EIA A.I CyberSecurity Scoring
01/02/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for Evonik Interface Additives in 2026.
No incidents recorded for Evonik Interface Additives in 2026.
No incidents recorded for Evonik Interface Additives in 2026.
Sasol is a global chemicals and energy company. We harness our knowledge and expertise to integrate sophisticated technologies and processes into world-scale operating facilities. We safely and sustainably source, produce and market a range of high-quality products in 22 countries, creating value for stakeholders. Our revised strategy aims to have a greater focus on value realisation for our stakeholders, sustainable growth and improved business sustainability as well as enhanced cash generation. The Chemicals Business will grow by meeting evolving consumer needs, including the demands of a growing and urbanising middle class. It will focus its activities on specialty chemicals where it has differentiated capabilities and strong market positions that can be expanded over time. The Energy Business will position to be responsive to global trends by providing new energy and mobility solutions over time, pursuing greenhouse gas emission reductions through growth in gas and renewables, and higher cash generation. Terms of use: While we encourage a multitude of views and opinions on this forum, any comments that contain spam (irrelevant links/self-promotion), hate speech, undue negativity or foul language will be removed. Fraud Alert! Sasol's recruitment process does not include unsolicited offers of employment and also does not require advance payments from candidates. Sasol will only contact you if you have applied for a vacancy through the career website, the official Sasol LinkedIn page or if you were contacted by one of our authorised recruitment personnel or local recruiting office. Sasol will not ask you to send personal banking information via email. If you suspect fraud, you are encouraged to alert Sasol by sending an e-mail to [email protected]. Alternatively please report such activity to your local law enforcement authorities.
Airgas, an Air Liquide company, is a leading U.S. supplier of industrial, medical and specialty gases, as well as hardgoods and related products; one of the largest U.S. suppliers of safety products; and a leading U.S. supplier of ammonia products and process chemicals. Dedicated to improving the performance of its more than 1 million customers, Airgas safely and reliably provides products, services and expertise through its more than 18,500 associates, over 1,100 locations (including branches, fill plants, and production sites), robust e-Business platform, and Airgas Total Access® telesales channel. Airgas is committed to providing equal employment opportunities for all qualified applicants and associates without regard to the following legally protected characteristics: race, color, religion, national origin, sex, sexual orientation, gender identity, protected veteran status, uniformed service member status, pregnancy (including childbirth, lactation and related medical conditions), physical or mental disability, age, ancestry, genetic information (including characteristics and testing) or any other characteristic protected under federal, state or local law. EEO AA M/F/Disability/Veteran
For over 160 years, Solvay has been a pioneer in science and innovation, mastering the essential chemistry that powers progress across generations. We are more than a chemical company — we are a catalyst for sustainable transformation, delivering vital solutions that shape a better world. Our purpose is clear: we are essential chemistry, making progress possible for generations. From soda ash to advanced peroxides, our innovations are often unseen but always essential — enabling cleaner mobility, healthier living, and smarter infrastructure. We lead with purpose in key sectors such as construction, healthcare, consumer goods, and automotive. Our products are embedded in everyday life, driving performance and sustainability where it matters most. Our legacy is built on scientific expertise, but our future is shaped by people — by you. Join us in our relentless pursuit of excellence and be part of a global movement to make progress possible for generations to come.
At BASF, we create chemistry for a sustainable future. Our ambition: We want to be the preferred chemical company to enable our customers’ green transformation. We combine economic success with environmental protection and social responsibility. Around 112,000 employees in the BASF Group contribute to the success of our customers in nearly all sectors and almost every country in the world. Our portfolio comprises, as core businesses, the segments Chemicals, Materials, Industrial Solutions, and Nutrition & Care; our standalone businesses are bundled in the segments Surface Technologies and Agricultural Solutions. BASF generated sales of €65.3 billion in 2024. BASF shares are traded on the stock exchange in Frankfurt (BAS) and as American Depositary Receipts (BASFY) in the United States. Credits: https://www.basf.com/global/en/legal/credits Data protection information: https://www.basf.com/global/en/legal/data-protection-at-basf.html
We are LyondellBasell (NYSE: LYB) – a leader in the global chemical industry creating solutions for everyday sustainable living. Through advanced technology and focused investments, we are enabling a circular and low carbon economy. Across all we do, we aim to unlock value for our customers, investors and society. As one of the world's largest producers of polymers and a leader in polyolefin technologies, we develop, manufacture and market high-quality and innovative products for applications ranging from sustainable transportation and food safety to clean water and quality healthcare. For more information, please visit www.lyondellbasell.com.
