CAA A.I CyberSecurity Scoring
27/01/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for Color Atlas by Archroma in 2026.
No incidents recorded for Color Atlas by Archroma in 2026.
No incidents recorded for Color Atlas by Archroma in 2026.
Shaw Industries Group, Inc. is a leader in flooring and other surface solutions designed for residential housing, commercial spaces and outdoor environments. Leveraging strengths in design, innovation and operational excellence, the company takes a people-centered, customer-focused, and growth-minded approach to meet diverse market needs. It creates differentiated customer experiences through its expansive portfolio of brands: Anderson Tuftex, COREtec, Shaw Floors, Patcraft, Philadelphia Commercial, Shaw Contract, Shaw Sports Turf, Shawgrass, Southwest Greens, Watershed Geo and more. Headquartered in Dalton, Georgia, Shaw is a wholly owned subsidiary of Berkshire Hathaway, Inc. with approximately $6 billion in annual sales and 18,000 associates worldwide. Interested in a career with Shaw? Browse open positions at https://careers.shawinc.com/.
Are you looking for more? At Mohawk Industries, we’re committed to more – more customer solutions, more process improvements, more sustainable manufacturing and more opportunities for our team. As a Fortune 500 global flooring leader with some of the best-known brands in the industry, Mohawk is a great place to start or develop your career with an emphasis on more of what’s important to you. Whether you want to lead more, innovate more, learn more or create more, you can find your more with Mohawk.
Latest updates, reports, and threat intel affecting the global network.
Archroma has launched a cotton poplin colour library with over 4300 readily available new shades to help the fashion industry select, develop and communicate...
ClipBucket V5's web installer fails to properly validate or escape the php_cli_filepath parameter before passing it to shell execution. Unauthenticated attackers can submit a crafted POST request to the installer with a malicious php_cli_filepath value to execute arbitrary commands as the web server user.
A vulnerability was detected in TOTOLINK N600R 4.3.0cu.7647_B20210106. The impacted element is the function getCurrentTime of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument ntp_server results in command injection. The attack can be initiated remotely. The exploit is now public and may be used.
A security vulnerability has been detected in TOTOLINK N600R 4.3.0cu.7647_B20210106. The affected element is the function setSystemConfig of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument Hostname leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.
Doorkeeper OpenID Connect implements an OpenID Connect authentication provider for Rails applications on top of Doorkeeper. Prior to 1.10.4, the Dynamic Client Registration (DCR) endpoint persists client-supplied scopes without validating them against the server's configured scope set. Under certain conditions, this allows a self-registered client to obtain scopes beyond what the server intended to grant. In DynamicClientRegistrationController#application_params, the scopes attribute is assigned directly from params[:scope] with no validation against Doorkeeper.configuration.scopes or optional_scopes. Combined with enforce_configured_scopes being off by default and Doorkeeper's ScopeChecker prioritizing application-level scopes over server-level scopes, this creates a privilege escalation path. This issue is fixed in version 1.10.4.
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Stored XSS. This issue affects Drupal core versions: from 0.0.0 to 10.6.13, from 11.3.0 to 11.3.14, from 11.4.0 to 11.4.4, from 0.0.0 to 11.0.*, from 0.0.0 to 11.1.*, from 0.0.0 to 11.2.*.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.