BWT A.I CyberSecurity Scoring
13/01/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for Brenntag | Water Treatment in 2026.
No incidents recorded for Brenntag | Water Treatment in 2026.
No incidents recorded for Brenntag | Water Treatment in 2026.
We are a global manufacturer of raw materials and a producer of energy used in everyday life. From medicines to mobile phones, agriculture to automotive, our products enhance standards of living for everyone around the world. We understand the challenge the world is facing, and we are working hard to help economies, businesses and individuals deliver a zero carbon emissions future to meet the commitments of the Paris Agreement. Our plans and actions revolve around implementing carbon emission reduction, making safe and sustainable products, investing in the energy transition, all while creating jobs, improving living standards worldwide. But we wouldn't be able to achieve any of these without our 26,000 dedicated and talented colleagues. It is why we celebrate and reward individuals and teams who strive to push boundaries to constantly innovate and find new and better ways of doing things.
At BASF, we create chemistry for a sustainable future. Our ambition: We want to be the preferred chemical company to enable our customers’ green transformation. We combine economic success with environmental protection and social responsibility. Around 112,000 employees in the BASF Group contribute to the success of our customers in nearly all sectors and almost every country in the world. Our portfolio comprises, as core businesses, the segments Chemicals, Materials, Industrial Solutions, and Nutrition & Care; our standalone businesses are bundled in the segments Surface Technologies and Agricultural Solutions. BASF generated sales of €65.3 billion in 2024. BASF shares are traded on the stock exchange in Frankfurt (BAS) and as American Depositary Receipts (BASFY) in the United States. Credits: https://www.basf.com/global/en/legal/credits Data protection information: https://www.basf.com/global/en/legal/data-protection-at-basf.html
Sasol is a global chemicals and energy company. We harness our knowledge and expertise to integrate sophisticated technologies and processes into world-scale operating facilities. We safely and sustainably source, produce and market a range of high-quality products in 22 countries, creating value for stakeholders. Our revised strategy aims to have a greater focus on value realisation for our stakeholders, sustainable growth and improved business sustainability as well as enhanced cash generation. The Chemicals Business will grow by meeting evolving consumer needs, including the demands of a growing and urbanising middle class. It will focus its activities on specialty chemicals where it has differentiated capabilities and strong market positions that can be expanded over time. The Energy Business will position to be responsive to global trends by providing new energy and mobility solutions over time, pursuing greenhouse gas emission reductions through growth in gas and renewables, and higher cash generation. Terms of use: While we encourage a multitude of views and opinions on this forum, any comments that contain spam (irrelevant links/self-promotion), hate speech, undue negativity or foul language will be removed. Fraud Alert! Sasol's recruitment process does not include unsolicited offers of employment and also does not require advance payments from candidates. Sasol will only contact you if you have applied for a vacancy through the career website, the official Sasol LinkedIn page or if you were contacted by one of our authorised recruitment personnel or local recruiting office. Sasol will not ask you to send personal banking information via email. If you suspect fraud, you are encouraged to alert Sasol by sending an e-mail to [email protected]. Alternatively please report such activity to your local law enforcement authorities.
Evonik goes beyond the boundaries of chemistry with its combination of innovative strength and leading technological expertise. The global chemical company, headquartered in Essen, Germany, is active in more than 100 countries. The common motivation of the approximately 32,000 employees: to provide customers with a decisive competitive advantage with tailor-made products and solutions as a superforce for industry, thereby improving people's lives. In all markets. Every day. Interested in joining our global team? Our wide range of opportunities extends from creative and innovative research through international management all the way to production. Whether you’re studying, starting out in your career or a seasoned professional, come help us make the world a better place. For more information about careers at Evonik, go to: www.careers.evonik.com. #PartOfSomethingSpecial Find our netiquette on: www.evonik.com/netiquette Company Information: https://www.evonik.com/en/meta/company-information.html Privacy Policy: https://www.evonik.com/en/meta/privacy-policy.html
Founded in 1920, Eastman is a global specialty materials company that produces a broad range of products found in items people use every day. With the purpose of enhancing the quality of life in a material way, Eastman works with customers to deliver innovative products and solutions while maintaining a commitment to safety and sustainability. The company’s innovation-driven growth model takes advantage of world-class technology platforms, deep customer engagement, and differentiated application development to grow its leading positions in attractive end markets such as transportation, building and construction, and consumables. As a globally inclusive company, Eastman employs approximately 14,000 people around the world and serves customers in more than 100 countries. The company had 2024 revenue of approximately $9.4 billion and is headquartered in Kingsport, Tennessee, USA.