Air Liquide is a world leader in gases, technologies and services for industry and healthcare. Present in 72 countries with 67,800 employees, the Group serves more than 4 million customers and patients. Oxygen, nitrogen and hydrogen are essential small molecules for life, matter and energy. They embody Air Liquide’s scientific territory and have been at the core of the Group’s activities since its creation in 1902. Taking action today while preparing the future is at the heart of Air Liquide’s strategy. With ADVANCE, its strategic plan for 2025, Air Liquide is targeting a global performance, combining financial and extra-financial dimensions. Positioned on new markets, the Group benefits from major assets such as its business model combining resilience and strength, its ability to innovate and its technological expertise. The Group develops solutions contributing to climate and the energy transition—particularly with hydrogen—and takes action to progress in areas of healthcare, digital and high technologies. Air Liquide’s revenue amounted to more than 27.5 billion euros in 2023. Air Liquide is listed on the Euronext Paris stock exchange (compartment A) and belongs to the CAC 40, CAC 40 ESG, EURO STOXX 50, FTSE4Good and DJSI Europe indexes.
Evonik goes beyond the boundaries of chemistry with its combination of innovative strength and leading technological expertise. The global chemical company, headquartered in Essen, Germany, is active in more than 100 countries. The common motivation of the approximately 32,000 employees: to provide customers with a decisive competitive advantage with tailor-made products and solutions as a superforce for industry, thereby improving people's lives. In all markets. Every day. Interested in joining our global team? Our wide range of opportunities extends from creative and innovative research through international management all the way to production. Whether you’re studying, starting out in your career or a seasoned professional, come help us make the world a better place. For more information about careers at Evonik, go to: www.careers.evonik.com. #PartOfSomethingSpecial Find our netiquette on: www.evonik.com/netiquette Company Information: https://www.evonik.com/en/meta/company-information.html Privacy Policy: https://www.evonik.com/en/meta/privacy-policy.html
At IFF, we make joy through science, creativity and heart. As the global leader in flavors, fragrances, food ingredients, health and biosciences, we deliver groundbreaking, sustainable innovations that elevate everyday products—advancing wellness, delighting the senses and enhancing the human experience. With ~22,000 employees across 65 countries, more than 110 manufacturing facilities, 100 R&D centers and 33,000 customers worldwide, we turn possibilities into reality by redefining the limits of science and nature to create a more positive, sustainable future for all. Visit us at www.iff.com to learn how our real-deal experts approach work with an entrepreneurial mindset, working lockstep to defy expectations and create industry-defining solutions that do more good for people and planet
A trusted partner for millions of customers, Ecolab (NYSE:ECL) is a global sustainability leader offering water, hygiene and infection prevention solutions and services that protect people and the resources vital to life. Building on more than a century of innovation, Ecolab has annual sales of $16 billion, employs approximately 48,000 associates and operates in more than 170 countries around the world. The company delivers comprehensive science-based solutions, data-driven insights and world-class service to advance food safety, maintain clean and safe environments, and optimize water and energy use. Ecolab’s innovative solutions improve operational efficiencies and sustainability for customers in the food, healthcare, high tech, life sciences, hospitality and industrial markets. For more Ecolab news and information, visit www.ecolab.com.
Latest updates, reports, and threat intel affecting the global network.
tls_opt_dtls_peer_connection_id_value_get() in subsys/net/lib/sockets/sockets_tls.c, which handles getsockopt(SOL_TLS, TLS_DTLS_PEER_CID_VALUE), passed the caller-supplied optval directly to mbedtls_ssl_get_peer_cid() without verifying the buffer was at least MBEDTLS_SSL_CID_OUT_LEN_MAX (default 32) bytes. mbedtls_ssl_get_peer_cid() copies the peer-negotiated DTLS Connection ID (length 1..MBEDTLS_SSL_CID_OUT_LEN_MAX) into that buffer without a destination-size parameter, so a caller-supplied optlen smaller than the CID causes a write of up to 31 bytes past the buffer end. In CONFIG_USERSPACE builds the getsockopt syscall verifier (z_vrfy_zsock_getsockopt) bounce-buffers the user's optval into a kernel allocation of exactly optlen bytes (k_usermode_alloc_from_copy -> z_thread_malloc), so an unprivileged user thread that passes a small optlen on a connected DTLS socket with Connection ID enabled induces a kernel-heap buffer overflow, with the overflowing content being the remote peer's CID. The defect requires CONFIG_MBEDTLS_SSL_DTLS_CONNECTION_ID, an established DTLS session with a negotiated peer CID, and (for the kernel-crossing case) CONFIG_USERSPACE. Introduced when the TLS_DTLS_CID option was added (v3.5.0). The fix rejects callers whose optlen is below MBEDTLS_SSL_CID_OUT_LEN_MAX with -EINVAL.
