CFICPL A.I CyberSecurity Scoring
30/07/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for Canada Foundation for Innovation/Fondation canadienne pour l'innovation in 2026.
No incidents recorded for Canada Foundation for Innovation/Fondation canadienne pour l'innovation in 2026.
No incidents recorded for Canada Foundation for Innovation/Fondation canadienne pour l'innovation in 2026.
Research
PRIVACY POLICY at the University of Copenhagen: https://informationssikkerhed.ku.dk/english/protection-of-information-privacy/privacy-policy/ With over 40,000 students and more than 9,000 employees, the University of Copenhagen is the largest institution of research and education in Denmark. The purpose of the University – to quote the University Statute – is to ’conduct research and provide further education to the highest academic level’. Approximately one hundred different institutes, departments, laboratories, centres, museums, etc., form the nucleus of the University, where professors, lecturers and other academic staff, as well as most of the technical and administrative personnel, carry out their daily work, and where teaching takes place. These activities take place in various environments ranging from the plant world of the Botanical Gardens, through high-technology laboratories and auditoriums, to the historic buildings and lecture rooms of Frue Plads and other locations.
About Aarhus University Aarhus University is a leading international research university covering all scientific areas with a staff of 11.000 employees and 44.500 students, the majority are post-graduate students enrolled on Master’s and PhD programmes. Aarhus University is among the top 100 universities in the world. The aim of the university is to sustain and enhance a high standard in both research and education, which has placed it among the international elite. Aarhus University was established in 1928 as a small private initiative. It has since grown to become a leading public research university with international reach covering all academic fields and address basic, applied and strategic research as well as the research-based consultancy provided to public authorities and private business. One of Aarhus University’s focus areas is talent development. An activity considered so important that it is singled out as one of the four core activities in the Aarhus University strategy alongside excellent research, world-class education and inspiring research-based consultancy. Research at Aarhus University is both organised in traditional departments under the four faculties and in interdisciplinary research centres. In addition, Aarhus University researchers engage in research collaboration under the auspices of Knowledge Management Centres with external partners such as government organisations, private enterprises, NGOs and Aarhus University’s wide range of international partner universities.
Latest updates, reports, and threat intel affecting the global network.
The Strategic Innovation Fund (SIF) provides major investments in innovative projects that will help grow Canada's economy for the well-being of all Canadians.
A flaw has been found in sigoden aichat up to 0.30.4. This affects an unknown function of the file src/serve.rs of the component API Endpoint. This manipulation causes uncontrolled memory allocation. The attack can be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
A vulnerability was detected in rowboatlabs rowboat up to 0.9.1. The impacted element is the function request.text/req.json of the file apps/rowboat/app/api/composio/webhook/route.ts of the component Composio Webhook Endpoint. The manipulation results in denial of service. It is possible to launch the attack remotely. The exploit is now public and may be used. Upgrading to version 0.9.2 is sufficient to resolve this issue. Upgrading the affected component is recommended. The legacy Next.js app was deleted at 0.9.2 rather than patched, leaving no security control behind.
A security vulnerability has been detected in Reader Tools PDF Reader App 98.8 on Android. The affected element is the function ActSplashNew.handleDeeplink of the component File Handler. The manipulation of the argument _display_name leads to path traversal. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Windows ML CLI is a command line tool for building portable, performant, and high-quality AI models for Windows ML. Prior to 0.4.0, the src/winml/modelkit/serve/cli_api.py component exposes WinML CLI commands through a localhost HTTP API without authentication and configures the allow_origins setting as a wildcard in both src/winml/modelkit/serve/cli_api.py and src/winml/modelkit/serve/app.py. A malicious website loaded by a user can send cross-origin requests to /v1/cli/build or /v1/cli/config and set the trust_remote_code parameter to true, which is converted to the --trust-remote-code command-line flag without validation. This reaches AutoConfig.from_pretrained with trust_remote_code=True in src/winml/modelkit/loader/_autoconfig.py and imports Python code from an attacker-controlled model repository, resulting in arbitrary code execution as the server user. This issue is fixed in version 0.4.0.
fast-uri serializes the port component of a URI without validating it. When recomposing the authority, the userinfo and host components are escaped but the port is concatenated verbatim, so a port value that is not a sequence of digits can inject authority delimiters, demoting the intended host to userinfo and pointing the authority at an attacker-controlled host. Both fast-uri and Node's URL read the result back as the attacker's host with no error, so re-validating the built URI does not catch it. This affects applications that build URIs from parts and assign untrusted data to the port component through the serialize, normalize, or equal functions in their object forms. The issue affects fast-uri versions before 2.4.6, from 3.0.0 before 3.1.7, and from 4.0.0 before 4.1.4. It is fixed in 2.4.6, 3.1.7, and 4.1.4, where recomposeAuthority rejects any port that is not a digit sequence per RFC 3986.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.