SLFA A.I CyberSecurity Scoring
02/04/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for Scania Luleå | Ferruform AB | in 2026.
No incidents recorded for Scania Luleå | Ferruform AB | in 2026.
No incidents recorded for Scania Luleå | Ferruform AB | in 2026.
The Volkswagen Group with its headquarters in Wolfsburg is one of the world’s leading automobile manufacturers and the largest carmaker in Europe. The Group is made up of ten brands from seven European countries: Volkswagen, Volkswagen Nutzfahrzeuge, ŠKODA, SEAT, CUPRA, Audi, Lamborghini, Bentley, Porsche and Ducati. Our group sells vehicles in 153 countries and operates 114 production plants worldwide. Each working day, around 675,000 employees worldwide produce cars, are involved in vehicle-related services or work in the other fields of business. Our goal is to make mobility sustainable for us and for future generations. Our promise: With electric drive, digital networking and autonomous driving, we make the automobile clean, quiet, intelligent and safe. At the same time, our core product becomes even more emotional and offers a completely new driving experience. It is also becoming part of the solution when it comes to climate and environmental protection. In this way, the car can continue to be a cornerstone of contemporary, individual and affordable mobility in the future. #Shapingmobility Imprint & Legal: http://vw.de/legal-notice DAT: http://vw.de/dat
Volvo Trucks supplies complete transport solutions for discerning professional customers with its full range of medium- and heavy-duty trucks. Customer support is provided via a global network of dealers with 2,200 service points in about 130 countries. Volvo trucks are assembled in 12 countries across the globe. In 2024 approximately 134,000 Volvo trucks were delivered worldwide. Volvo Trucks is part of the Volvo Group, one of the world’s leading manufacturers of trucks, buses, construction equipment and marine and industrial engines. The group also provides complete solutions for financing and service. Volvo Trucks’ work is based on the core values of quality, safety and environmental care.
Mercedes-Benz Research and Development India (MBRDI) is the largest research and development centre for Mercedes-Benz Group AG outside of Germany. With over 27 years of innovation, MBRDI is contributing towards building the world’s most desirable cars, right here from India. Our mission - shape the future of sustainable mobility, one innovation at a time. MBRDI’s expertise includes developing new technologies like connected, autonomous and electric in the mobility world - driving digital acceleration, leading excellence in-car software and paving the way for sustainable mobility. MBRDI currently employs over 8500 professionals in the field of engineering, digitalisation, testing and simulation, and data science, with people at the heart of our culture. Our philosophy - When every individual shines in his or her own capabilities, we shine! We are committed to building an environment where everyone is enabled to bring their true self to work, each day. By fostering a diverse & inclusive work ecosystem, and enabling equal opportunities, we are building a culture that inspires innovation and sparks creativity and growth.
Freudenberg is a global technology group that strengthens its customers and society long-term through forward-looking innovations. Together with its partners, customers and research institutions, the Freudenberg Group develops leading-edge technologies and excellent products and services for about 40 markets and for thousands of applications: seals, vibration control components, technical textiles, filters, specialty chemicals, medical products and the most modern cleaning products. Strength of innovation, strong customer orientation, diversity, and team spirit are the cornerstones of the Group. The 175-year-old company holds strong to its core values: a commitment to excellence, reliability and pro-active, responsible action. In 2024, the Freudenberg Group employed more than 52,000 people in some 60 countries worldwide and generated sales of more than €11.95 billion. Learn more about us and visit our digital home at freudenberg.com and read the stories that make us Freudenberg. Visit and follow us at www.freudenberg.com https://www.instagram.com/freudenberg.group/ www.youtube.com/FreudenbergGroup *** Netiquette *** We look forward to receiving your comments and posts. On behalf of all users, we ask for constructive contributions, mutual respect, courtesy and tolerance. All contributions will be checked and we reserve the right to delete contributions. This applies in particular to unlawful content, incorrect statements, advertising for third parties, spam or slander. In addition, we reserve the right to remove comments that are otherwise inappropriate or incorrect. Contributions made by external users do not necessarily reflect Freudenberg’s opinion. Please find our data protect information here: https://www.freudenberg.com/fileadmin/downloads/english/Freudenberg_Social-Media-Data-Protection-Information.pdf Legal Notice: https://www.freudenberg.com/legal-notice
With its four brands BMW, MINI, Rolls-Royce and BMW Motorrad, the BMW Group is the world’s leading premium manufacturer of automobiles and motorcycles and also provides premium financial services. The BMW Group production network comprises over 30 production sites worldwide; the company has a global sales network in more than 140 countries. In 2024, the BMW Group sold over 2.45 million passenger vehicles and more than 210,000 motorcycles worldwide. The profit before tax in the financial year 2024 was € 11.0 billion on revenues amounting to € 142.4 billion. As of 31 December 2024, the BMW Group had a workforce of 159,104 employees. The economic success of the BMW Group has always been based on long-term thinking and responsible action. Sustainability is a key element of the BMW Group’s corporate strategy and covers all products from the supply chain and production to the end of their useful life.
