GHAC A.I CyberSecurity Scoring
24/04/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for GMR Hyderabad Air Cargo in 2026.
No incidents recorded for GMR Hyderabad Air Cargo in 2026.
No incidents recorded for GMR Hyderabad Air Cargo in 2026.
Moving the Nordics forward. PostNord is a leading provider of parcel and logistics services to, from, and within the Nordic region. We ensure the provision of a postal service to households and businesses in Sweden, regardless of where they live and work. PostNord connects companies, public authorities and consumers and enables business, trade and communication in the Nordic region. With our expertise and strong distribution network, we put in place the conditions for the e-commerce, distribution, logistics and communication solutions of tomorrow in the Nordic region. Through out the Nordics and the world, we have around 22,000 employees. The Parent Company is a Swedish public limited company with Group headquarters in Solna, Sweden. Visit us at www.group.postnord.com
Penske Logistics is a Penske Transportation Solutions company headquartered in Reading, Pennsylvania. The company is a leading provider of innovative supply chain and logistics solutions. Penske offers solutions including dedicated transportation, distribution center management, 4PL and lead logistics, transportation management, freight brokerage, and a comprehensive array of technologies to keep the world moving forward. We serve a variety of industries including: automotive; food, beverage, grocery, wine and spirits; cold chain; convenience and drug stores; quick service restaurants (QSRs); retail; big box retailers; building and construction products; CPG; healthcare; energy; industrial manufacturing; consumer appliances and consumer electronics; and many others. Visit PenskeLogistics.com to learn more.
GEODIS is a leading global logistics provider acknowledged for its expertise across all aspects of the supply chain. As a growth partner to its clients, GEODIS specializes in four lines of business: Global Freight Forwarding, Global Contract Logistics, Distribution & Express Transport, and European Road Network. With a global network spanning nearly 170 countries and more than 49,400 employees, GEODIS is ranked no. 5 in its sector across the world. In 2022, GEODIS generated €13.7 billion in revenue. GEODIS is a company owned by SNCF group.
Saving people money so they can live better is a big job. That’s why we have one of the largest private distribution networks in the world. Each of our 42 regional U.S. distribution centers is over 1 million square feet, with more than 12 miles of conveyor belts to move 5.5 billion cases of merchandise. Some distribution centers operate 24/7 around the clock to keep the Walmart fleet rolling. It’s all designed to pass on savings to our customers and communities. Working here, you’ll be part of an unrivaled operation that’s leading the way for innovation, efficiency and safety. By joining one of the largest private fleets and distribution networks in the world, you’ll gain the training, teamwork and technology you need to move your career – and 5.5 billion cases of merchandise each year.
MSC is a privately owned global shipping company founded in 1970 by Gianluigi Aponte. As one of the world’s leading container shipping lines with headquarters in Geneva, Switzerland, MSC operates in over 675 offices across more than 155 countries worldwide with over 200,000 MSC Group employees. With access to an integrated network of road, rail and sea transport resources which stretches across the globe, the company prides itself on delivering global service with local knowledge. OUR SERVICES MSC is a world leader in global container shipping and a company offering global service with local knowledge. MSC also provides integrated network of road, rail and sea transport resources which stretches across the globe. YOUR INDUSTRY Bringing you industry-specific expertise; whatever you’re shipping, wherever you’re shipping it. MSC delivers a professional, efficient service tailored to the specific needs of your business. Our services are designed around you.
DTDC Express Ltd is one of India’s leading integrated express logistics company offering domestic and international services. DTDC offers a comprehensive range of technology-enabled logistics services, serving a wide spectrum of customers across diverse industry verticals. Today, DTDC operates India’s largest physically accessible express logistics network and has over 15,000 exclusive channel partners which contribute to its sales and service capabilities.
