GPHA A.I CyberSecurity Scoring
25/01/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for Ghana Ports and Harbours Authority in 2026.
No incidents recorded for Ghana Ports and Harbours Authority in 2026.
No incidents recorded for Ghana Ports and Harbours Authority in 2026.
Maritime Transportation
Anglo-Eastern's rich maritime heritage spans over 50 years of ship management, crew management, cruise & leisure management and technical services. We manage a diverse fleet of vessels worldwide on behalf of our global partners, and uniquely offer both cadet and crew training through our highly regarded maritime academy and strategically located training centres. From humble beginnings to industry pioneer, we are always looking to the future yet are never far from our roots, and it is this distinct blend of proactive forward-thinking and traditional values, coupled with our commitment to developing and nurturing our people and communities, that drives Anglo-Eastern and sets us apart from our peers. Leading with integrity and doing the right things the right way are at the heart of our work ethic and the foundation upon which we are able to build trust, drive performance and shape a better maritime future for generations to follow. Join us on our voyage in delivering excellence. ------------------------ IMPORTANT NOTICE | Anglo-Eastern does NOT use agents, and we do NOT charge fees in exchange for employment or AEMA sponsorship. We offer employment and sponsorship based on merit and suitability. Anyone asking for money in exchange for Anglo-Eastern employment or AEMA sponsorship is a fraudster. Please report such scammers and do NOT make any payments to them. COMMUNITY POLICY | We welcome our followers and other members of the LinkedIn community to comment on our posts and express their views. However, we have a zero-tolerance policy regarding comments that are obscene, threatening, discriminatory or of a harassing nature (including trolling), as well as those that intend to purposely mislead through false claims and misinformation, solicit, phish and/or otherwise scam. Such comments may be reported and/or removed at any time without notice.
About Hapag-Lloyd With a fleet of 313 modern container ships and a total transport capacity of 2.5 million TEU, Hapag-Lloyd is one of the world’s leading liner shipping companies. In the Liner Shipping segment, the Company has around 14,000 employees and 400 offices in 140 countries. Hapag-Lloyd has a container capacity of 3.7 million TEU – including one of the largest and most modern fleets of reefer containers. A total of 133 liner services worldwide ensure fast and reliable connections between more than 600 ports on all the continents. In the Terminal & Infrastructure segment, Hapag-Lloyd has equity stakes in 21 terminals in Europe, Latin America, the United States, India and North Africa. Around 3,000 employees are assigned to the Terminal & Infrastructure segment and provide complementary logistics services at selected locations in addition to the terminal activities.
Latest updates, reports, and threat intel affecting the global network.
By Laudia Anyorkor Nunoo, GNA Tema, Jan. 19, GNA – A delegation from the United States Coast Guard (USCG) has expressed high confidence in the safety...
In an era where digital transformation is crucial for national development, the call for a secure centralised database system in Ghana is...
The Africa Development Bank (AfDB) has expressed strong enthusiasm for Ghana's 24-Hour Economy concept, committing to provide comprehensive project preparation...
Bank commits to supporting Ghana's 24-hour Economy initiative, infrastructure, Public-Private Partnership development, and domestic capital mobilization.
The Ghana Ports and Harbours Authority (GPHA) has completed installation of a vessel traffic management information system to improve how ships are monitored.
In a bid to enhance efficiency and manage increasing cargo volumes, the Ghana Ports and Harbours Authority (GPHA) has commissioned 15 new...
The acting Director-General of the Ghana Ports and Harbours Authority (GPHA), Brigadier General Paul Seidu Tanye-Kulono, has called on staff...
The Director-General of the Ghana Maritime Authority (GMA), Navy Captain Kamal-Deen Ali (Rtd.), PhD., wants Ghana's sea ports to gain and...
The Director-General of the Ghana Maritime Authority (GMA), Naval Captain Dr Kamal-Deen Ali (retd), has pledged to ensure that the country's sea ports gain and...
FOSSBilling is a free, open-source billing and client management system. In versions 0.5.6 through 0.7.2, when a `ClientPasswordReset` record already exists for a client (from a previous unexpired reset request), subsequent calls to the `reset_password` guest API endpoint reuse the existing token instead of generating a new one. The 15-minute validity window is anchored to the first request's `created_at` timestamp, not the time of the most recent email. An attacker who obtained the original reset link remains able to use it even after the victim requests a new reset, because the original token is never invalidated or rotated. Version 0.8.0 patches the issue. Some workarounds are available. Configure a reverse proxy (e.g., Nginx, Apache, Cloudflare) to apply per-IP rate limiting to the `/client/reset-password` endpoint to minimize the window of opportunity, and/or manually clear expired `client_password_reset` records from the database after a client reports a suspected compromise.
FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 allow a low-privileged staff account to grant arbitrary module permissions to itself through the admin API, resulting in persistent privilege escalation. A staff user that only has `staff.create_and_edit_staff` can call `/api/admin/staff/permissions_update` targeting their own account and write any permission structure, bypassing the intended role-based access control boundary. Version 0.8.0 patches the issue. Some workarounds are available. Restrict the `staff.create_and_edit_staff` permission to only highly trusted staff members and/or use a reverse proxy or WAF to restrict access to `/api/admin/staff/permissions_update` to specific trusted roles.
FOSSBilling is a free, open-source billing and client management system. Versions 0.5.3 through 0.7.2 allow authenticated clients to both read and reset API key service secrets for orders that are no longer in an `active` state (e.g., `suspended`, `canceled`). The root cause is missing order-state validation in two client API endpoints, despite an `isActive()` helper already existing in the `Serviceapikey` module and the frontend UI correctly gating access on `order.status == 'active'`. Version 0.8.0 contains a fix. Some workarounds are available. If the `Serviceapikey` module is not needed, uninstall it to remove the affected endpoints. One may also use a reverse proxy or WAF to restrict access to `/api/client/order/service` and `/api/client/serviceapikey/reset` based on application-level order-state logic.
FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 allow low-privileged staff accounts to perform unauthorized actions via admin API endpoints. The root cause is a combination of the `can_always_access` module flag (which grants all staff access to certain modules) and insufficient permission checks or unsafe parameter handling on individual endpoints. Version 0.8.0 contains a fix. Some workarounds are available. Restrict staff accounts to only those who need access to sensitive settings and/or use a reverse proxy or WAF to restrict access to the affected endpoints to trusted IP addresses or higher-privilege roles.
FOSSBilling is a free, open-source billing and client management system. In versions 0.5.6 through 0.7.2, when the "Require Email Confirmation" setting is enabled, a logged-in client with an unverified email address (`email_approved = 0`) can access all client-area pages (e.g. `/client/balance`, `/client/order/list`, `/client/invoice`) and read real account data, including wallet balances and transaction history. The API-side enforcement correctly restricts unverified clients to only profile-related endpoints, but the page-side enforcement is overly permissive, allowing any request whose path starts with `/client`. Version 0.8.0 contains a fix. No known workarounds that don't involve modifying the source code are available.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.