Lear Corporation (NYSE: LEA) is a global automotive leader in Seating and E-Systems. The company designs, manufactures, and delivers advanced technologies to the world’s major automakers. Building on more than 100 years of heritage, Lear is the largest U.S.-based automotive supplier, headquartered in Southfield, Michigan. Driven by a commitment to innovation, operational excellence, and sustainability, Lear’s global team of talented employees is shaping the future of mobility by developing solutions that enhance comfort, safety, and efficiency. More information is available at Lear.com.
Joyson Group is a young, ambitious high-tech company, its headquarter is located in Ningbo, China. With more than 100 bases in 30 countries, over 40000 employees globally. Founded in 2004, Joyson 's main products used to be automotive functional components. Since 2011, the company has acquired several companies: automotive electronics company, PREH GmbH; robotic company IMA and QUIN GmbH in Germany, and a global automotive safety system from United States: KSS, and German smart car connect industry leader TS GmbH,and Takata, a Japanese automotive safety parts maker successively. Through enterprise innovation, product upgrade and multiple international mergers and acquisitions, the company has transformed into a global market leader. Through leading innovative design, stable manufacturing, quality management and excellent service, Joyson become a long-term partner of global automotive manufacturers as BMW, Mercedes Benz, Audi, Volkswagen, General Motors and Ford. Joyson is also awarded constantly by Porsche, BMW, Mercedes Benz, Volkswagen, General Motors as Quality Supplier Excellence Award. Joyson aims to be the most accountable partner for outstanding global automotive manufacturers, and the innovative market leader in car safety and intelligent driving industries.
Iveco Group N.V. (MI: IVG) is the home of unique people and brands that power your business and mission to advance a more sustainable society. The seven brands are each a major force in its specific business: IVECO, a pioneering commercial vehicles brand that designs, manufactures, and markets heavy, medium, and light-duty trucks; FPT Industrial, a global leader in a vast array of advanced powertrain technologies in the agriculture, construction, marine, power generation, and commercial vehicles sectors; IVECO BUS and HEULIEZ, mass-transit and premium bus and coach brands; IDV, for highly specialised defence and civil protection equipment; ASTRA, a leader in large-scale heavy-duty quarry and construction vehicles; and IVECO CAPITAL, the financing arm which supports them all. At 31st December 2023, Iveco Group employed more than 36,000 people around the world and had 20 industrial sites and 31 R&D centres.
Honda Cars India Ltd. (HCIL), a leading manufacturer of premium cars in India, was established in December 1995 with a commitment to provide Honda’s passenger car models and technologies, to the Indian customers. HCIL’s corporate office is based in Greater Noida, UP and its state-of-the-art manufacturing facility is located at Tapukara, District. Alwar, Rajasthan. Honda’s models are strongly associated with advanced design and technology, apart from their established qualities of durability, reliability, safety, and fuel-efficiency. The company has a strong sales and distribution network spread across the country. Besides the new car business, Honda offers one stop solution for buying and selling pre-owned cars through its business function Honda Auto Terrace. The Honda Certified Pre-owned cars come with an assurance of quality and peace of mind that caters to the diverse and burgeoning needs of pre-owned car buyers across the country.
Latest updates, reports, and threat intel affecting the global network.