react18-use is a React 19 use hook shim. Between 2026-05-19 01:07:01 and 2026-05-19 15:20:43, the default branch contained malicious commits 7b79148d1495a2505f9277da295a98cf176f4496 through 7b79148d1495a2505f9277da295a98cf176f4496 that executed remote attacker-controlled code on developer machines during `npm install`. The commits were removed by force-push, but local clones, forks, and direct-SHA URLs may still contain them, and `npm install` against an affected checkout will still execute the code today. The package was not published to npm. `src/install.js` was added and wired into the `postinstall` script. It fetched a JavaScript payload from an attacker-controlled HTTPS endpoint (configurable via an environment variable), disabled TLS verification, and evaluated the response as code with `require` available. Execution was deliberately skipped on CI and cloud/serverless environments, targeting developer workstations. The second-stage payload was attacker-hosted and cannot be reconstructed. Assume full compromise of anything reachable from a Node process with the user's permissions. Those who ran `npm install` against an affected checkout on a developer machine on or after 2026-05-19 01:07:01 should treat the machine as compromised, rotate every credential the machine could reach, audit account activity since 2026-05-19 01:07:01, and clean local clones.
The UpdateHub management subsystem (subsys/mgmt/updatehub/updatehub.c) drives every update operation through a single file-scope ctx structure that holds the CoAP block context, payload buffer, status code, socket, and a one-element poll-fd array fds[1]. Access to ctx was not serialized, and prepare_fds() wrote ctx.fds[ctx.nfds] and incremented ctx.nfds with no bounds check. Two independent paths mutate ctx concurrently: the background autohandler running on the system workqueue, and user-triggered operations reached through the updatehub run shell command, direct API calls, or — since the operations are exposed as syscalls — userspace threads. When a second flow enters prepare_fds() while ctx.nfds is already 1, the write lands one element past the array; by struct layout it overlaps the adjacent ctx.sock/ctx.nfds members. More broadly, the unsynchronized sharing lets two flows interleave connection setup and teardown, double-closing a socket descriptor or scribbling the shared buffers. The result is corruption of the update subsystem's internal state and denial of service of the firmware-update path; the out-of-bounds write is contained within the ctx structure and there is no demonstrated path to memory outside it or to code execution. Triggering requires a local actor able to invoke update operations (or, with CONFIG_USERSPACE, an unprivileged userspace thread) and to win a timing race against the background handler; remote peers cannot control the race timing. The fix serializes the entry points with a mutex and adds a bounds check to prepare_fds().
The UpdateHub over-the-air update client's start_coap_client() in subsys/mgmt/updatehub/updatehub.c leaks the CoAP/DTLS socket descriptor on its connection-setup failure paths. The shared error: cleanup gated socket closing on a ret > 0 flag, but ret was set to -1 immediately after the socket was created, so when zsock_setsockopt() (DTLS) or zsock_connect() subsequently failed the gate was false and cleanup_connection() was never called. The open descriptor in the global ctx.sock was then overwritten by the next attempt, permanently leaking it from the socket / net_context pool until reboot. The failing setup path is reached every time the OTA client tries to contact the UpdateHub server and the connection cannot be established — driven automatically by the periodic autohandler() poll (and on demand via the updatehub_probe()/updatehub_update() API or the updatehub run shell command). The DTLS handshake/connect outcome is influenceable by a network or on-path attacker who drops, resets, or otherwise disrupts traffic to the server, and also fails naturally whenever the server is unreachable. Each failed attempt permanently leaks one descriptor; once the shared socket pool is exhausted, networking degrades device-wide until the device is rebooted, a denial-of-service condition. Severity is low because the leak rate is bounded by the configured OTA poll interval (default once per 24 hours), the effect is gradual and recovered by reboot, and only builds with the UpdateHub client enabled are affected. There is no memory-corruption, information-disclosure, or authentication impact.
Certain web interface components in affected TP-Link Aginet devices do not validate and sanitize user-supplied input properly before passing it to system-level command execution functions. An authenticated adjacent attacker may inject specially crafted input to execute arbitrary operation system commands with elevated privileges. Successful exploitation may allow execution of arbitrary system commands, potentially leading to full device compromise.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.