Firestone Airide A.I CyberSecurity Scoring
08/01/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for Firestone Airide in 2026.
No incidents recorded for Firestone Airide in 2026.
No incidents recorded for Firestone Airide in 2026.
Autoliv, Inc. is the worldwide leader in automotive safety systems. We develop, manufacture and market protective systems, such as airbags, seatbelts, steering wheels and pedestrian protection systems for all major automotive manufacturers in the world. Our products save 37,000 lives and prevent 450,000 injuries each year. Our ~65,000 employees in 25 countries are passionate about our vision of Saving More Lives and quality is at the heart of everything we do. We have 13 technical centers, with 20 test tracks. In the world of automotive occupant safety, we were the first to introduce the two- and three-point seat belt system and airbags for front and side impacts. We were also the first to launch pyrotechnic belt pretensioners and pedestrian protection systems. Autoliv, Inc. is a publicly traded Delaware U.S. corporation with its headquarters in Stockholm, Sweden. The shares are listed on the New York Stock Exchange (NYSE: ALV) and the Swedish Depository Receipts on Nasdaq Stockholm (ALIV sdb). For more information go to www.autoliv.com.
MRF Limited, is a stalwart in the global tyre industry. Established in 1946, MRF has grown into one of the largest and most respected tyre manufacturers, renowned for its commitment to quality, innovation, and customer satisfaction. The company boasts a diverse range of high-quality tyres catering to various vehicles, including passenger cars, two-wheelers, commercial, agricultural and defence vehicles. Known for its cutting-edge research and development, MRF has consistently introduced innovative tyre technologies that enhance performance, safety, and fuel efficiency. MRF is not only the number 1 tyre manufacturer in the Indian market, but has also earned a formidable reputation globally, with its products exported to over 90 countries.
Valeo is a technology company and partner to all automakers and new mobility players worldwide. Valeo innovates to make mobility safer, smarter and more sustainable. Valeo enjoys technological and industrial leadership in electrification, driving assistance systems, reinvention of the interior experience and lighting everywhere. These four areas, vital to the transformation of mobility, are the Group's growth drivers. Valeo in figures: 21.5 billion euros in sales in 2024 | 106,100 employees, 28 countries, 155 plants, 64 research and development centers and 19 distribution platforms at February 28, 2025. Valeo is listed on the Paris Stock Exchange -- Valeo, entreprise technologique, partenaire de tous les constructeurs automobiles et des nouveaux acteurs de la mobilité, œuvre pour une mobilité plus propre, plus sûre et plus intelligente, grâce à ses innovations. Valeo dispose d’un leadership technologique et industriel dans l’électrification, les aides à la conduite, la réinvention de la vie à bord et l'éclairage à l’intérieur et à l’extérieur du véhicule. Ces quatre domaines, essentiels à la transformation de la mobilité, sont les vecteurs de croissance du Groupe. Valeo en chiffres: 21.5 milliards d'euros de chiffre d'affaires en 2024 | 106 100 employés, 28 pays, 155 sites de production, 64 centres de recherche et développement et 19 plateformes de distribution au 28 février 2025. Valeo est cotée à la Bourse de Paris.
ZF is a global technology company supplying advanced mobility products and systems for passenger cars, commercial vehicles and industrial technology. Its comprehensive product range is primarily aimed at vehicle manufacturers, mobility providers and start-up companies in the fields of transportation and mobility. ZF electrifies a wide range of vehicle types. With its products, the company contributes to reducing emissions, protecting the climate as well as enhancing safe mobility. Alongside the automotive sector – passenger cars and commercial vehicles – ZF also serves market segments such as construction and agricultural machinery, wind power, marine propulsion, rail drives and test systems. With some 161,600 employees worldwide, ZF reported sales of €41.4 billion in fiscal year 2024. The company operates 161 production locations in 30 countries. For further press information and photos please visit: www.zf.com Imprint: https://www.zf.com/site/meta/en/imprint.html Data Protection: https://www.zf.com/master/media/en/corporate/m_zf_com/meta/data_protection_social_media/Data_Protection_Notice_Social_Media_EN.pdf
Latest updates, reports, and threat intel affecting the global network.
