ILD A.I CyberSecurity Scoring
03/01/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for IMechE Learning and Development in 2026.
No incidents recorded for IMechE Learning and Development in 2026.
No incidents recorded for IMechE Learning and Development in 2026.
TR is an international general contractor engaged in the engineering and construction of industrial facilities in the fields of: -Oil & Gas -Refining & Petrochemical -Power Generation -Infrastructures and industries -Energy Transition Engaging in the engineering, design and construction of various types of industrial facilities for a broad spectrum of customers throughout the world, including many of the principal national oil companies and several multinational companies. Leader for engineering and construction in the oil and gas sector in Spain, one of the leaders in Europe in the design and construction of oil and gas facilities, and one of the world leaders in the refining sector. especialiced on large turnkey industrial projects, although we also provide engineering, management, start-up and operating services for industrial plants. You can also follow us on twitter: @TRSA_rrhh
Saipem is a global leader in the engineering and construction of major projects for the energy and infrastructure sectors, both offshore and onshore. Saipem is “One Company” organized into business lines: Asset Based Services, Drilling, Energy Carriers, Offshore Wind, Sustainable Infrastructures. The company has 5 fabrication yards and an offshore fleet of 17 owned construction vessels and 12 drilling rigs, of which 9 owned. Always oriented towards technological innovation, the company’s purpose is “Engineering for a sustainable future”. As such Saipem is committed to supporting its clients on the energy transition pathway towards Net Zero, with increasingly digital means, technologies and processes geared for environmental sustainability. Listed on the Milan Stock Exchange, it is present in more than 50 countries around the world and employs about 30,000 people of over 130 nationalities.
At ST Engineering, we apply our technology and innovation to solve real-world problems and improve lives. Our commitment to excellence and our track record as a global technology, defence, and engineering company earns us a reputation for quality and trust. Subscribe to get the latest news delivered to your inbox: http://eepurl.com/htCq_P. For more updates, follow us on Facebook, Instagram, LinkedIn and YouTube.
Technip Energies is a global technology and engineering powerhouse. With leadership positions in LNG, hydrogen, ethylene, sustainable chemistry, and CO2 management, we are contributing to the development of critical markets such as energy, energy derivatives, decarbonization, and circularity. Our complementary business segments, Technology, Products and Services (TPS) and Project Delivery, turn innovation into scalable and industrial reality. Through collaboration and excellence in execution, our 17,000+ employees across 34 countries are fully committed to bridging prosperity with sustainability for a world designed to last.
UGL is CIMIC Group's specialist end-to-end engineering, services and operations provider. We have a rich history dating back to 1899 and since then we have grown to be a market leader in many of the sectors in which we operate. Working with some of the most important companies and governments in Australia and globally, we help to play a role in people’s lives every day. We keep Australia moving through our transport manufacturing, maintenance and operations offering, and we support the energy sector through our renewables, power generation, resources and transmission operations. We are helping to shape the country through our major infrastructure projects across Australia and we’re preparing for the future with our new energy, Defence, telecommunications and technology expertise. We are passionate about our 9000+ people and keeping them safe. We’re experts in what we do, and our in-house engineering team ensures we can provide a true end-to-end outcome for our customers. With projects, operations and offices throughout the country, our footprint means we are involved in communities across Australia, providing expertise for our customers and employment and career opportunities for all Australians. ugllimited.com @UGLPtyLimited
Ramboll is a global architecture, engineering and consultancy company founded in Denmark in 1945. Our 18,000+ experts create sustainable solutions across Buildings, Transport, Energy, Environment & Health, Water, Management Consulting and Architecture & Landscape. Across the world, Ramboll combines local experience with a global knowledge base to create sustainable cities and societies. We combine insights with the power to drive positive change for our clients, in the form of ideas that can be realised and implemented. We call it: Bright ideas. Sustainable change. Visit us at ramboll.com
Black & Veatch is an employee-owned, global leader in building critical human infrastructure in Energy, Water, Digital Connectivity and Government Services. Since 1915, we have helped our clients improve business operations and the lives of people in over 100 countries through consulting, engineering, construction, operations and program management. Our purpose is building a world of difference and our vision is to be THE leader in sustainable infrastructure. Black & Veatch Holding Company, its subsidiaries and its affiliated companies, complies with all Equal Employment Opportunity (EEO) affirmative action laws and regulations. Black & Veatch does not discriminate on the basis of age, race, religion, color, sex, national origin, marital status, genetic information, sexual orientation, gender Identity and expression, disability, veteran status, pregnancy status or other status protected by law.
We're a global product engineering and digital services company focused on fulfilling our mission of helping the world drive, fly, build, and farm by enabling our customers to realize better products and deliver better experiences. We’re the strategic engineering partner businesses turn to when they aspire to be better. Manufacturing companies rely on us to enable them to conceptualize, develop and realize better products that are safer, cleaner, and improve the quality of life for all the stakeholders, helping us achieve our vision of #EngineeringABetterWorld. We provide a full spectrum coverage of solutions across the product value chain covering outsourced product engineering services, digital transformation services, upskilling solutions and value-added reselling of software products required to develop and realize better products. From delivering discrete outcomes to end-to-end turn key product development for #Connected #Autonomous #ElectricVehicles (#EVs), we're the partner with the experience and expertise to understand what better looks like – and who can bring better to life. We're inspiring a new generation of engineers who, by embracing the opportunities that exist at the convergence of digital technology and traditional engineering, are developing better products and helping customers win in the marketplace. As a global organization, we bring together diverse teams with varying skill sets to collaborate in real time and solve complex engineering problems. In doing so, we're redefining what the world understands by engineering and spreading the influence and impact of engineering as humanity's best way of addressing its most important challenges and opportunities. As a global company headquartered in Pune, India, we are active in more than 27 countries around the world, steered by 12500+ innovators who are making #EngineeringABetterWorld a reality - every day for everyone.
