Capgemini Invent A.I CyberSecurity Scoring
02/04/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for Capgemini Invent in 2026.
No incidents recorded for Capgemini Invent in 2026.
No incidents recorded for Capgemini Invent in 2026.
Slalom is a fiercely human business and technology consulting company that leads with outcomes to bring more value, in all ways, always. We team with leaders who expect more. So we bring more. From strategy through delivery, our agile teams across 53 offices in 12 countries collaborate with you to bring powerful customer experiences, innovative ways of working, and new products, services, and businesses to life. Every day, we work at the forefront of industry, combining our deep roots in technology and data, to help you tackle challenges, improve operations, and drive sustainable growth. It’s why we are trusted by leaders across the majority of the Global 1000, many of the world’s most successful enterprise, mid-market, and emerging companies, and more than 500 high-impact public sector agencies, foundations, and universities. We lead with a balance of heart and practicality, curiosity and agility, local soul and global expertise. That means understanding your culture, goals, organization, and customers. That means being tireless problem solvers. And that means always standing by you as your trusted advisor, respectful challenger, and unwavering champion. Even our partnerships are built different. For more than 20 years, we've sought out and made strategic investments in the world’s emerging and leading technology platforms. Our 360-degree relationships with these innovators, built on mutual trust and respect, has cemented our position as a premier (and often first) partner of choice. We work together as one to offer tailored solutions that unlock the full potential of these technologies. At Slalom, we bring more day-one advantages, more connections and breakthroughs, more doing the right thing, more care for you and your team, and more return on your investment. So that together, we can dream bigger, move faster, and build better tomorrows for all.
Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we work closely with clients to embrace a transformational approach aimed at benefiting all stakeholders—empowering organizations to grow, build sustainable competitive advantage, and drive positive societal impact. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives that question the status quo and spark change. BCG delivers solutions through leading-edge management consulting, technology and design, and corporate and digital ventures. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, fueled by the goal of helping our clients thrive and enabling them to make the world a better place. BCG Privacy Policy: https://www.bcg.com/about/privacy-policy.aspx
Ayesa is a global provider of technology and engineering services with more than 11500 employees in twenty-three countries across Europe, Latin America, Africa and Asia. The company develops and implements digital solutions for the private and public sector and uses the latest technology to provide cutting-edge infrastructure design and supervision services. To do this, it has certified experts covering more than 70 different disciplines in utilities and energy; the public sector; banking and insurance; water and the environment, transportation; aeronautics and defence; and construction. As a company that is driven by people and innovation, its business approach is underpinned by talent.
WNS, part of Capgemini, is a global Agentic AI-powered intelligent operations and transformation company. WNS combines deep industry knowledge with technology, analytics, and process expertise to co-create innovative, digitally-led transformational solutions with over 700+ clients across various industries. WNS delivers an entire spectrum of transformative solutions that entail industry-specific offerings, customer experience services, finance and accounting, human resources, procurement, and data-led analytics solutions to solve operational challenges and drive strategic growth journeys for businesses. As of June 30, 2025, WNS has 66,000+ professionals across 64 delivery centers worldwide, including facilities in the United States, the United Kingdom, Canada, Turkey, Poland, Romania, China, Costa Rica, Malaysia, the Philippines, South Africa, Sri Lanka, and India.
Our unique combination of transformative strategy, transactions and corporate finance delivers real-world value – solutions that work in practice, not just on paper. Benefiting from EY’s full spectrum of services, we’ve reimagined strategic consulting to work in a world of increasing complexity. With deep functional and sector expertise, paired with innovative AI-powered technology and an investor mindset, we partner with CEOs, boards, private equity and governments every step of the way – enabling you to shape your future with confidence. EY-Parthenon is a brand under which a number of EY member firms across the globe provide strategy consulting services. For more information, please visit ey.com/parthenon.
