CPS A.I CyberSecurity Scoring
13/12/2025
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for Clarksons Port Services in 2026.
No incidents recorded for Clarksons Port Services in 2026.
No incidents recorded for Clarksons Port Services in 2026.
About Hapag-Lloyd With a fleet of 313 modern container ships and a total transport capacity of 2.5 million TEU, Hapag-Lloyd is one of the world’s leading liner shipping companies. In the Liner Shipping segment, the Company has around 14,000 employees and 400 offices in 140 countries. Hapag-Lloyd has a container capacity of 3.7 million TEU – including one of the largest and most modern fleets of reefer containers. A total of 133 liner services worldwide ensure fast and reliable connections between more than 600 ports on all the continents. In the Terminal & Infrastructure segment, Hapag-Lloyd has equity stakes in 21 terminals in Europe, Latin America, the United States, India and North Africa. Around 3,000 employees are assigned to the Terminal & Infrastructure segment and provide complementary logistics services at selected locations in addition to the terminal activities.
Anglo-Eastern's rich maritime heritage spans over 50 years of ship management, crew management, cruise & leisure management and technical services. We manage a diverse fleet of vessels worldwide on behalf of our global partners, and uniquely offer both cadet and crew training through our highly regarded maritime academy and strategically located training centres. From humble beginnings to industry pioneer, we are always looking to the future yet are never far from our roots, and it is this distinct blend of proactive forward-thinking and traditional values, coupled with our commitment to developing and nurturing our people and communities, that drives Anglo-Eastern and sets us apart from our peers. Leading with integrity and doing the right things the right way are at the heart of our work ethic and the foundation upon which we are able to build trust, drive performance and shape a better maritime future for generations to follow. Join us on our voyage in delivering excellence. ------------------------ IMPORTANT NOTICE | Anglo-Eastern does NOT use agents, and we do NOT charge fees in exchange for employment or AEMA sponsorship. We offer employment and sponsorship based on merit and suitability. Anyone asking for money in exchange for Anglo-Eastern employment or AEMA sponsorship is a fraudster. Please report such scammers and do NOT make any payments to them. COMMUNITY POLICY | We welcome our followers and other members of the LinkedIn community to comment on our posts and express their views. However, we have a zero-tolerance policy regarding comments that are obscene, threatening, discriminatory or of a harassing nature (including trolling), as well as those that intend to purposely mislead through false claims and misinformation, solicit, phish and/or otherwise scam. Such comments may be reported and/or removed at any time without notice.
Latest updates, reports, and threat intel affecting the global network.
Shipping company Clarksons is bracing for a tranche of private data to be released, after refusing to pay a ransom to a hacker who staged a “criminal attack”...
WWBN AVideo through commit 9c39d8c8 contains an incomplete authentication bypass in encryptPass.json.php that allows unauthenticated attackers to compute valid HMAC tokens using the public site URL and current time. Attackers can forge authentication tokens by computing hash_hmac with the site's base URL as the key and submit arbitrary passwords to receive encrypted hashes, enabling offline precomputation attacks against stolen password databases.
WWBN AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in the get_domain() and isSameDomain() functions that fail to properly validate referer origins. Attackers can forge requests from sibling subdomains or unparseable long-gTLD origins to perform administrative ObjectYPT writes including live server configuration changes.
WWBN AVideo through 30.0 contains an information disclosure vulnerability in the MobileManager plugin getConfiguration endpoint that returns sensitive configuration data to unauthenticated visitors. Attackers can send an unauthenticated GET request to plugin/MobileManager/getConfiguration.json.php to obtain TLS private key file paths, socket configuration details, platform version, and debug flags enabling further targeted attacks.
WWBN AVideo fails to validate password recovery token expiration in userRecoverPassSave.json.php, allowing attackers to use expired tokens to reset account passwords indefinitely. Attackers who obtain a recovery token can use it at any time to change the target account's password and gain full account access.
WWBN AVideo (current e01e41ecc and earlier) makes three login-time security controls depend solely on the client-supplied User-Agent header. The isAVideoEncoder()/isAVideoMobileApp() checks match HTTP_USER_AGENT against a hardcoded literal ("AVideoEncoder"/"AVideoMobileApp") with no IP check or shared secret. An attacker who submits valid credentials and sets User-Agent: AVideoEncoder bypasses two-factor authentication, skips brute-force captcha escalation, and avoids being recorded in the login/device audit history. No patch is available at the time of publication.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.