Founded in 1982, Aramex has emerged as a global leader in logistics and transportation, renowned for its innovative services tailored to businesses and consumers. As a listed company on the Dubai Financial Market (since 2005) and headquartered in the UAE, our strategic location facilitates extensive customer reach worldwide, bridging the gap between East and West. With operations in 600+ cities across 70 countries, Aramex employs over 16,000 professionals. Our success is attributed to four distinct business products that provide scalable, diversified, and end-to- end services for customers. These products are: • International Express, encompassing Aramex's Parcel Forwarding Business (Shop & Ship and MyUS). • Domestic Express • Freight Forwarding • Logistics & Supply Chain Solutions Sustainability is at the core of our vision and mission. To build a truly sustainable business, we leverage our core competencies to make a positive impact as responsible members of the communities we serve. Through partnerships with local and international organizations, we strive to expand our reach and benefit more individuals through targeted programs and initiatives, ensuring long-term positive change and community development. For more information, please visit us: www.aramex.com
At Toll, we do more than just logistics - we move the businesses that move the world. Our 16,000 team members can help solve any logistics, transport, or supply chain challenge – big or small. We have been supporting our customers for more than 130 years. Today, we support more than 20,000 customers worldwide with 500 sites in 29 markets, and a forwarding network spanning 150 countries. We are proudly part of Japan Post — www.tollgroup.com What moves you? At Toll, you can help play a vital role in delivering what matters. From food, fuel, medicine and rescue services, we keep businesses and communities thriving. Every day brings change. We see that as an opportunity. To be curious. To ask the right questions. And build meaningful connections. Because finding new ways to solve problems is what we do. With a bold vision to expand our global reach, our 16,000+ people bring a passion for progress. We collaborate in friendly, caring teams, supported by approachable leaders who give us the autonomy to quickly make decisions with impact. Learn and grow with industry-leading training, alongside talented experts. Feel empowered to take on diverse challenges and new responsibilities to move you, our customers, and our world further.
Need some help? Get in touch with our friendly team at https://bit.ly/evriwebsite3 Every parcel, every person, every place. Evri Group brings together Evri, DHL eCommerce UK – which in 2026 will be rebranded Evri Premium, a network of DHL - customs clearance and logistics specialist Coll-8 and business letters leader UK Mail, to create the UK’s premier parcel delivery company. The combined Evri Group will deliver more than 1 billion parcels and a further 1 billion business letters annually. Evri, the core operating brand, currently delivers around 900 million parcels a year, and is on a mission to be the most convenient way to send, receive and return parcels, without costing the earth. Working with everyone from Europe’s top retailers, marketplaces and pre-loved sites to gift-givers, the roots of Evri can be traced back to Yorkshire in 1974. The business has grown over the last five decades and now has a team of 12,000+ employees and 30,000+ couriers, as well as a growing network of more than 10,000+ ParcelShops and Lockers and 500+ state-of-the-art hubs and depots. Following its acquisition of Coll-8, an Irish independent customs clearance and logistics specialist, and merger with DHL eCommerce UK, Evri Group continues to enhance its international capability and enable world trade. Evri has close to 4 million independent 5-star Trustpilot reviews, an average courier rating of 4.6/5, reflecting a strong commitment to customer experience. To see our social media terms and conditions please visit: https://www.evri.com/social-media-house-rules
Latest updates, reports, and threat intel affecting the global network.
Hyderabad's RGIA saw a 22% increase in cargo handling in 2024, focusing on pharmaceutical exports and global connectivity expansion.
Envirotainer active heating and cooling containers are preferred for the movement of highly temperature-sensitive air cargo shipments...
GMR Hyderabad Airport Cargo has introduced a platform to facilitate the cargo charter operators through the air cargo terminal in Hyderabad.
A remote attacker who controls a container registry may be able to direct a client's token request to a host of the attacker's choice, and disclose the victim's registry credentials to that host. This vulnerability is addressed in containerization version 0.41.0.
