FFNDC A.I CyberSecurity Scoring
09/04/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for FNC - Fabricas Nacionales de Cerveza in 2026.
No incidents recorded for FNC - Fabricas Nacionales de Cerveza in 2026.
No incidents recorded for FNC - Fabricas Nacionales de Cerveza in 2026.
PRAN RFL Group, one of the most reputed conglomerates in Bangladesh, is in market since 1981. It started mainly with Foundry business and gradually diversified to Light Engineering, PVC Fittings, Plastics, Food and Beverage and Agro-Processing. It has it's marketing and selling network in 145 countries as of date.Group directly employs over 1,25,000 people and another 15,00,000 over people subsists on PRAN-RFL Group.
We believe every consumer should have access to their favorite snack, everywhere. We own the manufacturing process from seed to shelf and actively invest in technology to automate key steps of the process. This helps us be more agile in what we need to make, who we need to make it for, and how we can best deliver it to snack lovers from coast to coast.
Headquartered in Charlotte, N.C., Krispy Kreme is one of the most beloved and well-known sweet treat brands in the world. Our iconic Original Glazed® doughnut is universally recognized for its hot-off-the-line, melt-in-your-mouth experience. Krispy Kreme operates in more than 40 countries through its unique network of fresh doughnut shops, partnerships with leading retailers, and a rapidly growing digital business. Our purpose of touching and enhancing lives through the joy that is Krispy Kreme guides how we operate every day and is reflected in the love we have for our people, our communities, and the planet.
JDE Peet’s is the world’s leading pure-play coffee company, serving approximately 4,400 cups of coffee per second in more than 100 markets. Guided by our ‘Reignite the Amazing’ strategy, we are focusing on brand-led growth across three big bets: Peet’s, L’OR, and Jacobs, alongside a collection of 9 local icons. In 2024, JDE Peet’s generated total sales of EUR 8.8 billion and employed a global workforce of more than 21,000 employees. Discover more about our journey to deliver a coffee for every cup and a brand for every heart at www.jdepeets.com.
The Kraft Heinz Company is one of the largest food and beverage companies in the world, with eight $1 billion+ brands and global sales of approximately $25 billion. We’re a globally trusted producer of high-quality, great-tasting, and nutritious foods for over 150 years. While Kraft Heinz is co-headquartered in Chicago and Pittsburgh, our brands are truly global, with products produced and marketed in over 40 countries. These beloved products include condiments and sauces, cheese and dairy, meals, meats, refreshment beverages, coffee, infant and nutrition products, and numerous other grocery products in a portfolio of more than 200 legacy and emerging brands. We spark joy around mealtime with our iconic brands, including Kraft, Oscar Mayer, Heinz, Philadelphia, Lunchables, Velveeta, Maxwell House, Capri Sun, Ore-Ida, Kool-Aid, Jell-O, Primal Kitchen, and Classico, among others. No matter the brand, we’re united under one vision: To sustainably grow by delighting more consumers globally. Bringing this vision to life is our team of 37,000+ food lovers, creative thinkers, and high performers worldwide. Together, we help provide meals to those in need through our global partnership with Rise Against Hunger. We also stand committed to responsible, sustainable practices that extend to every facet of our business, our consumers, and our communities. Every day, we’re transforming the food industry with bold thinking and unprecedented results. If you share our passion – and are ready to create the future, build a legacy, and lead as a global citizen – there’s only one thing to do: join our table and let’s make life delicious!
ABOUT LITTLE CAESARS® Little Caesars, the Best Value in Pizza*, was founded by Mike and Marian Ilitch as a single, family-owned restaurant in 1959 and is headquartered in downtown Detroit, Michigan. It is the third-largest pizza chain in the world, with restaurants in each of the 50 U.S. states and 29 countries and territories. Known for its HOT-N-READY® pizza, Crazy Puffs®, and famed Crazy Bread®, Little Caesars uses quality ingredients, like fresh, never-frozen mozzarella and Muenster cheese and sauce made from fresh-packed, vine-ripened California crushed tomatoes. The brand is known for innovation and is home to the exclusive Pizza Portal® pickup, a heated, self-service mobile order pickup station. Little Caesars is also the Official Pizza Sponsor of the NFL. A high-growth company with over 65 years in the $150 billion worldwide pizza industry, Little Caesars continually looks for franchisee candidates to join the team in markets worldwide. In addition to providing the opportunity for entrepreneurial independence in a franchise system, Little Caesars offers a simple operating system, a reputation for taste and value, and strong brand awareness with one of the most recognized characters in the country, Little Caesar. Little Caesars is proud to be part of the Ilitch Companies family of businesses. For more, visit LittleCaesars.com and follow Little Caesars on TikTok, Instagram, and X. *Limited to top 4 national pizza chains
Founded in 1977, Almarai Company is the world’s largest vertically integrated dairy company and the largest food and beverage manufacturing and distribution company in MENA. Headquartered in Riyadh, Almarai Company is ranked as the number one FMCG Brand in the MENA region and the market leader in all its categories across GCC, Egypt, and Jordan. Over five decades of sustainable growth, Almarai has consistently provided nutritious and healthy products to consumers of all ages, driven by its core principle: “Quality you can trust.” Almarai has expanded its product range to include, in addition to dairy products, juices and beverages, baked goods, poultry, infant formula, dates, fish and seafood, and bottled water, under more than 20 brands such as Almarai, L’usine, 7DAYS, ALYOUM, Nuralac, Farm’s Select, Ice Leaf, Almira, Seama, Oska, IVAL, Almarai Pro, Premier Chef, Bakemart, and others. In 2024, Almarai reported net income of SAR 2.31 billion on sales of SAR 20.98 billion. For more information, please visit our website.
