DES A.I CyberSecurity Scoring
19/04/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for DHL Express Switzerland in 2026.
No incidents recorded for DHL Express Switzerland in 2026.
No incidents recorded for DHL Express Switzerland in 2026.
A.P. Moller - Maersk is an integrated transport and logistics company; going all the way, together, for our customers and society. ALL THE WAY is our commitment to connect the world so that everyone has both the possibility and the ability to trade, grow and thrive. The company employs roughly 110.000 employees across operations in 130 countries.
The Rhenus Group is one of the leading logistics specialists with global business operations and annual turnover amounting to EUR 8.2 billion. 41,000 employees work at 1,330 business sites in more than 70+ countries and develop innovative solutions along the complete supply chain. Whether providing transport, warehousing, customs clearance or value-added services, the family-owned business pools its operations in various business units where the needs of customers are the major focus at all times. For further Information visit www.rhenus.group Imprint: https://www.rhenus.group/imprint/ Data Protection Policy: https://www.rhenus.group/data-protection-policy/
CEVA provides world-class supply chain solutions for large and medium-size national and multinational companies across the globe. As an industry leader, CEVA offers customers complete supply chain design and implementation in contract logistics and freight management, alone or in combination. Together with CMA CGM, a leading worldwide shipping group and CEVA’s strategic partner, we are able to offer our customers end-to-end logistics solutions. CEVA’s integrated global network has over 1,000 facilities in more than 170 countries and 110,000 employees; all dedicated to delivering consistently excellent operations and supply chain solutions.
GEODIS is a leading global logistics provider acknowledged for its expertise across all aspects of the supply chain. As a growth partner to its clients, GEODIS specializes in four lines of business: Global Freight Forwarding, Global Contract Logistics, Distribution & Express Transport, and European Road Network. With a global network spanning nearly 170 countries and more than 49,400 employees, GEODIS is ranked no. 5 in its sector across the world. In 2022, GEODIS generated €13.7 billion in revenue. GEODIS is a company owned by SNCF group.
Deutsche Post delivers mail and parcels in Germany. It is an expert provider of dialogue marketing and press distribution services as well as corporate communications solutions. We operate a nationwide transport and delivery network in Germany. We also deliver mail across borders, serve the domestic markets of countries outside of Germany and also provide special services beyond mail transport. We serve business customers in key domestic mail markets, including the USA, the Netherlands, the UK, Spain.
ID Logistics, headed by Eric Hémar, is an international contract logistics group with revenues of €3.3 billion in 2024. ID Logistics manages nearly 450 sites in 19 countries, representing more than 9 million m² operated in Europe, America, Asia and Africa, with 42,000 employees. With a customer portfolio balanced between distribution, e-commerce and consumer goods, ID Logistics is characterized by offers involving a high level of technology. Since its creation in 2001, the Group has developed a social and environmental approach through a number of original projects and is now firmly committed to an ambitious CSR policy. ID Logistics shares are listed on the Euronext regulated market in Paris and are included in the SBF 120 index (ISIN code: FR0010929125, Mnemo: IDL).
UPS Supply Chain Solutions offers a comprehensive portfolio of services to enhance customers' business performance, including logistics and distribution, transportation and freight, consulting, customs brokerage, and international trade services. UPS provides the expertise and the scale to meet the total supply chain needs of customers worldwide, whether it requires the movement of goods, information or funds.
