Brick Award A.I CyberSecurity Scoring
28/12/2025
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for Brick Award in 2026.
No incidents recorded for Brick Award in 2026.
No incidents recorded for Brick Award in 2026.
China State Construction Engineering Corporation Ltd (in short: China Construction; Stock code: 601668), formally established on December 10, 2007, was co-initiated by four Fortune Global 500 enterprises: China State Construction Engineering Corp. (CSCEC), China National Petroleum Corporation (CNPC), Baosteel Group Corporation Ltd and Sinochem Corporation. China Construction was successfully listed in Shanghai Stock Exchange on July 29, 2009. China Construction has inherited all superior assets and corporate culture of CSCEC, with its business covering housing construction, international contracting, real estate development and investment, infrastructure construction and investment, prospecting and design. China Construction is China’s largest construction and real estate conglomerate and biggest building work contractor. It is the largest transnational construction company in the developing countries and the top home builder in the world, taking the long lead of China’s international contracting business. China Construction is well known in the world for undertaking super high-rise, grand scale, cutting-edge and novel projects and has built up a great number of landmark projects in China and around the world. Such business concept and brand image of China Construction as “Providing Excellent Services across all Continents with Superior Quality as the Top Priority” is universally acknowledged and commended. China Construction is one of the most integrated construction and real estate conglomerates in China with the longest history of specialized operation and market-oriented management. It is the only construction enterprise in China certified for 3 top grade Qualifications of general contracting for building works, municipal public works and highway works, in addition to “1+4” qualifications and first-grade qualification for engineering design of building industry.
Latest updates, reports, and threat intel affecting the global network.
The US Cybersecurity and Infrastructure Security Agency (CISA) warned of "ongoing intrusions" from Chinese nation-state actors deploying the...
Law firms across America are discovering a disturbing truth: while they protected their primary computers and networks with the latest...
The U.S. National Science Foundation has awarded $1.5 million to the Penn State College of Information Science and Technology for the...
Faculty at UTulsa continue to demonstrate excellence in cybersecurity research with two grants and the prestigious CAREER Award from the...
Funding enables Bricklayer AI to expand product development creating Autonomous AI Specialists that work alongside human experts,...
An exploding global demand for cybersecurity practitioners has given rise to career opportunities with an assist from Purdue University.
By Megan Sayles AFRO Business Writer [email protected]. Google for Startups recently announced the winners of its 2023 Black Founders Fund,...
The National Association of State Chief Information Officers names the top 10 projects and programs improving government with technology.
Senteon, a cybersecurity startup founded by Purdue University alumni, completed a round of seed funding that includes an investment from the...
GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization.
AVideo TopMenu plugin through version 26.0 contains a stored cross-site scripting vulnerability in menu item rendering due to missing output encoding of icon classes, URLs, and text labels. Attackers can inject malicious JavaScript through unescaped menu item fields that execute for all site visitors, potentially stealing session cookies or performing unauthorized actions.
AVideo through version 25.0 contains an authentication bypass vulnerability in the decryptMessage.json.php endpoint that allows unauthenticated users to decrypt PGP messages. Remote attackers can submit private keys, ciphertext, and passphrases to perform server-side decryption without credentials, exposing key material to logs and enabling resource exhaustion attacks.
AVideo through 29.0 contains an authorization bypass vulnerability in the Meet plugin's uploadRecordedVideo.json.php endpoint that derives the target users_id from the uploaded filename without verification. An attacker with knowledge of the Meet shared secret can craft a malicious file upload with a filename containing an arbitrary users_id to invoke passwordless User->login() and establish an authenticated session as any user including admin. Attackers can obtain the Meet shared secret through path-traversal vulnerabilities or timing attacks against checkToken.json.php, then POST a crafted file to uploadRecordedVideo.json.php with a filename like '1-anything.mp4' to hijack admin sessions and gain full account takeover.
AVideo through version 27.0 contains a server-side request forgery vulnerability in plugin/Live/test.php that allows authenticated administrators to read arbitrary URLs via the statsURL parameter, which lacks isSSRFSafeURL() validation and accepts requests to private IP ranges and cloud metadata endpoints. Attackers can exploit this by crafting requests to internal services, cloud metadata endpoints like 169.254.169.254, and localhost to retrieve sensitive information including IAM credentials, internal service responses, and network configuration details.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.