At IFF, we make joy through science, creativity and heart. As the global leader in flavors, fragrances, food ingredients, health and biosciences, we deliver groundbreaking, sustainable innovations that elevate everyday products—advancing wellness, delighting the senses and enhancing the human experience. With ~22,000 employees across 65 countries, more than 110 manufacturing facilities, 100 R&D centers and 33,000 customers worldwide, we turn possibilities into reality by redefining the limits of science and nature to create a more positive, sustainable future for all. Visit us at www.iff.com to learn how our real-deal experts approach work with an entrepreneurial mindset, working lockstep to defy expectations and create industry-defining solutions that do more good for people and planet
A trusted partner for millions of customers, Ecolab (NYSE:ECL) is a global sustainability leader offering water, hygiene and infection prevention solutions and services that protect people and the resources vital to life. Building on more than a century of innovation, Ecolab has annual sales of $16 billion, employs approximately 48,000 associates and operates in more than 170 countries around the world. The company delivers comprehensive science-based solutions, data-driven insights and world-class service to advance food safety, maintain clean and safe environments, and optimize water and energy use. Ecolab’s innovative solutions improve operational efficiencies and sustainability for customers in the food, healthcare, high tech, life sciences, hospitality and industrial markets. For more Ecolab news and information, visit www.ecolab.com.
Givaudan is a global leader in Fragrance & Beauty and Taste & Wellbeing. We celebrate the beauty of human experience by creating for happier, healthier lives with love for nature. Together with our customers we deliver food experiences, craft inspired fragrances, and develop beauty and wellbeing solutions that make people look and feel good. With over 163 locations in 52 countries and over 78 production sites, of which 31 are located in Europe, 22 in North America, 17 in Latin America, 8 in Asia-Pacific, and 1 across South Asia, the Middle East, and Africa, we are committed to driving purpose-led growth that makes a positive impact. Givaudan: Human by nature. www.givaudan.com
Air Liquide is a world leader in gases, technologies and services for industry and healthcare. Present in 72 countries with 67,800 employees, the Group serves more than 4 million customers and patients. Oxygen, nitrogen and hydrogen are essential small molecules for life, matter and energy. They embody Air Liquide’s scientific territory and have been at the core of the Group’s activities since its creation in 1902. Taking action today while preparing the future is at the heart of Air Liquide’s strategy. With ADVANCE, its strategic plan for 2025, Air Liquide is targeting a global performance, combining financial and extra-financial dimensions. Positioned on new markets, the Group benefits from major assets such as its business model combining resilience and strength, its ability to innovate and its technological expertise. The Group develops solutions contributing to climate and the energy transition—particularly with hydrogen—and takes action to progress in areas of healthcare, digital and high technologies. Air Liquide’s revenue amounted to more than 27.5 billion euros in 2023. Air Liquide is listed on the Euronext Paris stock exchange (compartment A) and belongs to the CAC 40, CAC 40 ESG, EURO STOXX 50, FTSE4Good and DJSI Europe indexes.
Latest updates, reports, and threat intel affecting the global network.
Romania's National Cyber Security Directorate (DNSC) has confirmed a major ransomware attack on the country's water management agency,...
The U.S. and its allies warned that defenders should take the hackers seriously, despite the attackers' pattern of exaggerating their actual...
High Water Mark: CISA Shares Foundations for Effective Cybersecurity and Risk Management ... Over the past few years, there has been a steady flow...
Critical infrastructure, including electric grids, water treatment facilities, transportation networks and industrial plants, is vulnerable...
Water treatment workers are grappling with how to protect against a new threat: hackers burrowing into the system and wreaking havoc.
As threats to critical infrastructure grow and government funding stagnates, operators are turning to civic-minded volunteers from the...
