BLS A.I CyberSecurity Scoring
01/11/2025
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for Brown Logistics Services in 2026.
No incidents recorded for Brown Logistics Services in 2026.
No incidents recorded for Brown Logistics Services in 2026.
The Brink’s Company (NYSE:BCO) is a leading global provider of cash and valuables management, digital retail solutions (DRS), and ATM managed services (AMS). Our customers include financial institutions, retailers, government agencies, mints, jewelers and other commercial operations. Our network of operations in 51 countries serves customers in more than 100 countries. For more information, please visit our website at www.brinks.com.
The CMA CGM Group is a global player in sea, land, air and logistics solutions, true to its corporate Purpose, "We imagine better ways to serve a world in motion". Present in 177 countries, it employs 160,000 people, of which nearly 6,000 in Marseilles where its head office is located. The world's 3rd largest shipping company, CMA CGM serves more than 420 ports across 5 continents with a fleet of over 650 vessels. In 2024, CMA CGM carried over 23 million TEU (twenty-foot equivalent unit) containers. Its subsidiary CEVA Logistics, one of the world's top five players, operates 1,000 warehouses and handled 15 million shipments in 2024. CMA CGM AIR CARGO, the Group's air freight division, will operate a fleet of 6 cargo aircraft by 2025. CMA Media, France's 3rd largest private media group, includes RMC-BFM and several national and regional press titles (La Tribune Dimanche, La Tribune, La Provence and Corse Matin). Committed to energy transition, the CMA CGM Group is aiming for Net Zero Carbon by 2050. The CMA CGM Foundation provides humanitarian aid in crisis situations, and is committed to education for all and equal opportunities throughout the world. To date, the CMA CGM Foundation has transported 63,000 tons of humanitarian aid to 97 countries and supported over 550 educational projects.
bnode (formerly bpostgroup) is a digital expert in parcel logistics, active in Europe, North America and Asia-Pacific. The group operates through three business units: 3PL (soon to be paxon, with brands as Active Ants, Staci and Radial), Cross-border (working under the name of Landmark Global) and Bene last-mile (bpost, Dynagroup, Euro-Sprinters,..). With more than 37,000 employees and a turnover of 4.3 billion euros in 2024, bnode is a major logistics player. As a people- and planet-friendly company, bnode creates long-term sustainable value for customers and shareholders.
Delhivery is India’s largest fully-integrated logistics services provider. With a nationwide network spanning over 18,850 pin codes, the company offers a comprehensive range of logistics solutions — including express parcel transportation, partial-truckload (PTL) and full-truckload (FTL) freight, cross-border services, supply chain solutions, Delhivery Direct (national and local courier services) and technology-enabled logistics. Comprehensive Solutions for Every Need ➡️Express Parcel: Send shipments across India, including heavy goods, with value-added services like real-time tracking, NDR Management, WhatsApp based updates, RTO, Protect ➡️Delivery Direct: All-in-one courier service that lets you send anything within the city or anywhere in India ➡️Rapid: A sub-2-hour delivery service helping brands offer faster deliveries and a better customer experience ➡️Supply Chain Solutions: Store and manage inventory at optimized locations across India, fulfilling orders for both B2B and B2C channels with precision. ➡️Partial Truckload (PTL):Leverage India’s large PTL network for door-to-door or hub-to-hub delivery with multimodal freight and smart dashboards. ➡️Full Truckload (FTL): Handle high-volume shipments with speed and efficiency through our professional network of truckload partners and our own fleet. ➡️Cross-Border Services: Ship parcels and freight to 220+ countries with door-to-door and port-to-port logistics ➡️TransportOne: Delhivery’s AI‑powered TMS that gives enterprises end‑to‑end optimization, from intelligent sourcing and load stacking to agentic ePOD and automated billing Our Impact at Scale ✔️4 Billion+ parcels shipped since inception ✔️Coverage of 99.5% of India’s population ✔️Trusted by 48,000+ businesses ✔️Shipped over 4.7 Million tonnes of freight ✔️Managing 22.05 Million+ sqft of logistics infrastructure Start shipping: https://one.delhivery.com/register Download Delhivery Direct App: https://appdelhivery.go.link/5YuVn
We make everyday life easier. PostNord is a leading provider of parcel and logistics services to, from, and within the Nordic region. We ensure the provision of a postal service to households and businesses in Sweden, regardless of where they live and work. PostNord connects companies, public authorities and consumers and enables business, trade and communication in the Nordic region. With our expertise and strong distribution network, we put in place the conditions for the e-commerce, distribution, logistics and communication solutions of tomorrow in the Nordic region. In 2023, the Group had around 24,500 employees and sales of SEK 39.3 billion. The Parent Company is a Swedish public limited company with Group headquarters in Solna, Sweden. Visit us at www.group.postnord.com
Ecom Express: Delivering Over 1.9 Billion Reasons to Trust Us Based in Gurugram, Ecom Express was established in 2012 by veterans backed by 100+ years of collective logistics expertise. We aren't just a logistics provider—we're your partner in bridging distances and making connections. Our network reaches every corner, covering 27,000+ PIN codes in 2700+ towns, meticulously handled over 1.9 billion parcels in the past 10+ years. We're not just delivering; we're innovating with solutions like Ecom Magnum, comprehensive shipping services, fulfillment capabilities, Bulls.ai and drone technology—ensuring every package is delivered to the right location on time. Connect | Deliver| Grow https://bit.ly/4d0sHpV
UPS Supply Chain Solutions offers a comprehensive portfolio of services to enhance customers' business performance, including logistics and distribution, transportation and freight, consulting, customs brokerage, and international trade services. UPS provides the expertise and the scale to meet the total supply chain needs of customers worldwide, whether it requires the movement of goods, information or funds.
