GGL A.I CyberSecurity Scoring
08/12/2025
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for Goldbelt Global, LLC in 2026.
No incidents recorded for Goldbelt Global, LLC in 2026.
No incidents recorded for Goldbelt Global, LLC in 2026.
Expeditors is a Fortune 500 service-based logistics company with headquarters in Seattle, Washington, USA. At Expeditors, we generate highly optimized and customized supply chain solutions for our clients with unified technology systems integrated through a global network of over 350 locations in 100+ countries on six continents. Expeditors is focused on the increasingly sophisticated needs of international trade through customized solutions and seamless, integrated information systems. Our services include air and ocean freight consolidation and forwarding, vendor consolidation, customs clearance, cargo insurance, distribution and other value-added logistics services. We pride ourselves on being a solutions-based organization that takes the time to understand each customer's individual business needs. As a non-asset based organization, we have considerable flexibility when managing customers' supply chains. Our relationships with local suppliers and global air and ocean partners provides our customers with the best routing and pricing options. Expeditors' comprehensive, flexible spectrum of services is supported by leading-edge information technology providing the highest level of end to end visibility. To maintain consistent quality and customer service across the globe, Expeditors has regional headquarters located in London, Dubai, Shanghai and Singapore. At Expeditors, our industry professionals, award winning processes and globally unified systems ensure that we always live up to our promise, "You'd be surprised how far we'll go for you."
We make everyday life easier. PostNord is a leading provider of parcel and logistics services to, from, and within the Nordic region. We ensure the provision of a postal service to households and businesses in Sweden, regardless of where they live and work. PostNord connects companies, public authorities and consumers and enables business, trade and communication in the Nordic region. With our expertise and strong distribution network, we put in place the conditions for the e-commerce, distribution, logistics and communication solutions of tomorrow in the Nordic region. In 2023, the Group had around 24,500 employees and sales of SEK 39.3 billion. The Parent Company is a Swedish public limited company with Group headquarters in Solna, Sweden. Visit us at www.group.postnord.com
CEVA provides world-class supply chain solutions for large and medium-size national and multinational companies across the globe. As an industry leader, CEVA offers customers complete supply chain design and implementation in contract logistics and freight management, alone or in combination. Together with CMA CGM, a leading worldwide shipping group and CEVA’s strategic partner, we are able to offer our customers end-to-end logistics solutions. CEVA’s integrated global network has over 1,000 facilities in more than 170 countries and 110,000 employees; all dedicated to delivering consistently excellent operations and supply chain solutions.
NFI is a fully integrated North American supply chain solutions provider headquartered in Camden, New Jersey. Privately held by the Brown family since 1932, we generate over $3.8 billion annually and employ 17,000+ associates. Guided by our values of family, integrity, safety, customers, teamwork, and social responsibility, we empower employees, embrace innovation, and deliver customer-focused logistics solutions. NFI offers a wide range of services, including dedicated transportation, warehousing and distribution, port services, integrated logistics, industrial real estate, and more. Through NFI Ventures, we also invest in early-stage companies driving innovation in the supply chain industry. For more information about NFI, visit us at www.nfiindustries.com or call 1-877-NFI-3777. Learn more about our social media community guidelines: https://bit.ly/3JCGypI
Saving people money so they can live better is a big job. That’s why we have one of the largest private distribution networks in the world. Each of our 42 regional U.S. distribution centers is over 1 million square feet, with more than 12 miles of conveyor belts to move 5.5 billion cases of merchandise. Some distribution centers operate 24/7 around the clock to keep the Walmart fleet rolling. It’s all designed to pass on savings to our customers and communities. Working here, you’ll be part of an unrivaled operation that’s leading the way for innovation, efficiency and safety. By joining one of the largest private fleets and distribution networks in the world, you’ll gain the training, teamwork and technology you need to move your career – and 5.5 billion cases of merchandise each year.
As the custodian of ports, rail and pipelines, Transnet’s objective is to ensure a globally competitive freight system that enables sustained growth and diversification of the country’s economy. As a state-owned company, Transnet continues to leave an indelible mark on the lives of all South Africans. With a geographical footprint that covers our entire country, Transnet is inextricably involved in all aspects of life in South Africa. Through the Transnet Foundation - which is the Corporate Social Investment arm of Transnet - we have invested time and money in several diverse programmes around the country that provide much-needed succour to our communities. Looking ahead, Transnet is focused on modernizing infrastructure, driving growth, and enhancing efficiency through strategic partnerships. Our vision is clear: to contribute meaningfully to South Africa’s economic aspirations through sustainable growth and modernization.
