HBEI A.I CyberSecurity Scoring
01/03/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for HBS Business and Environment Initiative in 2026.
No incidents recorded for HBS Business and Environment Initiative in 2026.
No incidents recorded for HBS Business and Environment Initiative in 2026.
The University of Colorado Boulder is Colorado’s leading public research university, transforming lives since 1876. As the state's flagship university and one of only 38 U.S. public research institutions in the Association of American Universities (AAU), CU Boulder has proudly served Coloradans since the state's founding. Home to five Nobel Laureates since 1989 and the only university to send space instruments to every planet in the solar system, CU Boulder provides a strong return on investment by aligning efforts to achieve research and creative excellence, global sustainability impact and the success of all students, faculty and staff.
Vanderbilt University is a top-ranked teaching and research university in Nashville, Tennessee. Powered by collaboration. Follow Vanderbilt on Facebook, Twitter, TikTok and Instagram @VanderbiltU. See more Vanderbilt social media at https://social.vanderbilt.edu/ Located in Nashville, Tenn., and operating at a global crossroads of teaching and discovery, Vanderbilt University is a community of individuals who come to work each day with the simple aim of changing the world. It is a place where your expertise will be valued, your knowledge expanded and your abilities challenged. It is a place where your diversity — of culture, thinking, learning and leading — is sought and celebrated. It is a place where students and employees know they are part of something that is bigger than themselves, take exceptional pride in their work and never settle for what was good enough yesterday. We hire hundreds of employees each year and have a wealth of opportunities ranging from information technology to development and dining to athletics. We are Vanderbilt. Join Us. Our comment policy: https://news.vanderbilt.edu/resources/about/comment-policy
The University of South Florida, a high-impact research university dedicated to student success and committed to community engagement, generates an annual economic impact of more than $6 billion. With campuses in Tampa, St. Petersburg and Sarasota-Manatee, USF serves approximately 50,000 students who represent nearly 150 different countries. U.S. News & World Report has ranked USF as one of the nation’s top 50 public universities for five consecutive years, and this year USF earned its highest ranking ever among all universities public or private. In 2023, USF became the first public university in Florida in nearly 40 years to be invited to join the Association of American Universities, a prestigious group of the leading universities in the United States and Canada. Through hundreds of millions of dollars in research activity each year and as one of the top universities in the world for securing new patents, USF is a leader in solving global problems and improving lives. USF is a member of the American Athletic Conference. Learn more at www.usf.edu.
RMIT is a global university of technology, design and enterprise. One of Australia's original tertiary institutions, RMIT University enjoys an international reputation for excellence in professional and vocational education, applied research, and engagement with the needs of industry and the community. RMIT is a world leader in Art and Design; Architecture and the Built Environment; Engineering; Accounting and Finance; and Business and Management Studies. CRICOS provider code: 00122A
The Tecnológico de Monterrey is a private university system with 33 campuses in 26 cities in Mexico, which serves more than 96,000 students in its high school, undergraduate and graduate programs. It also has liaison offices in 12 countries. Through the promotion of research, generation of knowledge transfer models and technology, it promotes the building of a knowledge-based economy to support the economic, political and social development of the country's regions.
ASU has developed a new model for the American research university, creating an institution committed to excellence, access and impact — the New American University. Nationally and internationally acclaimed, ASU ranks among the very best in nearly every critical measurement of student success, outcomes of groundbreaking research and impact in the communities it serves. ASU is among the top 1% of universities in the world, has been repeatedly ranked No. 1 in multiple categories and is currently ranked No. 2 in the U.S. for employability among public universities. ASU is home to a vibrant, thriving global network of alumni — leaders, doers, shapers and learners, and serves graduate and undergraduate students across four Phoenix Metropolitan area campuses, online and throughout the U.S., including locations in California, Hawai‘i and Washington, D.C. Follow our page for the latest stories and updates from ASU.