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the djust live transport resolves the LiveView to mount from a client-supplied dotted path by calling `__import__(module_path, ...)`. The module is imported — running its top-level code (import side effects) — before the framework checks that the resolved object is a `LiveView` subclass and before any per-view authentication. The `LIVEVIEW_ALLOWED_MODULES` allowlist that should contain this is fail-open (`if allowed_modules:` — skipped when the setting is unset, the framework default) and uses loose `startswith` matching. An unauthenticated WebSocket client (the WS handshake does not require auth; per-view auth runs only after import + instantiate) can therefore send a `mount` / `live_redirect_mount` / `url_change` frame (or an SSE mount) with `view = "<any.importable.module>.AnyName"` and cause the server to import — and execute the top-level code of — any importable Python module by name. Version 1.0.7 fixes the issue with a fail-closed resolution gate (`djust._view_resolution.is_view_import_allowed`): a client view path resolves only if (a) its module is already loaded (`sys.modules` — so resolving runs no new code; URL-routed views loaded by URLconf at startup keep working with zero config) or (b) it matches `LIVEVIEW_ALLOWED_MODULES` on a module-segment boundary (explicit opt-in for lazily-imported views). The gate runs before `__import__` at all three sinks (+ defense-in-depth inside `_instantiate_view`). As a workaround, set `LIVEVIEW_ALLOWED_MODULES` to the narrow list of modules that contain your mountable LiveView classes. (Note: pre-patch the allowlist is `startswith`-matched and the import still precedes the subclass check, so this is mitigation, not a complete fix.)
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, djust's per-object authorization (`get_object` + `has_object_permission`, ADR-017) was enforced on the WebSocket mount and event paths but not on three other render entry points: (a) the initial HTTP GET render, (b) SPA `url_change` navigation, and (c) `{% live_render %}` embedded child views. An authenticated user could therefore view (and on some paths act on) an object they are not authorized for by loading the page directly, navigating to it via SPA url-change, or composing it as an embedded child — a classic IDOR / broken object-level access control on object-scoped views. This is fixed in djust 1.0.7. All render entry points now route through a shared `enforce_object_permission` chokepoint: HTTP GET returns 403, `url_change` emits a `permission_denied` frame and skips the render, and `{% live_render %}` (eager + lazy) refuses the embed. Views without a custom `get_object` are unaffected (no-op). No reliable workaround short of upgrading. Do not expose object-scoped views through the HTTP-GET / url_change / live_render paths until patched.
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the WebSocket `handle_mount` and `ViewRuntime._build_request` rebuild an `HttpRequest` via `RequestFactory().get(...)` with no `HTTP_HOST`, so `request.get_host()` defaulted to `"testserver"` on the live path. Host/subdomain/domain `TenantResolver`s then misresolved the tenant — `None` on the live path while the HTTP path resolved correctly. With `STRICT_MODE=False` the tenant-scoped managers returned unscoped rows (cross-tenant disclosure); with the default they returned an empty queryset (broken tenancy). This is fixed in djust 1.0.7. The handshake Host is extracted from the ASGI scope, validated against `ALLOWED_HOSTS` (the same logic as the CSWSH Origin gate, parsed with Django's `split_domain_port` so malformed Hosts are rejected at the boundary), and propagated — with the TLS scheme — into the reconstructed request, so live-path tenant resolution matches HTTP exactly. There is no known workaround on the live path short of upgrading. Users are most exposed when combined with `STRICT_MODE=False`.
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, when a Django `Model` instance is assigned to a public view attribute, djust serialized it to the client with no sensitive-field denylist — sending fields such as `password` (the hash), privilege flags (e.g. `is_staff` / `is_superuser`), tokens, and other PII to the browser. Because exposing model objects to templates is a normal djust pattern, this could leak credentials/PII without the developer realizing the full object crossed the wire. This is fixed in djust 1.0.7. Model serialization applies a secure-by-default sensitive-field denylist (password/hash/token/secret-style fields and known privilege flags are withheld) with an identity-subset fallback. As a workaround, keep `Model` instances on `_private` attributes and expose only the specific fields needed, until patched.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.