets), bypassing the per-asset peer-permission check that the sibling actionDeleteAsset endpoint correctly applies. This issue has been fixed in versions 4.17.15 and 5.9.22.
Craft CMS is a content management system (CMS). Versions 5.0.0-RC1 through 5.9.20, and 4.0.0-RC1 through 4.17.13 contain an authorization issue in the AssetsController::actionReplaceFile that can delete a source asset without source delete permission by supplying both assetId and sourceAssetId. AssetsController::actionReplaceFile() supports replacing a target asset file using another existing asset as the source. The action loads: assetId -> $assetToReplace and sourceAssetId -> $sourceAsset, then enforces replace permissions using ($assetToReplace ?: $sourceAsset). When both IDs are provided, this expression resolves to the target asset so no permission check is performed against the source asset volume. When both assets are present, Craft copies the source file into the target and then deletes the source asset. There is no deletion check for for the source asset. An authenticated user who can replace files in one volume can delete assets in another volume where they do not have delete permission, as long as they can obtain a sourceAssetId, leading to broken content references and data loss. This issue has been fixed in versions 4.17.14 and 5.9.21.
Description: To issue and renew TLS certificates on behalf of customers, Cloudflare's Universal SSL feature automatically manages the CAA RRset for the customer's zone. This auto-managed RRset is permissive by design (e.g. 'issue "letsencrypt.org"' without parameters). On Universal SSL zones, Cloudflare's authoritative DNS serves this auto-managed RRset at query time, superseding any customer-configured CAA records on the zone. When a customer publishes a stricter CAA record using the RFC 8657 accounturi or validationmethods parameters, the Certificate Authority does not observe those parameters when evaluating the served RRset under RFC 8659. As a result, the RFC 8657 account-binding and validation-method-binding protections are not enforced end-to-end on Universal SSL zones. Successful exploitation could result in issuance of a browser-trusted TLS certificate to an attacker, enabling MITM against the affected domain. Exploitation is non-trivial in practice: an attacker would need to hold an ACME account at one of the Certificate Authorities in the served CAA RRset and to simultaneously satisfy domain control validation across the multiple geographically distinct Network Perspectives the CA relies on for Multi-Perspective Issuance Corroboration. Cloudflare prefixes are anycast-announced from hundreds of locations globally, raising the bar against single-vantage-point BGP hijacks. Any resulting misissuance of a browser-trusted certificate is subject to Certificate Transparency logging required by major browsers, and would be visible to CT monitoring. Mitigation: Customers requiring strict RFC 8657 enforcement need to disable Universal SSL on the affected zone. Universal SSL's automatic CAA management and customer-set RFC 8657 accounturi and validationmethods enforcement are mutually exclusive by the nature of the issue, so there is no in-product workaround that preserves both. Certificate Transparency monitoring is recommended for all customers as a general detection control. Credits: David Osipov (ORCID: https://orcid.org/0009-0005-2713-9242), independent researcher
Out of bounds read and write in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.