The University of Utah, located in Salt Lake City in the foothills of the Wasatch Mountains, is the flagship institution of higher learning in Utah. Founded in 1850, it serves over 31,000 students from across the U.S. and the world. With over 72 major subjects at the undergraduate level and more than 90 major fields of study at the graduate level, including law and medicine, the university prepares students to live and compete in the global workplace. Known for its proximity to seven world-class ski resorts within 40 minutes of campus, the U encourages an active, holistic lifestyle, innovation and collaborative thinking to engage students, faculty and business leaders. The University of Utah became a member of the PAC-12 conference in July 2011. Technology and Commercialization The University of Utah is tops in the country for creating start-up companies from university research, according to a ranking by the Association of University Technology Managers (AUTM). See http://unews.utah.edu/news_releases/u-of-utah-no-1-for-startups for more information. Forbes magazine’s recent ranking of the “Best States for Business” pointed to “an educated labor force” as a big reason Utah came in at number one. The U supplies many of the employees for companies that keep expanding their operations in Utah, such as Goldman Sachs, Adobe, Omniture, Oracle, Ebay and many others. http://pac12info.utah.edu/commercialization-of-innovation/ Healthcare University of Utah Health Care recently ranked first in the nation in a prestigious national study. The University Health System Consortium’s 2010 Quality and Accountability Study compared 98 of the nation’s top academic medical centers and ranked them based on core quality measures, patient safety indicators, mortality rates, re-admission rates, and patient satisfaction scores. See more about University of Utah Health Care at http://healthcare.utah.edu/index.php
One of the nation’s largest schools, the University of Minnesota offers baccalaureate, master’s, and doctoral degrees in virtually every field—from medicine to business, law to liberal arts, and science and engineering to architecture. The University of Minnesota system is made up of five campuses in Minnesota including Crookston, Duluth, Morris, Rochester, and the Twin Cities (Minneapolis/St. Paul). University of Minnesota Extension provides outreach and education services to Minnesota's communities through science-based knowledge, expertise and training. The University of Minnesota was recognized by Forbes in 2018 in the Best Employer, Best Employer for Diversity, and Best Employer for New Grads categories.
Ranked in the top 10 schools and programs of public health in the world by US News and World Report, Boston University School of Public Health provides the opportunity to engage in world-renowned research, scholarship, social justice, and public health practice. Founded in 1976, BUSPH offers master- and doctoral-level education in public health, as well as continuing learning opportunities. The faculty in six departments (biostatistics; community health sciences; environmental health; epidemiology; global health; and health law, policy & management) conduct policy-changing public health research around the world, with the mission of improving the health of populations—especially the disadvantaged, underserved, and vulnerable—locally, nationally, and internationally.
Latest updates, reports, and threat intel affecting the global network.
The term deepfake often appears in news stories and can stir up feelings of fear and uncertainty. But as with most scams, being informed can...
Artificial intelligence is already reshaping industries worldwide. However, AI's rapid ascent has overwhelmed the many business leaders...
Many global companies have made public commitments to sustainability targets. Fulfilling these commitments will require firms to transform their business...
The Board Diversity Network, a program of the HBS Race, Gender & Equity Initiative, shares the latest research, insights, and HBS alumni...
The rise of AI offers several benefits to society at large. It also ushers in concerns regarding security. Social engineers are already...
Over 65 MBA students found internships at the intersection of business and the environment. This post provides a sample of some of the types of companies that...
Amy C. Edmondson is the Novartis Professor of Leadership and Management at the Harvard Business School, a chair established to support the study of human...
BY CARMEN NOBEL. In the course of her work, Rebecca Henderson meets business executives who don't address the threat of climate change...
The Bluetooth Classic Hands-Free Profile HF role in subsys/bluetooth/host/classic/hfp_hf.c does not release the AT command buffers that are still queued on hf->tx_pending when the RFCOMM DLC goes down. hfp_hf_disconnected() only cancelled the work items and cleared hf->acl, and no other code path ever dequeues those buffers, so each one is permanently lost from the fixed hf_pool (CONFIG_BT_MAX_CONN + 1 buffers, i.e. two in the default configuration). The same function also left BT_HFP_HF_FLAG_CONNECTED set, and hfp_hf_create() wiped the object with memset() as soon as hf->acl was NULL, without checking whether hf->work, hf->slc_work or hf->deferred_work was still pending or running. The remote Audio Gateway peer controls the trigger end to end and needs no application involvement: an unsolicited +BCS: 1 response makes bcs_handle() call bt_hfp_hf_select_codec() and queue an AT+BCS buffer, which cannot be transmitted while BT_HFP_HF_FLAG_RX_ONGOING is set, and an immediately following RFCOMM DISC strands that buffer. Repeating the connect / +BCS / disconnect cycle a couple of times empties hf_pool for good. With the pool exhausted, HFP command sending fails permanently, and because hfp_hf_send_cmd() allocates with K_FOREVER (bt_rfcomm_create_pdu() → bt_conn_create_pdu()) from the Bluetooth RX context — where that timeout is not downgraded to K_NO_WAIT — one further +BCS from the peer parks the Bluetooth RX thread inside net_buf_alloc() with no possible waker, halting all HCI event processing until the device is rebooted. Separately, reusing the HF slot while a work handler was still queued or running allowed memset() to wipe live k_work items out from under the system workqueue, corrupting shared kernel workqueue state. Exploitation requires an established HFP session (for SSP devices L2CAP enforces authentication before the RFCOMM channel is reachable) and a build with CONFIG_BT_HFP_HF enabled.