A supplier of air springs for the EV industry, Firestone has opened distribution centers at its manufacturing sites in Williamsburg,...
The new Airide Integrative Air-Damping System offers a lighter-weight alternative to cab mount suspension applications, providing the...
Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.22 and 4.0.0-RC1 through 4.17.15, an attacker with only a GitHub account can plant a JavaScript payload in a craftcms/cms issue title. When a Craft admin uses the CraftSupport widget’s "Give feedback" screen and types a search term that returns the poisoned issue, the payload executes in the admin’s control panel session. No control panel account or elevated privileges are required on the attacker’s side. This issue has been fixed in versions 4.17.16 and 5.9.23.
Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.21 and 4.0.0-RC1 through 4.17.14, theAssetsController::actionDeleteFolder() only requires the deleteAssets:<volume-uid> permission for the target folder. It never enforces deletePeerAssets:<volume-uid>, even though Assets::deleteFoldersByIds() cascades deletion to every descendant folder and every asset inside, regardless of the uploader's assigned privileges. A low-privilege user who has been granted folder-management rights on a shared volume can therefore destroy assets uploaded by other users (peer assets), bypassing the per-asset peer-permission check that the sibling actionDeleteAsset endpoint correctly applies. This issue has been fixed in versions 4.17.15 and 5.9.22.
Craft CMS is a content management system (CMS). Versions 5.0.0-RC1 through 5.9.20, and 4.0.0-RC1 through 4.17.13 contain an authorization issue in the AssetsController::actionReplaceFile that can delete a source asset without source delete permission by supplying both assetId and sourceAssetId. AssetsController::actionReplaceFile() supports replacing a target asset file using another existing asset as the source. The action loads: assetId -> $assetToReplace and sourceAssetId -> $sourceAsset, then enforces replace permissions using ($assetToReplace ?: $sourceAsset). When both IDs are provided, this expression resolves to the target asset so no permission check is performed against the source asset volume. When both assets are present, Craft copies the source file into the target and then deletes the source asset. There is no deletion check for for the source asset. An authenticated user who can replace files in one volume can delete assets in another volume where they do not have delete permission, as long as they can obtain a sourceAssetId, leading to broken content references and data loss. This issue has been fixed in versions 4.17.14 and 5.9.21.
Description: To issue and renew TLS certificates on behalf of customers, Cloudflare's Universal SSL feature automatically manages the CAA RRset for the customer's zone. This auto-managed RRset is permissive by design (e.g. 'issue "letsencrypt.org"' without parameters). On Universal SSL zones, Cloudflare's authoritative DNS serves this auto-managed RRset at query time, superseding any customer-configured CAA records on the zone. When a customer publishes a stricter CAA record using the RFC 8657 accounturi or validationmethods parameters, the Certificate Authority does not observe those parameters when evaluating the served RRset under RFC 8659. As a result, the RFC 8657 account-binding and validation-method-binding protections are not enforced end-to-end on Universal SSL zones. Successful exploitation could result in issuance of a browser-trusted TLS certificate to an attacker, enabling MITM against the affected domain. Exploitation is non-trivial in practice: an attacker would need to hold an ACME account at one of the Certificate Authorities in the served CAA RRset and to simultaneously satisfy domain control validation across the multiple geographically distinct Network Perspectives the CA relies on for Multi-Perspective Issuance Corroboration. Cloudflare prefixes are anycast-announced from hundreds of locations globally, raising the bar against single-vantage-point BGP hijacks. Any resulting misissuance of a browser-trusted certificate is subject to Certificate Transparency logging required by major browsers, and would be visible to CT monitoring. Mitigation: Customers requiring strict RFC 8657 enforcement need to disable Universal SSL on the affected zone. Universal SSL's automatic CAA management and customer-set RFC 8657 accounturi and validationmethods enforcement are mutually exclusive by the nature of the issue, so there is no in-product workaround that preserves both. Certificate Transparency monitoring is recommended for all customers as a general detection control. Credits: David Osipov (ORCID: https://orcid.org/0009-0005-2713-9242), independent researcher
Out of bounds read and write in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.