Archer is designing and developing electric vertical takeoff and landing aircraft for use in urban air mobility networks. Archer’s mission is to unlock the skies, freeing everyone to reimagine how they move and spend time. Archer's team is based in Santa Clara, CA. To learn more, visit www.archer.com.
People. Passion. Pride. These have driven our team since 1833. Since that time, we have developed to become a critical partner in the global aviation industry, delivering time-critical logistics services at over 300 locations in 65 countries, across six continents. But at the heart of our business is our people. Whether serving our clients landside or airside, above or below the wing, our teams are agile, dedicated, and eager to help. Safety and security are at the heart of everything we do. We have a duty of care to look after each other, our customers and their customers. And we care about the communities in which we operate. We understand that what we do makes a difference at many levels. Our services help keep people moving with everyone playing their part, delivering with precision, round the clock, every minute of every day. In this we take immense pride, and it strengthens our determination to deliver. Our core services include ground, air cargo and fuel services.
Security & Compliance Standards Overview
No incidents recorded for Archer in 2025.
No incidents recorded for Menzies Aviation in 2025.
Archer cyber incidents detection timeline including parent company and subsidiaries
Menzies Aviation cyber incidents detection timeline including parent company and subsidiaries
NXLog Agent before 6.11 can load a file specified by the OPENSSL_CONF environment variable.
uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas.
A vulnerability was detected in Mayan EDMS up to 4.10.1. The affected element is an unknown function of the file /authentication/. The manipulation results in cross site scripting. The attack may be performed from remote. The exploit is now public and may be used. Upgrading to version 4.10.2 is sufficient to fix this issue. You should upgrade the affected component. The vendor confirms that this is "[f]ixed in version 4.10.2". Furthermore, that "[b]ackports for older versions in process and will be out as soon as their respective CI pipelines complete."
MJML through 4.18.0 allows mj-include directory traversal to test file existence and (in the type="css" case) read files. NOTE: this issue exists because of an incomplete fix for CVE-2020-12827.
A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network (including link-local or loopback services).