H2 Green Steel (“H2GS”) will be a large-scale steel producer based on a fossil-free manufacturing process targeting large European OEMs.
Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-grpc grpc (GRPC.Compressor.Gzip, GRPC.Message modules) allows a denial of service via a gzip decompression bomb. This vulnerability is associated with program files lib/grpc/compressor/gzip.ex, lib/grpc/message.ex and program routines 'Elixir.GRPC.Compressor.Gzip':decompress/1, 'Elixir.GRPC.Message':from_data/2. 'Elixir.GRPC.Compressor.Gzip':decompress/1 calls :zlib.gunzip/1 directly on attacker-controlled bytes with no decompressed-size limit, ratio check, or incremental decoding. Because this module is the registered gzip GRPC.Compressor implementation, it is invoked automatically whenever an incoming gRPC frame carries the grpc-encoding: gzip header. :zlib.gunzip/1 allocates the entire decompressed result as a single binary, so a small highly compressible payload (for example a few kilobytes of zeros, which gzip compresses at roughly 1000:1) expands to multiple gigabytes inside a single call. The max_receive_message_length limit is enforced only against the already-decompressed message, so it provides no protection. An unauthenticated remote peer can send a single crafted frame to exhaust the BEAM node's heap and trigger an out-of-memory kill. This issue affects grpc: from 0.4.0 before 1.0.0.
Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc allows unauthenticated attackers to exhaust the BEAM's memory and crash the server by streaming a large or slow-trickle unary request body. 'Elixir.GRPC.Server.Adapters.Cowboy.Handler':read_full_body/3 (lib/grpc/server/adapters/cowboy/handler.ex) accumulates every received chunk into a single growing binary with no size cap. Additionally, when the client omits the grpc-timeout header, the per-chunk read timeout resolves to :infinity, allowing a slow-trickle client to keep the connection alive indefinitely while memory grows. A single connection is sufficient to exhaust server memory and crash the node. This issue affects grpc from 0.3.1 before 1.0.0.
Deserialization of Untrusted Data and Allocation of Resources Without Limits or Throttling vulnerabilities in elixir-grpc grpc allow unauthenticated attackers to crash the BEAM node via atom table exhaustion and, when a decoded term flows into a call site that invokes it, achieve remote code execution on the server. 'Elixir.GRPC.Codec.Erlpack':decode/2 (lib/grpc/codec/erlpack.ex) calls :erlang.binary_to_term/1 on the raw gRPC message body without the :safe option, no size bound, and no type guard. Any unauthenticated peer that sends a request with Content-Type: application/grpc+erlpack can send a crafted payload that mints arbitrary new atoms (which are never garbage-collected, exhausting the bounded atom table and crashing the VM) or that encodes a fun term which, if applied anywhere downstream, executes attacker-controlled code inside the server process. This issue affects grpc from 0.4.0 before 1.0.0.
The browserstack-cypress-cli is BrowserStack's CLI which allows users to run Cypress tests on BrowserStack. Versions prior to 1.36.4 are vulnerable to OS command injection via the cypress_config_file configuration parameter. In readCypressConfigUtil.js, the loadJsFile() function constructs a shell command by interpolating the user-controlled cypress_config_filepath value into a template literal, then executes it via child_process.execSync(). Shell metacharacters in the config path (specifically " and ;) allow breaking out of the quoted argument and injecting arbitrary commands. This issue has been fixed in version 1.36.6.
Authorization Bypass Through User-Controlled Key vulnerability in elixir-grpc grpc allows authenticated attackers to access or modify resources belonging to other users by smuggling a conflicting value for any path-bound field via the query string or request body. In 'Elixir.GRPC.Server.Transcode':map_request/5 (lib/grpc/server/transcode.ex), all three clauses use Map.merge/2 with path bindings as the first argument, giving them the lowest merge precedence. A request such as GET /users/me/profile?user_id=victim (or a POST with {"user_id": "victim"} when body: "*") yields a decoded protobuf struct where the path-bound field carries the attacker-supplied value rather than the router-extracted value. Any handler that uses the path-bound field for authorization, multi-tenancy scoping, or ownership checks is silently bypassed. This issue affects grpc from 0.8.0 before 1.0.0.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.