Trade is the lifeblood of the global economy, creating opportunities and improving the quality of life for people around the world. DP World exists to make the world’s trade flow better, changing what’s possible for the customers and communities we serve globally. With a dedicated, diverse and professional team of more than 119,000 employees from 164 nationalities, spanning 83 countries on six continents and 560+ business units, DP World is pushing trade further and faster towards a seamless supply chain that’s fit for the future. We’re rapidly transforming and integrating our businesses -- Ports and Terminals, Marine Services, Logistics and Technology – and uniting our global infrastructure with local expertise to create stronger, more efficient end-to-end supply chain solutions that can change the way the world trades. What's more, we're reshaping the future by investing in innovation. From intelligent delivery systems to automated warehouse stacking, we’re at the cutting edge of disruptive technology, pushing the sector towards better ways to trade, minimising disruptions from the factory floor to the customer’s door. WE MAKE TRADE FLOW TO CHANGE WHAT'S POSSIBLE FOR EVERYONE
Ecom Express: Delivering Over 1.9 Billion Reasons to Trust Us Based in Gurugram, Ecom Express was established in 2012 by veterans backed by 100+ years of collective logistics expertise. We aren't just a logistics provider—we're your partner in bridging distances and making connections. Our network reaches every corner, covering 27,000+ PIN codes in 2700+ towns, meticulously handled over 1.9 billion parcels in the past 10+ years. We're not just delivering; we're innovating with solutions like Ecom Magnum, comprehensive shipping services, fulfillment capabilities, Bulls.ai and drone technology—ensuring every package is delivered to the right location on time. Connect | Deliver| Grow https://bit.ly/4d0sHpV
Welcome! We are PostNL. Your favorite delivery service is what we want to be. Every day, over 35,000 colleagues work hard to achieve this goal, on your streets and in your neighborhood, in our sorting centers and depots, and at the office. On an average day, we deliver about 1.1 million packages and 7.4 million letters, so chances are we will meet. In addition to delivering, we're always innovating. For example, we're developing more sustainable ways of delivering and clever products and services like delivery preferences. Making your life easier, that is why we continuously work on new and improved products and services. Such as the parcel locker and convenient online services for webshops and other business customers. Will you help us be your favorite delivery service? Come join us and become a colleague! Check out our job opportunities at www.postnl.nl/werkenbij (work with us). See you soon or as we say in Dutch: tot snel!
Latest updates, reports, and threat intel affecting the global network.
A flaw was found in DPDK lib/vhost. Missing length validation before reading command_data in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash.
Maravel, a PHP framework oriented towards dependency injection, prior to version 10.74.0 has a high-severity Token Replay Vulnerability arising from a structural lifecycle mismatch between stateless token validation engines and high-performance relational caching layers. Any application with low cache memory that causes premature eviction to free up memory and applications running macropay-solutions/maravel-framework that utilize tymon/jwt-auth for API token authentication and blacklist management or any other package that does the same may be affected. This architectural risk might also impact native Laravel applications utilizing cache tags under specific volatile or eviction-capped environments. tymon/jwt-auth automatically probes for cache tag support. If found, it forcefully wraps 14-day token blacklist entries (jti) inside a relational tymon.jwt tag. In environments where the O(1) Atomic Lazy Eviction model is active — either natively inside Maravel-Framework v20.x or manually backported into v10.x via the explicit DI container singletons provided in PR #104 (App\Cache\TaggedCache and App\Cache\TagSet) — a strict global tracking ceiling (Container::TAGGED_CACHE_TTL_CAP_SECONDS) of 7,200 seconds (2 hours) is enforced to secure the system against memory index bloat. This ceiling forcefully truncates the 14-day blacklist lifespan down to a maximum of 2 hours, after which individual tracking keys naturally expire and disappear from the active cache window. Furthermore, because the optimized engine implements a generational version matrix to achieve O(1) flush speeds, any programmatic or manual invocation of a tag flush or reset (e.g., Cache::tags([...])->flush()) instantly bumps the internal atomic master version pointer. This shifts the computed cryptographic composite hash (sha1($this->tags->getNamespace())) for all overlapping components, rendering the entire existing index immediately unreachable. Consequently, through either natural 2-hour expiration or an intervening tag flush execution (like the cache naturally cleaning old values to free up memory), the invalidation state records are entirely wiped out. Because the tokens' physical cryptographic signatures remain structurally valid for up to 14 days, stolen, hijacked, or legitimately logged-out tokens are instantly and silently resurrected across the entire API gateway, leaving the application critically vulnerable to widespread Token Replay Attacks. Because this issue is caused by an upstream architectural assumption within the tymon/jwt-auth package rather than a core defect inside the framework, there is no direct framework version upgrade that can safely bypass this lifecycle collision without breaking business cache recycling bounds. Maravel version 10.74.0 introduced a way to backport the new fixed tagged cache from 20.x into 10.x by resolving TagSet and TaggedCache from DI, which is how this latent architectural lifecycle vulnerability was discovered. Users must apply the decoupled configuration workaround outlined below. As a workaround, make sure that cache memory size does not generate early natural evictions from cache to free up space, deleting blacklisted jwt ids before they expire. Applications must decouple flat authentication vectors from the relational tagging subsystem. This forces token identifiers to write directly to the primary cache keyspace as flat, un-tagged key-value pairs where they securely retain their unclipped 14-day lifecycle.