Blue Dart Express Ltd., South Asia's premier express air, integrated transportation & distribution company, offers secure and reliable delivery of consignments to over 56,000+ locations in India. Blue Dart is a provider of choice for its stakeholders due to its customer centric approach and aims to further strengthen this partnership. As part of DHL Group’s DHL eCommerce division, Blue Dart accesses the largest and most comprehensive express and logistics network worldwide, covering over 220 countries and territories, and offers an entire spectrum of distribution services including air express, freight forwarding, supply chain solutions, customs clearance etc. The Blue Dart team drives market leadership through its motivated people, dedicated air and ground capacity, cutting-edge technology, wide range of innovative, vertical specific products and value-added services to deliver unmatched standards of service quality to its customers. Blue Dart's market leadership is further validated by its position as the nation’s most innovative and awarded express logistics company for exhibiting reliability, superior brand experience and sustainability which include recognition as one of ‘India's Best Companies to Work For’ by The Great Place to Work® Institute, India, ranked amongst ‘Best Multinational Workplaces in Asia’ by The Great Place to Work® Institute, Asia, voted a ‘Superbrand’ and ‘Reader’s Digest Most Trusted Brand’, listed as one of Fortune 500’s ‘India's Largest Corporations’ and Forbes ‘India's Super 50 Companies’ to name a few. Blue Dart’s Diversity and Inclusion initiatives have also led to it being recognized as one of India’s ‘Best Workplaces for Women’ in 2021 and ‘Best Organizations for Women’ in 2022 by the Economic Times. Blue Dart fulfils its social responsibility of climate protection (GoGreen), disaster management (GoHelp) and education (GoTeach) through its GoPrograms.
Welcome! We are PostNL. Your favorite delivery service is what we want to be. Every day, over 35,000 colleagues work hard to achieve this goal, on your streets and in your neighborhood, in our sorting centers and depots, and at the office. On an average day, we deliver about 1.1 million packages and 7.4 million letters, so chances are we will meet. In addition to delivering, we're always innovating. For example, we're developing more sustainable ways of delivering and clever products and services like delivery preferences. Making your life easier, that is why we continuously work on new and improved products and services. Such as the parcel locker and convenient online services for webshops and other business customers. Will you help us be your favorite delivery service? Come join us and become a colleague! Check out our job opportunities at www.postnl.nl/werkenbij (work with us). See you soon or as we say in Dutch: tot snel!
Latest updates, reports, and threat intel affecting the global network.
Horilla is an HR and CRM software. Prior to 2.0.0, HorillaListView.export_data in horilla_views/generic/cbv/views.py accepts an authenticated user's columns POST parameter, takes field_tuple[1], interpolates it into dynamic_fn_str as Python source, and passes the generated function definition to exec(). A crafted string that remains valid under ast.literal_eval can inject Python syntax into a default argument evaluated during function definition, allowing arbitrary operating-system commands to execute with the application process privileges, including root privileges in the shipped Docker image. This issue is fixed in version 2.0.0.
Horilla is an HR and CRM software. Prior to 2.0.0, approve_validate_attendance_request at /attendance/approve-validate-attendance-request/ changes attendance_validated, is_validate_request_approved, approved_by, and related pending-request state through an HTTP GET before calling attendance.save(), so Django does not require CSRF validation for the action. An unauthenticated attacker can cause a logged-in manager with attendance.change_attendance to make a top-level request that carries the manager's SameSite=Lax session cookie, silently approving attendance with the victim's privileges and attributing the approval to the victim in the audit trail. This issue is fixed in version 2.0.0.
Actual is a local-first personal finance tool. Prior to 26.7.0, Actual Sync Server's CORS proxy is intended to let authenticated users fetch resources only from repositories listed in the official plugin allowlist. When `ACTUAL_GITHUB_TOKEN` is configured, the proxy automatically attaches the server's GitHub token to GitHub requests. The GitHub API allowlist check uses a raw `startsWith()` prefix test for `/repos/{owner}/{repo}` without requiring a path boundary after the repository name. If an allowlisted public plugin repository is `https://github.com/acme/plugin`, the proxy also accepts GitHub API URLs. Those URLs are outside the allowlisted repository but still pass because their API path starts with `/repos/acme/plugin`. The proxy then forwards the request with the server's `ACTUAL_GITHUB_TOKEN`, allowing any authenticated Actual user to read private GitHub resources reachable by that token. Version 26.7.0 fixes the issue.
The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is tracked separately from the string itself. The filter constructors duplicate the value with pestrdup(), which stops at the first NUL byte, while keeping the original length. When the filter later emits a line break it copies the recorded length out of the truncated allocation, reading past its end and placing adjacent heap bytes into the filter output.
The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen.allowed_clients matches on a /96 prefix instead of the exact address. An attacker who can source an address sharing the first 96 bits with an allowed one passes the check and reaches the FastCGI endpoint.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.