Water sector cybersecurity is critical as cyberattacks threaten public safety and infrastructure, especially at outdated facilities.
Mounting cybersecurity threats against water and wastewater utilities have prompted New York Gov. Kathy Hochul to unveil proposed cybersecurity requirements.
Water and wastewater utilities in New York State will for the first time be required to meet a host of basic cybersecurity requirements.
Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.22 and 4.0.0-RC1 through 4.17.15, an attacker with only a GitHub account can plant a JavaScript payload in a craftcms/cms issue title. When a Craft admin uses the CraftSupport widget’s "Give feedback" screen and types a search term that returns the poisoned issue, the payload executes in the admin’s control panel session. No control panel account or elevated privileges are required on the attacker’s side. This issue has been fixed in versions 4.17.16 and 5.9.23.
Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.21 and 4.0.0-RC1 through 4.17.14, theAssetsController::actionDeleteFolder() only requires the deleteAssets:<volume-uid> permission for the target folder. It never enforces deletePeerAssets:<volume-uid>, even though Assets::deleteFoldersByIds() cascades deletion to every descendant folder and every asset inside, regardless of the uploader's assigned privileges. A low-privilege user who has been granted folder-management rights on a shared volume can therefore destroy assets uploaded by other users (peer assets), bypassing the per-asset peer-permission check that the sibling actionDeleteAsset endpoint correctly applies. This issue has been fixed in versions 4.17.15 and 5.9.22.
Craft CMS is a content management system (CMS). Versions 5.0.0-RC1 through 5.9.20, and 4.0.0-RC1 through 4.17.13 contain an authorization issue in the AssetsController::actionReplaceFile that can delete a source asset without source delete permission by supplying both assetId and sourceAssetId. AssetsController::actionReplaceFile() supports replacing a target asset file using another existing asset as the source. The action loads: assetId -> $assetToReplace and sourceAssetId -> $sourceAsset, then enforces replace permissions using ($assetToReplace ?: $sourceAsset). When both IDs are provided, this expression resolves to the target asset so no permission check is performed against the source asset volume. When both assets are present, Craft copies the source file into the target and then deletes the source asset. There is no deletion check for for the source asset. An authenticated user who can replace files in one volume can delete assets in another volume where they do not have delete permission, as long as they can obtain a sourceAssetId, leading to broken content references and data loss. This issue has been fixed in versions 4.17.14 and 5.9.21.
Description: To issue and renew TLS certificates on behalf of customers, Cloudflare's Universal SSL feature automatically manages the CAA RRset for the customer's zone. This auto-managed RRset is permissive by design (e.g. 'issue "letsencrypt.org"' without parameters). On Universal SSL zones, Cloudflare's authoritative DNS serves this auto-managed RRset at query time, superseding any customer-configured CAA records on the zone. When a customer publishes a stricter CAA record using the RFC 8657 accounturi or validationmethods parameters, the Certificate Authority does not observe those parameters when evaluating the served RRset under RFC 8659. As a result, the RFC 8657 account-binding and validation-method-binding protections are not enforced end-to-end on Universal SSL zones. Successful exploitation could result in issuance of a browser-trusted TLS certificate to an attacker, enabling MITM against the affected domain. Exploitation is non-trivial in practice: an attacker would need to hold an ACME account at one of the Certificate Authorities in the served CAA RRset and to simultaneously satisfy domain control validation across the multiple geographically distinct Network Perspectives the CA relies on for Multi-Perspective Issuance Corroboration. Cloudflare prefixes are anycast-announced from hundreds of locations globally, raising the bar against single-vantage-point BGP hijacks. Any resulting misissuance of a browser-trusted certificate is subject to Certificate Transparency logging required by major browsers, and would be visible to CT monitoring. Mitigation: Customers requiring strict RFC 8657 enforcement need to disable Universal SSL on the affected zone. Universal SSL's automatic CAA management and customer-set RFC 8657 accounturi and validationmethods enforcement are mutually exclusive by the nature of the issue, so there is no in-product workaround that preserves both. Certificate Transparency monitoring is recommended for all customers as a general detection control. Credits: David Osipov (ORCID: https://orcid.org/0009-0005-2713-9242), independent researcher
Out of bounds read and write in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.