BI A.I CyberSecurity Scoring
04/04/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for Beauty by Imagination (BBI) in 2026.
No incidents recorded for Beauty by Imagination (BBI) in 2026.
No incidents recorded for Beauty by Imagination (BBI) in 2026.
Manufacturing
Essity - a globally leading hygiene and health company. Our expertise in hygiene and health began with the acquisition of the Swedish company Mölnlycke in 1975, through which our roots stretch back to 1849. Today, our sustainable innovations from globally trusted brands, designed for everybody and every body, care for the well-being of 1 billion people in 150 countries every day. Working at Essity is not just a career but a chance to make the world healthier, safer, and more hygienic. Our barrier breakers innovate for good and contribute to shaping a sustainable future. At Essity, every career is as unique as the individual. We empower employees to excel together and reach their full potential in a winning culture motivated by a powerful purpose. We provide a sustainable work-life based on flexibility for both employees and employers. At Essity, we are committed to Diversity, Equity, and Inclusion in everything we do. It is the key to our success in creating an inclusive, collaborative, and caring company culture where you can be you with us. Our purpose of Breaking Barriers to Well-being, is to enable customers and consumers to lead fuller lives at all stages of life. Our leading global brands TENA and Tork, and other strong brands such as Actimove, Cutimed, JOBST, Knix, Leukoplast, Libero, Libresse, Lotus, Modibodi, Nosotras, Saba, Tempo, TOM Organic and Zewa. In 2024, Essity had net sales of approximately SEK 146bn (EUR 13bn) and employed 36,000 people. The company’s headquarters is located in Stockholm, Sweden and Essity is listed on Nasdaq Stockholm.If you want to join a company where dedication to people is powered by innovation, welcome to Essity!
A journey that began 75 years ago in a corner of India and has since traversed the world over. Uniting people from across countries, cultures, and customs over the years with a multitude of different dreams, there's power in an idea. An idea that gave rise to brands that stood the test of time, with partnerships it inspired, and the people who made it all happen. One idea that sparked a legacy - this is the story of Bajaj Auto. “Do what you think is best, but be the best in what you do.” - Kamalnayan Bajaj These words embody the spirit of Bajaj Auto. From 1945 to today, from “Hamara Bajaj” to “The World’s Favourite Indian”- the most loved motorcycle brand in almost 80 countries, Bajaj Auto carries its rich legacy and unconventional thinking, with a penchant for staunch differentiation. This philosophy has helped us be No.1 or No.2 in over 20 countries with industry-leading EBITDA of ~20%. Some statistics that reflect our strength: • A Zero Debt 5.5 Billion Dollar Company • World’s largest three-wheeler and third-largest two-wheeler manufacturer • India’s Number 1 motorcycle exporter – 2 out of every 3 motorcycles exported are Bajaj • The largest exporter of Branded Goods – exporting over half of India’s two and three-wheelers • Over 33% of revenue from International markets with 15+ million motorcycles sold With powerful brands, our spectrum ranges from Boxer in Africa to KTM in Europe, from Rouser in Latin America to Pulsar in India, our versatility is evident. International alliances with KTM, Husqvarna, and Triumph have ensured that our horizons are broadened. A pioneer in motorcycle technology, our R&D is world-class with talent from all corners of the globe with TPM being the prime mover of productivity for the last 25+ years. From lean manufacturing, we have now moved to lean engineering & lean marketing, which has led to globally competitive fixed costs. With ever-expanding plans to win over the world, the sun truly never sets on a Bajaj Motorcycle.
Celestica is a technology leader dedicated to driving customer success and market advancements. With deep expertise in design, engineering, manufacturing, supply chain and platform solutions, Celestica enables critical data center infrastructure for AI, cloud, and hybrid cloud and advances technologies in high-growth markets. With a talented team and a strategic global network, Celestica helps its customers achieve a competitive advantage.
Godrej is one of India’s most trusted brands serving over 1.1bn customers worldwide, every day. Godrej & Boyce, a Godrej group company, began it's journey in 1897 with the manufacture of high quality locks and continues with its outstanding engineering capabilities across diverse categories – from consumer goods and furniture, precision manufacturing and aerospace, infrastructure development, and industrial logistics to real estate and power distribution. At Godrej, we enable you to do work that’s good for you, your customers, your community and good for the people around you - essentially, work that you can be proud of.