The user-mode syscall verifier z_vrfy_rtio_cqe_get_mempool_buffer() in subsys/rtio/rtio_syscalls.c validated its two output parameters, buff and buff_len, with K_SYSCALL_MEMORY_READ() rather than K_SYSCALL_MEMORY_WRITE(). Both are pure out-parameters: z_impl_rtio_cqe_get_mempool_buffer() stores the mempool buffer address and its length through them. The distinction is enforced by every architecture validator — arch_buffer_validate() on RISC-V PMP explicitly accepts the global __rom_region/__rodata_region for reads only, and the ARM MPU validators accept P_RO_U_RO and P_RW_U_RO regions for reads only — so a read-validated pointer is not necessarily writable by the calling thread. An unprivileged user-mode thread that has been granted access to an RTIO context (rtio_access_grant()) can invoke the rtio_cqe_get_mempool_buffer() syscall with buff/buff_len pointing at memory it may read but not write, and with a completion-queue entry whose flags field it fully controls (only RTIO_CQE_FLAG_MEMPOOL_BUFFER in flags[7:0] is required; flags[19:8] and flags[31:20] supply the block index and count). The kernel then performs a pointer-sized and a 4-byte store through those addresses while running in supervisor mode. Reaching the store requires CONFIG_USERSPACE together with CONFIG_RTIO_SYS_MEM_BLOCKS, the configuration behind RTIO_DEFINE_WITH_MEMPOOL; without the latter the implementation returns -ENOTSUP and writes nothing. Two outcomes follow. If the target lies in a memory-domain partition declared K_MEM_PARTITION_P_RW_U_RO (privileged read-write, user read-only), the kernel-mode store succeeds and deposits partly attacker-chosen values into memory the memory domain had marked read-only for that thread, bypassing the partition's write protection. If the target lies in globally readable but unwritable memory such as .text/.rodata in flash, the store faults in kernel mode; the fault is delivered to z_fatal_error() and the default k_sys_fatal_error_handler() halts or reboots the device, giving an unprivileged thread a reliable full denial of service. The read-permission check does bound the damage: the address must still be readable by the calling thread, so kernel-private memory cannot be targeted and no confidential data is disclosed. The fix replaces both checks with K_SYSCALL_MEMORY_WRITE(), so a thread lacking write permission is terminated by K_OOPS before the implementation runs; the cqe argument correctly remains read-validated.
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition.
The html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF) vulnerability in its is_safe_url() URL validation function. The BLOCKED_RANGES list used to reject unsafe destination addresses was incomplete, omitting several critical IP address ranges. Specifically, the following ranges were not blocked: 0.0.0.0/8 (unspecified, which routes to loopback on Linux), 100.64.0.0/10 (carrier-grade NAT per RFC 6598), ::/128 (IPv6 unspecified), fc00::/7 (IPv6 Unique Local Addresses), and fe80::/10 (IPv6 link-local). The existing list only covered IPv4 loopback (127.0.0.0/8), RFC 1918 private ranges, IPv4 link-local (169.254.0.0/16), and IPv6 loopback (::1/128). An authenticated user with the ability to create or modify MISP attributes that trigger the html_to_markdown expansion module could supply URLs pointing to these unblocked internal address ranges. Because the module fetches the URL server-side to convert HTML content to Markdown, the request is made from the MISP server's network context. This allows an attacker to probe and read responses from internal services, carrier-grade NAT infrastructure, or link-local endpoints that would otherwise be unreachable from external networks. IPv4-mapped IPv6 forms (e.g., [::ffff:0.0.0.0]) also bypassed the existing checks. The security impact is primarily confidentiality: an attacker can read data served by internal services reachable from the MISP server. The MISP instance itself is not compromised, but it is abused as a proxy to access otherwise restricted network resources.
A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile of the file /api/upload. This manipulation of the argument fileName causes path traversal. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.