BSI A.I CyberSecurity Scoring
27/02/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for BCG on Social Impact in 2026.
No incidents recorded for BCG on Social Impact in 2026.
No incidents recorded for BCG on Social Impact in 2026.
Devoteam is a AI-driven tech consulting firm specialised in cloud platforms, cyber, data, and sustainability. Tech native for almost 30 years, Devoteam guides businesses through sustainable digital transformation to deliver value. With over 11,000 tech architects in more than 25 countries across Europe, the Middle East, and Africa, Devoteam is committed to using technology to serve people.
Korn Ferry is a global consulting firm that powers performance. We unlock the potential in your people and unleash transformation across your business—synchronizing strategy, operations, and talent to accelerate performance, fuel growth, and inspire a legacy of change. That’s why the world’s most forward-thinking companies across every major industry turn to us—for a shared commitment to lasting impact and the bold ambition to Be More Than. As the Official Talent & Organizational Consulting Partner of LA28, Korn Ferry is powering the nearly 5,000 people who power the Olympics Games – bringing in the right talent, building strong leaders, and shaping the structure and culture that will deliver an unforgettable experience for the world.
About DKSH DKSH’s purpose is to enrich people’s lives. For 160 years, we have been marketing, selling, and distributing high-quality products and brands for multinational and Fortune 500 companies. Through our Business Units Consumer Goods, Healthcare, Performance Materials, and Technology, we deliver sustainable growth for our partners. We contribute to improving the quality of life for our employees and people in the local communities in which we operate. Headquartered in Switzerland, DKSH is publicly listed and operates in 36 markets across Asia Pacific, Europe, and North America. We employ over 28,000 specialists and produced net sales of CHF 11.1 billion in 2024. Why it's great to work with us At DKSH, we are driven by a purpose that goes beyond the ordinary: enriching people's lives. Through the products and services we provide, DKSH positively impacts millions of lives everyday. Join our team where entrepreneurship meets flexible work arrangements. Take the leap and start a journey where you can grow and make a difference! Learn more about working at DKSH: https://bit.ly/dksh-careers View jobs now: https://bit.ly/dksh-jobs *We do not send job offers from free email services (Gmail, Yahoo mail, Hotmail, etc.), request money from candidates, or require personal documents like bank account details, tax forms, or credit card information from candidates before they are hired: https://bit.ly/dksh-recruitment-disclaimer.
Sustainability is our business. As the world’s largest specialist sustainability consultancy, ERM partners with clients to operationalize sustainability at pace and scale, deploying a unique combination of strategic transformation and technical delivery capabilities. This approach helps clients to accelerate the integration of sustainability at every level of their business. With more than 50 years of experience, ERM’s diverse team of 8000+ experts in 40 countries and territories helps clients create innovative solutions to their sustainability challenges, unlocking commercial opportunities that meet the needs of today while preserving opportunity for future generations.
BearingPoint is an independent management and technology consultancy. Our roots are European, but our footprint is truly global. Transformation is our core service. We deliver value to enterprises, government organizations and NGOs. In a rapidly changing world, BearingPoint provides solutions to tomorrow’s challenges as well as today’s. As for our scale? In 2024 we delivered 2065 projects in 31 countries. We operate in three business units: Consulting, Products, and Capital. This gives us the holistic expertise our clients need to help them achieve greater success. Everything we deliver is measurable and sustainable. We accomplish this through our approach: • We are independent advisors • We listen, understand and adapt • We combine strategy with operational focus • We blend management and technology for maximum potential • We help our clients embrace change Our culture is defined by our purpose – ‘together, we are more than business’ – combined with three values that bring it to life: • We are easy to work with • We empower people to succeed • We create lasting outcomes Every day we’re working to deliver more for people, more innovation, and more for our planet. From AI to automation, strategy to sustainability, BearingPoint is helping our clients and their people to forge brighter futures.
At PwC, we help clients build trust and reinvent so they can turn complexity into competitive advantage. We’re a tech-forward, people-empowered network with more than 364,000 people in 136 countries and 137 territories. Across audit and assurance, tax and legal, deals and consulting, we help clients build, accelerate, and sustain momentum. Find out more at www.pwc.com. PwC refers to the PwC network and/or one or more of its member firms, each of which is a separate legal entity. Please see www.pwc.com/structure for further details.