Arca Continental produces, distributes and sells non-alcoholic beverages under The Coca-Cola Company brand, as well as snacks under the brands of Bokados in Mexico, Inalecsa in Ecuador and Wise in the US. With an outstanding history spanning more than 98 years, Arca Continental is the second-largest Coca-Cola botter in Latin America and one of the largest in the world. Within its Coca-Cola franchise territory, the company servers over 119 million consumers in northern and western Mexico, Ecuador, Peru, northern Argentina and southwestern region of the U.S. The Company´s shares trade on the Mexican Stock Exchange under the ticker symbol "AC". For more information on Arca Continental, please visit www.arcacontal.com
We’ve grown to become the largest family-operated broadline food service distributor in North America by upholding the same business approach since 1897—being passionately committed to the people we serve. We believe in the power of good food—to bring people together and make moments special. Every product, every order, and every decision we make is inspired by the people on the other side of the plate. We distribute to foodservice operators throughout the Midwest, Northeast, Southeast and Southwest regions of the U.S. and coast to coast in Canada. Our company also operates more than 170 Gordon Food Service Stores, which are open to the public and provide the benefits of restaurant-quality products and friendly, knowledgeable service. Gordon Food Service Stores do not charge a membership fee. Gordon Food Service Stores are the primary supplier for many small foodservice operators, including: restaurants, churches, daycare providers, caterers, event planners, and other small businesses. We offer a broad range of employment opportunities throughout our corporate offices, distribution centers, and retail stores. We have a strong commitment to our employees and foster an environment that promotes internal growth, training, and career development opportunities. Gordon Food Service is an Equal Opportunity Employer and does not discriminate against any person on the basis of age, sex, race, religion, national origin, disability, or veteran status.
Latest updates, reports, and threat intel affecting the global network.
A vulnerability was detected in CodeAstro Student Attendance Management System 1.0. Impacted is an unknown function of the file /attendance-php/Admin/createStudents.php. Performing a manipulation of the argument admissionNumber results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.
A security vulnerability has been detected in D-Link DCS-935L 1.10.01. This issue affects the function snprintf of the file /web/cgi-bin/greece/rhea of the component HTTP Handler. Such manipulation of the argument data leads to format string. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.
Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 through 2.10.2 on Linux contains an Improper Authentication vulnerability (CWE-287) in the system configuration module. The /php/ajax-login.php endpoint returns userid=1 (administrator) in response to any HTTP POST request that supplies arbitrary credentials (e.g., action=dologin&login=<any_value>&pwd=<any_value>), and subsequent privileged endpoints under /php/ajax-main.php and /modules/* do not validate a server-side session. A remote unauthenticated attacker can invoke any administrative action exposed by the configuration module, including reading and modifying user rules, fuel tank gauges, fuel dispensers, relays, cash registers, bank terminals, fuel cards, price and customer displays, cash collection, and pricing rules.
SQL Injection in reports/catalogue_out.pl in Koha Community Koha through 22.11.37, 23.x, 24.x before 24.11.16, 25.05.x before 25.05.11, 25.11.x before 25.11.05, 26.05.x before 26.05.01, and 26.11.x before 26.11.00 allows an authenticated staff user with the Reports module flag to read arbitrary data from the Koha application database via the Filter URL parameter when the Criteria parameter matches /branchcode/. The vulnerable sink in sub calculate concatenates the unmodified Filter request parameter directly into a LIKE clause of the auxiliary $strsth2 statement and executes it via DBI without bound parameters: my $f = @$filters[0]; $f =~ s/\*/%/g; $strsth2 .= " AND $column LIKE '$f' "; This enables error-based SQL injection (e.g., via EXTRACTVALUE) and full read access to sensitive tables including borrowers (password hashes, 2FA secrets, PII), borrower_password_recovery, api_keys, and sessions. Proof of concept (error-based, single request): GET /cgi-bin/koha/reports/catalogue_out.pl?do_it=1&output=screen&Limit=10&Criteria=branchcode&Filter=x'+AND+EXTRACTVALUE(1,CONCAT(0x7e,VERSION(),0x7c,USER(),0x7c,DATABASE(),0x7e))--+- Cookie: CGISESSID=<LIBRARIAN_SESSION> The response body contains the DBI exception leaking the MariaDB version, database user, client IP, and database name, after which arbitrary data can be paged out using LIMIT n,1 / SUBSTRING(...). The vulnerable sink was introduced in commit 6bb77ae3e4 (2008-07-09); CVE-2015-4633 patched the same class in sibling files but did not generalise the fix to reports/catalogue_out.pl. Fixed in Koha 22.11.38, 24.11.16, 25.05.11, 25.11.05, 26.05.01, and 26.11.00 by replacing the raw concatenation with a parameterised placeholder.
The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bookly-customer-full-name' cookie in versions up to, and including, 27.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires 'Remember personal information in cookies' setting to be enabled (disabled by default).
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.