McKinsey & Company is a global management consulting firm. We are the trusted advisor to the world's leading businesses, governments, and institutions. We work with leading organizations across the private, public and social sectors. Our scale, scope, and knowledge allow us to address problems that no one else can. We have deep functional and industry expertise as well as breadth of geographical reach. We are passionate about taking on immense challenges that matter to our clients and, often, to the world. We work with our clients as we do with our colleagues. We build their capabilities and leadership skills at every level and every opportunity. We do this to help build internal support, get to real issues, and reach practical recommendations. We bring out the capabilities of clients to fully participate in the process and lead the ongoing work.
At Advantage Solutions, we're the unseen architects behind your everyday purchases. From pantry staples to your online shopping carts, we ensure your favorite goods are always in stock and within reach by connecting manufacturers to the right retailers and teaming up with retailers to figure out the best ways to get those products into your hands. We specialize in elevating brand presence, enhancing retail strategies, and creating memorable brand experiences. Our purpose is to connect people with products and experiences that enrich their lives. How do we do that? Through our mission: to generate demand for consumer brands and retailers, converting shoppers into buyers in every way they shop, and our values: Put People First, Serve with Heart, Lead with Insights, Execute Relentlessly and Win Together. Check us out at advantagesolutions.net.
Guidehouse is a global AI-led professional services firm delivering advisory, technology, and managed services to the commercial and government sectors. With an integrated business technology approach, Guidehouse drives efficiency and resilience in the healthcare, financial services, energy, infrastructure, and national security markets. Built to help clients across industries outwit complexity, the firm brings together approximately 18,000 professionals to achieve lasting impact and shape a meaningful future.
Applus+ is a worldwide leader in the testing, inspection, and certification sector. We are a trusted partner, enhancing the quality and safety of our clients’ assets and infrastructures while safeguarding their operations and improving their environmental performance. Our innovative approach, technical capabilities and highly-skilled and motivated workforce of over 25,000 employees assure operational excellence across multiple sectors in more than 65 countries. We offer a complete portfolio of solutions that address a range of needs, from asset integrity management to statutory compliance-based inspections. We place a strong emphasis on technological development, digitalisation and innovation, as well as having the latest knowledge of regulatory requirements.
Latest updates, reports, and threat intel affecting the global network.
“Cybersecurity isn't just about defense anymore. It is about continuous resilience.” I hear this sentiment often in conversations with...
A European telecom leader strengthens identity security with cloud-based PAM, automation, and disaster recovery readiness.
Discover how Capgemini drives sustainable cyber security, reducing environmental impact and strengthening resilience. Get in touch today.
In today's fast-evolving cyber threat landscape, organizations face an uphill battle to stay ahead of adversaries. While cybersecurity...
Capgemini's leadership in the ISG Provider Lens™ for Cybersecurity Solutions and Services 2025 report reflects our commitment to...
With an internal Zero Trust program, Capgemini prepares itself to address immediate and future cybersecurity challenges while ensuring a better user...
From cracking codes to crafting strategy, cybersecurity is a field where curiosity meets critical thinking. We caught up with Priya Kanduri,...
Learn about industrial network operations centers (NOCs) and the role of agentic AI, and the success of Dark NOC in the Telecom industry.
In the ever-evolving world of cybersecurity, few leaders embody resilience, innovation, and inclusivity like Marjorie Bordes.