At Kimberly-Clark, everything we do begins with care — for people, for communities, and for the planet we share. For more than 150 years, our brands have created essentials that make life better for billions of people every day. Better Care for a Better World is more than our purpose; it’s how we lead. Through our trusted brands, including Huggies®. Kleenex®. Andrex®. Scott®. Kotex®. Poise®. Depend®, we’re building a future where innovation and sustainability work hand in hand. Our 38,000+ employees around the world share a spirit of invention and responsibility that continues to redefine what care means. We’re proud to be recognized among the world’s top employers and sustainability leaders year after year, but our greatest achievement is our people. Their care moves the world forward. Because when care leads, impact follows. Learn more at kimberly-clark.com. To make Kimberly-Clark's social media channels an engaging, respectful environment, here are our Community Guidelines: https://www.kimberly-clark.com/en-us/company/community-guidelines
Over a number of decades PT Indofood Sukses Makmur Tbk has been progressively transformed to become a Total Food Solutions company with operations in all stages of food manufacturing from the production of raw materials and their processing through to consumer products in the market. Today, it is renowned as a well–established company & a leading player in each category of business in which it operates. In its business operations, Indofood capitalizes on its resilient business model with 4 complementary Strategic Business Groups : Consumer Branded Products (CBP). Indofood CBP is one of the leading packaged food producers in Indonesia, with a wide range of packaged food products. ICBP product brands are among the strongest brands with the most significant mind share in Indonesia for consumer food brands. Bogasari, primarily a producer of wheat flour as well as pasta. Its business operations are supported by shipping and packaging units. Agribusiness. The Group’s principal business activities range from research and development, seed breeding, oil palm cultivation and milling; as well as the production & marketing of branded cooking oils, margarine and shortening. In addition, the Group is also involved in the cultivation and processing of rubber and sugar cane as well as other crops. Distribution, which boasts the most extensive distribution network in Indonesia, distributes the majority of Indofood’s and its subsidiaries’ consumer products as well as third–party products. Cultivation and Processed Vegetables activities are conducted by China Minzhong Food Corporation Limited (“CMFC”) which is listed on the SGX and is an integrated vegetable processing company in the People’s Republic of China. Through its decades of experience CMFC has developed an integrated demand-driven operation with wide-ranging cultivation and processing capabilities. In addition, CMFC also has a branded products operation.
FEMSA is a company that creates economic and social value through companies and institutions and strives to be the best employer and neighbor to the communities in which it operates. It participates in the retail industry through Proximity Americas Division operating OXXO, a small-format store chain, and other related retail formats, and Proximity Europe which includes Valora, our European retail unit which operates convenience and foodvenience formats. In the retail industry it also participates though a Health Division, which includes drugstores and related activities and Spin, which includes Spin by OXXO and Spin Premia, among other digital financial services initiatives. In the beverage industry, it participates through Coca-Cola FEMSA, the largest franchise bottler of Coca-Cola products in the world by volume. Across its business units, FEMSA has more than 392,000 employees in 18 countries. FEMSA is a member of the Dow Jones Bestin-Class World Index & Dow Jones Best-in-Class MILA Pacific Alliance Index, both from S&P Global; FTSE4Good Emerging Index; MSCI EM Latin America ESG Leaders Index; S&P/BMV Total México ESG, among other indexes.
RPG Group, established in 1979 and headquartered in Mumbai, is one of India's fastest growing diversified business group with a turnover in excess of US$5.2 billion. The Group has a presence in the core sectors of the economy - Infrastructure (KEC International), Mobility (CEAT), Information Technology (Zensar), Pharmaceuticals (RPG Life Sciences), Energy (Raychem) and Plantations (HML). It has incubated future forward businesses like Asvata (carbon credit), TyresNMore (doorstep tyre and battery fitment service) and Taabi (AI-Powered SaaS Platforms) The Group, through its venture capital fund RPG Ventures, invests in cutting-edge startups and has invested in SecureThings - automotive cybersecurity solutions, Sentra.World - Carbon Accounting Software, Nutrabay - sports nutrition retailer and more. The Group's Vision is Unleash Talent, Touch Lives, Outperform and Be Happy. The brand essence and tagline is captured in the phrase 'Hello Happiness'. It is the culmination of the Group's Vision tenets. It embodies the essence of the RPG spirit and evokes much of what the Group believes and stands for.