Sylius is an Open Source eCommerce Framework on Symfony. Starting in version 2.0.0 and prior to version 2.0.18, 2.1.15, and 2.2.6, the `GET /api/v2/shop/payment-requests/{hash}` and `PUT /api/v2/shop/payment-requests/{hash}` endpoints look up the payment request solely by the hash from the URL. No ownership check is performed against the authenticated customer or the underlying order. An attacker who obtains a payment request hash can read the payment request and, through the `payment` IRI in the response, recover the underlying order's `tokenValue` (which itself grants access to the full order, items, addresses, customer email, totals); and/or update the payment request payload (e.g. `target_path`, `after_path`). These fields are used by the front-end controller to redirect the user after the payment, so an attacker can flip them to an attacker-controlled URL and intercept the buyer. The hash is a UUID, so it has to be obtained out-of-band (logs, shared links, referrer headers, a co-located client), but once it is known no other credential is required, neither authentication nor knowledge of the order token. The creation endpoint `POST /api/v2/shop/orders/{tokenValue}/payment-requests` shares the same flaw: it resolves the target order solely from the `tokenValue` in the URL without verifying that the caller owns the order. The issue is fixed in versions 2.0.18, 2.1.15, and 2.2.6. As a workaround, add a query extension that filters the `GET` operation; decorate the `PUT` state provider, guard the `POST` creation endpoint with a command-bus middleware, and wire the services.
Sylius is an Open Source eCommerce Framework on Symfony. Starting in version 2.0.0 and prior to version 2.0.18, 2.1.15, and 2.2.6, an authorization bypass vulnerability exists in the shop account API. The `PATCH /api/v2/shop/account/orders/{tokenValue}/payments/{paymentId}` endpoint, used by an authenticated shop customer to change the payment method of an order that has been placed but not yet paid (state `STATE_NEW`), does not validate that the chosen payment method is enabled for the order's channel. The equivalent checkout endpoint (`PATCH /api/v2/shop/orders/{tokenValue}/payments/{paymentId}`) correctly rejects out-of-channel payment methods with `HTTP 422`; the account endpoint silently accepts them and returns `HTTP 200`. An authenticated customer can therefore assign any globally enabled payment method to their own placed order, including methods that the store operator has explicitly excluded from that channel. The issue is fixed in versions: 2.0.18, 2.1.15, 2.2.6 and above. As a workaround, decorate the `Sylius\Bundle\ApiBundle\Changer\PaymentMethodChangerInterface` service in the application.
Sylius is an Open Source eCommerce Framework on Symfony. Versions 2.0.0 through 2.0.17, 2.1.0 through 2.1.14, and 2.2.0 through 2.2.5 contain an improper workflow enforcement vulnerability in the cart `FormComponent`. When an order is completed while its cart page remains open, the stale LiveComponent does not detect the order’s changed state and continues to permit cart actions, allowing an authenticated customer to modify or permanently delete an already completed order. Versions 2.0.18, 2.1.15, and 2.2.6 contain a patch. As a workaround, deployments can copy the patched `FormComponent` into the application's `src/` directory and override the `sylius_shop.twig.component.cart.form` service definition to use that class.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.