At Jacobs, we're challenging today to reinvent tomorrow – delivering outcomes and solutions for the world's most complex challenges. With a team of approximately 45,000, we provide end-to-end services in advanced manufacturing, cities & places, energy, environmental, life sciences, transportation and water. From advisory and consulting, feasibility, planning, design, program and lifecycle management, we're creating a more connected and sustainable world.
Ayesa is a global provider of technology and engineering services with more than 11500 employees in twenty-three countries across Europe, Latin America, Africa and Asia. The company develops and implements digital solutions for the private and public sector and uses the latest technology to provide cutting-edge infrastructure design and supervision services. To do this, it has certified experts covering more than 70 different disciplines in utilities and energy; the public sector; banking and insurance; water and the environment, transportation; aeronautics and defence; and construction. As a company that is driven by people and innovation, its business approach is underpinned by talent.
Global Tech Consulting Company All in One. Stefanini is a Brazilian multinational company with 37 years of experience and presence in 41 countries. With more than 38,000 employees, we co-create solutions for a better future, driving digital transformation with a focus on real results. We operate in an integrated way through 7 specialized business units: Consulting (Technology and Business Agility), Analytics & AI, Banking & Payments, Cybersecurity, Manufacturing 4.0, and Digital Marketing. Recognized as the most internationalized technology company in Brazil, according to the Fundação Dom Cabral (FDC) ranking, Stefanini is global by essence, collaborative by nature, and strategic by vocation. It is also a pioneer in applying Artificial Intelligence to transform businesses through an end-to-end AI-First approach.
Latest updates, reports, and threat intel affecting the global network.
BCG's global survey finds 60% of companies may have faced AI-enabled attacks in the past year, but only 7% are using AI in defense.
Bad actors are ramping up AI-driven cyberattacks faster than companies can keep up. A global survey of senior leaders reveals the severity...
AI agents come with significant risk. BCG's FAST framework helps companies identify and manage the capabilities needed for their safe,...
As quantum computers advance, today's cryptographic standards may become vulnerable. Companies should begin transitioning to post-quantum...
BCG worked with Puerto Rico's government to develop a sustainable broadband workforce, driving transformation, and narrowing the island's digital divide.
The surge of new technologies has escalated government risks, equipping attackers with faster, more potent hacking tools that amplify the...
BCG experts explain why cybersecurity in 2025 must be treated as a business discipline—integrating risk, operations, and leadership to...
Susan-Stefanie Breitkopf, CTO of a top optics tech manufacturer, shares expert advice to help organizations tackle cyber threats and adapt...
A global survey of CISOs finds companies are shifting cybersecurity budgets in response to a rising wave of AI-driven cyberattacks.
knowns versions before 0.30.0 contain an authorization bypass vulnerability where mutating code actions are incorrectly classified as read-only operations. Attackers with read-restricted sessions can exploit code.replace to modify permission configurations and escalate privileges on subsequent calls.
knowns versions before 0.30.0 serve the management API without authentication on all network interfaces by default, with no password required on fresh installations. Attackers can access the unauthenticated /api/tunnel/start endpoint to provision a public tunnel and republish the API at a publicly accessible address.
knowns before 0.30.0 fails to validate import names in the import routes, allowing unauthenticated attackers to write files outside the imports directory. Attackers can supply traversal sequences in the name parameter to escape the imports directory and overwrite arbitrary files writable by the server process.
knowns versions before 0.30.0 contain a path traversal vulnerability in the handleCodeReplace() function that allows attackers to overwrite arbitrary files outside the project root. Attackers can supply absolute paths or relative paths containing directory traversal sequences to write malicious content to sensitive files like shell startup scripts or SSH configuration files.
knowns versions before 0.30.0 fail to validate the settings.lsp.languages binary field in project configuration files, allowing attackers to execute arbitrary binaries by crafting a malicious .knowns/config.json file. When a repository with a crafted configuration is opened, the unvalidated binary path is executed twice under the user's account without any verification.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.