We empower generations to explore the wonder of childhood and reach their full potential. We treat play as if the future depends on it — because it does. Play is our language, and we speak to our consumers authentically by representing the world as they see and imagine it. Mattel is a leading global toy and family entertainment company and owner of one of the most iconic brand portfolios in the world. We engage consumers and fans through our franchise brands, including Barbie, Hot Wheels, Fisher-Price, American Girl, Thomas & Friends, UNO, Masters of the Universe, Matchbox, Monster High, Polly Pocket, and Barney, as well as other popular properties that we own or license in partnership with global entertainment companies. Our offerings include toys, content, consumer products, digital and live experiences. Our products are sold in collaboration with the world’s leading retail and ecommerce companies. Mattel is recognized as a Great Place to Work™ and as one of Fast Company’s Best Workplaces for Innovators.
Latest updates, reports, and threat intel affecting the global network.
Beauty By Imagination announced today that its Board of Directors has formally appointed Francesca Raminella as CEO of the Company,...
Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.22 and 4.0.0-RC1 through 4.17.15, an attacker with only a GitHub account can plant a JavaScript payload in a craftcms/cms issue title. When a Craft admin uses the CraftSupport widget’s "Give feedback" screen and types a search term that returns the poisoned issue, the payload executes in the admin’s control panel session. No control panel account or elevated privileges are required on the attacker’s side. This issue has been fixed in versions 4.17.16 and 5.9.23.
Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.21 and 4.0.0-RC1 through 4.17.14, theAssetsController::actionDeleteFolder() only requires the deleteAssets:<volume-uid> permission for the target folder. It never enforces deletePeerAssets:<volume-uid>, even though Assets::deleteFoldersByIds() cascades deletion to every descendant folder and every asset inside, regardless of the uploader's assigned privileges. A low-privilege user who has been granted folder-management rights on a shared volume can therefore destroy assets uploaded by other users (peer assets), bypassing the per-asset peer-permission check that the sibling actionDeleteAsset endpoint correctly applies. This issue has been fixed in versions 4.17.15 and 5.9.22.
Craft CMS is a content management system (CMS). Versions 5.0.0-RC1 through 5.9.20, and 4.0.0-RC1 through 4.17.13 contain an authorization issue in the AssetsController::actionReplaceFile that can delete a source asset without source delete permission by supplying both assetId and sourceAssetId. AssetsController::actionReplaceFile() supports replacing a target asset file using another existing asset as the source. The action loads: assetId -> $assetToReplace and sourceAssetId -> $sourceAsset, then enforces replace permissions using ($assetToReplace ?: $sourceAsset). When both IDs are provided, this expression resolves to the target asset so no permission check is performed against the source asset volume. When both assets are present, Craft copies the source file into the target and then deletes the source asset. There is no deletion check for for the source asset. An authenticated user who can replace files in one volume can delete assets in another volume where they do not have delete permission, as long as they can obtain a sourceAssetId, leading to broken content references and data loss. This issue has been fixed in versions 4.17.14 and 5.9.21.
Description: To issue and renew TLS certificates on behalf of customers, Cloudflare's Universal SSL feature automatically manages the CAA RRset for the customer's zone. This auto-managed RRset is permissive by design (e.g. 'issue "letsencrypt.org"' without parameters). On Universal SSL zones, Cloudflare's authoritative DNS serves this auto-managed RRset at query time, superseding any customer-configured CAA records on the zone. When a customer publishes a stricter CAA record using the RFC 8657 accounturi or validationmethods parameters, the Certificate Authority does not observe those parameters when evaluating the served RRset under RFC 8659. As a result, the RFC 8657 account-binding and validation-method-binding protections are not enforced end-to-end on Universal SSL zones. Successful exploitation could result in issuance of a browser-trusted TLS certificate to an attacker, enabling MITM against the affected domain. Exploitation is non-trivial in practice: an attacker would need to hold an ACME account at one of the Certificate Authorities in the served CAA RRset and to simultaneously satisfy domain control validation across the multiple geographically distinct Network Perspectives the CA relies on for Multi-Perspective Issuance Corroboration. Cloudflare prefixes are anycast-announced from hundreds of locations globally, raising the bar against single-vantage-point BGP hijacks. Any resulting misissuance of a browser-trusted certificate is subject to Certificate Transparency logging required by major browsers, and would be visible to CT monitoring. Mitigation: Customers requiring strict RFC 8657 enforcement need to disable Universal SSL on the affected zone. Universal SSL's automatic CAA management and customer-set RFC 8657 accounturi and validationmethods enforcement are mutually exclusive by the nature of the issue, so there is no in-product workaround that preserves both. Certificate Transparency monitoring is recommended for all customers as a general detection control. Credits: David Osipov (ORCID: https://orcid.org/0009-0005-2713-9242), independent researcher
Out of bounds read and write in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.