Founded in 1982, Aramex has emerged as a global leader in logistics and transportation, renowned for its innovative services tailored to businesses and consumers. As a listed company on the Dubai Financial Market (since 2005) and headquartered in the UAE, our strategic location facilitates extensive customer reach worldwide, bridging the gap between East and West. With operations in 600+ cities across 70 countries, Aramex employs over 16,000 professionals. Our success is attributed to four distinct business products that provide scalable, diversified, and end-to- end services for customers. These products are: • International Express, encompassing Aramex's Parcel Forwarding Business (Shop & Ship and MyUS). • Domestic Express • Freight Forwarding • Logistics & Supply Chain Solutions Sustainability is at the core of our vision and mission. To build a truly sustainable business, we leverage our core competencies to make a positive impact as responsible members of the communities we serve. Through partnerships with local and international organizations, we strive to expand our reach and benefit more individuals through targeted programs and initiatives, ensuring long-term positive change and community development. For more information, please visit us: www.aramex.com
L'azienda opera in Italia e svolge un ruolo importante nel Paese, dando un forte contributo alla filiera produttiva e all'economia nazionale. Il Gruppo Poste Italiane rappresenta una realtà unica per dimensioni, riconoscibilità, capillarità e fiducia da parte della clientela, e fornisce un importante contributo al tessuto economico, sociale e produttivo del Paese. Quotata alla Borsa di Milano dal 2015, Poste Italiane ha un flottante di circa il 35%; il 65% circa delle azioni è poi ripartito tra il Ministero dell’Economia e delle Finanze, che ne detiene una quota del 29,26%, e da Cassa depositi e prestiti che possiede una quota del 35%. Da maggio 2023 Silvia Maria Rovere è Presidente. Da Aprile 2017 Matteo Del Fante Amministratore Delegato. Da febbraio 2024 Giuseppe Lasco è Direttore Generale. Poste Italiane è oggi la più grande realtà del comparto logistico in Italia ed è leader nel settore finanziario, assicurativo e dei servizi di pagamento. Il Gruppo opera esclusivamente in Italia ed è parte integrante del sistema economico, sociale e produttivo del Paese, in quanto realtà unica per dimensioni, riconoscibilità e capillarità. Le attività dell’Azienda generano quindi impatti significativi su tutto il territorio, anche in ottica di raggiungimento degli Obiettivi di Sviluppo Sostenibile (SDGs).” Il Purpose di Poste Italiane: Crescere responsabilmente grazie al decisivo contributo delle proprie persone per il successo sostenibile, l’innovazione, digitalizzazione e la coesione sociale del Paese. Info su: https://www.posteitaliane.it (Ultimo aggiornamento marzo 2024) Poste Italiane aderisce all’Arbitro Assicurativo (AAS), operativo dal 15 gennaio 2026. Maggiori informazioni su https://www.poste.it/assistenza/arbitro-assicurativo
Latest updates, reports, and threat intel affecting the global network.
This month, we're highlighting 48 CIOs, CTOs, and CISOs taking on leadership roles in industries from healthcare to finance to technology.
Nashville, TN Dreamliner is the market-leading transportation services and logistics provider for the live entertainment industry. Grote Logo...
In a significant ruling delivered on 21 November 2024, in Case C‑297/23 P, Harley-Davidson Europe Ltd, Neovia Logistics Services...
Top information security leaders from financial services, logistics, retail and manufacturing speaking at CDO Magazine's CyberSecurity Summit deliberated the...
The Army is focused on building a resilient data network that can withstand contested and disrupted environments, but industry leaders say they need more...
Artificial intelligence (AI), or technology that is coded to simulate human intelligence, is having a huge impact on the business world.
2024 needs to be a year of improved flexibility and adaptability for supply chains as global uncertainty continues.
Mayer Brown understands the inventive, entrepreneurial spirit indigenous to Northern California. Our team, based in Palo Alto and San Francisco,
Mayer Brown's team in Germany—more than 70 lawyers practicing in Frankfurt and Düsseldorf—advises on national as well as international and cross-border issues...
Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.
Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.
Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.
Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.
Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.