An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1
The OCPP 1.6 client in subsys/net/lib/ocpp parsed inbound WAMP RPC frames in parse_rpc_msg() (subsys/net/lib/ocpp/ocpp_j.c) using a hand-rolled helper, extract_string_field(), that copied the message's uid and action fields with strncpy(out_buf, token + 1, outlen - 1) and then scanned the result with strchr(out_buf, '"'). Because strncpy does not NUL-terminate the destination when the source is at least outlen - 1 (127) bytes long, the subsequent strchr reads past the 128-byte destination buffer into adjacent stack memory; if a " byte is found beyond the buffer, a one-byte out-of-bounds NUL write also occurs. A related defect in extract_payload() runs strchr/strrchr over the receive buffer, which may not be NUL-terminated when a maximal-length frame fills it. The parsed bytes come directly from the OCPP central-system server over a websocket: the reader thread fills recv_buf via websocket_recv_msg() and calls parse_rpc_msg() on each inbound DATA frame (subsys/net/lib/ocpp/ocpp.c). A malicious or compromised central server, or an on-path attacker (OCPP is commonly deployed over plain ws://), can send an RPC frame whose uid or action field is 127+ bytes with no closing quote, triggering the out-of-bounds access. The primary impact is a remotely triggerable denial of service: the unbounded scan can fault on an unmapped page, and the stray NUL write can corrupt adjacent stack state. The over-read data is not reflected to the peer, so disclosure is limited. The feature is EXPERIMENTAL and must be explicitly enabled (CONFIG_OCPP). The fix replaces the manual parser with the bounds-respecting json_mixed_arr_parse() and copies the extracted uid with an explicitly NUL-terminated buffer, eliminating both over-reads.
A vulnerability in huggingface/transformers versions <=5.8.0.dev0 allows an attacker to perform arbitrary file writes via path traversal. The issue resides in the `save_pretrained()` methods of `PreTrainedTokenizerBase` and `ProcessorMixin`, where keys from the `chat_template` dictionary are used directly as filenames without proper validation. An attacker can exploit this by publishing a malicious Hugging Face Hub repository with a crafted `tokenizer_config.json` file. When a victim downloads and saves the tokenizer or processor, the attacker-controlled keys can escape the intended save directory, enabling arbitrary file writes with attacker-controlled content. This vulnerability affects multiple processors inheriting from `ProcessorMixin`, including Idefics, Florence, Gemma, Phi, and Qwen-VL.
PyAthena prior to 3.35.4 contains a sql injection vulnerability that allows unauthenticated attackers to inject arbitrary SQL by exploiting improper quote-escaping in DefaultParameterFormatter.format(), which routes DELETE and CTAS statements to the _escape_hive function that backslash-escapes single quotes rather than doubling them. Because Athena and Trino do not treat backslashes as escape characters inside string literals, attacker-supplied input such as a single quote followed by SQL syntax causes the parser to terminate the string literal prematurely, enabling data exfiltration via UNION SELECT, execution of destructive statements, and attacker-controlled CTAS destination and content.
Zephyr's Bluetooth Mesh subnet key management leaks one PSA Crypto key slot on every subnet-key teardown. In subsys/bluetooth/mesh/subnet.c, net_keys_create() imports the Private Beacon Key into a PSA key slot under CONFIG_BT_MESH_PRIV_BEACONS (enabled by default), but subnet_keys_destroy() guarded the matching psa_destroy_key() with CONFIG_BT_MESH_V1d1. That Kconfig symbol was removed when explicit Mesh 1.0.1 support was dropped, so the destroy branch became permanently dead code and the import is never balanced by a destroy. The imbalanced teardown is reached every time subnet keys are destroyed: deleting a subnet (Config Server NetKey Delete), completing a Key Refresh Procedure (which retires the old key set), and resetting/re-provisioning the node. The over-the-air triggers are processed only under the node's device key, so they are exercisable by the provisioner or network administrator that owns the node, reachable over the Bluetooth Mesh network. With the default CONFIG_MBEDTLS_PSA_KEY_SLOT_COUNT of 16, repeated add/delete or key-refresh cycles exhaust the shared PSA key-slot pool after roughly a dozen rounds. Once exhausted, bt_mesh_private_beacon_key() and thus subnet creation fail: the node can no longer add subnets or complete key refresh, and other PSA crypto consumers on the device may be starved, until the device is rebooted. The fix aligns the destroy guard with the import guard (CONFIG_BT_MESH_PRIV_BEACONS) so each slot is freed.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.