We are a leading international service provider to the energy industry, with a diverse client portfolio including many of the world’s leading energy companies. Petrofac designs, builds, manages and maintains oil, gas, refining, petrochemicals and renewable energy infrastructure. Our purpose is to enable our clients to meet the world’s evolving energy needs. Our core markets are in the Middle East and North Africa (MENA) region and the UK North Sea, where we have built a long and successful track record of safe, reliable and innovative execution, underpinned by a cost effective and local delivery model with a strong focus on in-country value. We operate in several other significant markets, including India, South East Asia and the United States. We have 8,200 employees based across more than 30 offices globally. Petrofac is quoted on the London Stock Exchange (symbol: PFC). To find out more, visit www.petrofac.com
Latest updates, reports, and threat intel affecting the global network.
A flaw was found in DPDK lib/vhost. Missing length validation before reading command_data in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash.
Maravel, a PHP framework oriented towards dependency injection, prior to version 10.74.0 has a high-severity Token Replay Vulnerability arising from a structural lifecycle mismatch between stateless token validation engines and high-performance relational caching layers. Any application with low cache memory that causes premature eviction to free up memory and applications running macropay-solutions/maravel-framework that utilize tymon/jwt-auth for API token authentication and blacklist management or any other package that does the same may be affected. This architectural risk might also impact native Laravel applications utilizing cache tags under specific volatile or eviction-capped environments. tymon/jwt-auth automatically probes for cache tag support. If found, it forcefully wraps 14-day token blacklist entries (jti) inside a relational tymon.jwt tag. In environments where the O(1) Atomic Lazy Eviction model is active — either natively inside Maravel-Framework v20.x or manually backported into v10.x via the explicit DI container singletons provided in PR #104 (App\Cache\TaggedCache and App\Cache\TagSet) — a strict global tracking ceiling (Container::TAGGED_CACHE_TTL_CAP_SECONDS) of 7,200 seconds (2 hours) is enforced to secure the system against memory index bloat. This ceiling forcefully truncates the 14-day blacklist lifespan down to a maximum of 2 hours, after which individual tracking keys naturally expire and disappear from the active cache window. Furthermore, because the optimized engine implements a generational version matrix to achieve O(1) flush speeds, any programmatic or manual invocation of a tag flush or reset (e.g., Cache::tags([...])->flush()) instantly bumps the internal atomic master version pointer. This shifts the computed cryptographic composite hash (sha1($this->tags->getNamespace())) for all overlapping components, rendering the entire existing index immediately unreachable. Consequently, through either natural 2-hour expiration or an intervening tag flush execution (like the cache naturally cleaning old values to free up memory), the invalidation state records are entirely wiped out. Because the tokens' physical cryptographic signatures remain structurally valid for up to 14 days, stolen, hijacked, or legitimately logged-out tokens are instantly and silently resurrected across the entire API gateway, leaving the application critically vulnerable to widespread Token Replay Attacks. Because this issue is caused by an upstream architectural assumption within the tymon/jwt-auth package rather than a core defect inside the framework, there is no direct framework version upgrade that can safely bypass this lifecycle collision without breaking business cache recycling bounds. Maravel version 10.74.0 introduced a way to backport the new fixed tagged cache from 20.x into 10.x by resolving TagSet and TaggedCache from DI, which is how this latent architectural lifecycle vulnerability was discovered. Users must apply the decoupled configuration workaround outlined below. As a workaround, make sure that cache memory size does not generate early natural evictions from cache to free up space, deleting blacklisted jwt ids before they expire. Applications must decouple flat authentication vectors from the relational tagging subsystem. This forces token identifiers to write directly to the primary cache keyspace as flat, un-tagged key-value pairs where they securely retain their unclipped 14-day lifecycle.
Sylius is an Open Source eCommerce Framework on Symfony. Starting in version 2.0.0 and prior to version 2.0.18, 2.1.15, and 2.2.6, the `GET /api/v2/shop/payment-requests/{hash}` and `PUT /api/v2/shop/payment-requests/{hash}` endpoints look up the payment request solely by the hash from the URL. No ownership check is performed against the authenticated customer or the underlying order. An attacker who obtains a payment request hash can read the payment request and, through the `payment` IRI in the response, recover the underlying order's `tokenValue` (which itself grants access to the full order, items, addresses, customer email, totals); and/or update the payment request payload (e.g. `target_path`, `after_path`). These fields are used by the front-end controller to redirect the user after the payment, so an attacker can flip them to an attacker-controlled URL and intercept the buyer. The hash is a UUID, so it has to be obtained out-of-band (logs, shared links, referrer headers, a co-located client), but once it is known no other credential is required, neither authentication nor knowledge of the order token. The creation endpoint `POST /api/v2/shop/orders/{tokenValue}/payment-requests` shares the same flaw: it resolves the target order solely from the `tokenValue` in the URL without verifying that the caller owns the order. The issue is fixed in versions 2.0.18, 2.1.15, and 2.2.6. As a workaround, add a query extension that filters the `GET` operation; decorate the `PUT` state provider, guard the `POST` creation endpoint with a command-bus middleware, and wire the services.
Sylius is an Open Source eCommerce Framework on Symfony. Starting in version 2.0.0 and prior to version 2.0.18, 2.1.15, and 2.2.6, an authorization bypass vulnerability exists in the shop account API. The `PATCH /api/v2/shop/account/orders/{tokenValue}/payments/{paymentId}` endpoint, used by an authenticated shop customer to change the payment method of an order that has been placed but not yet paid (state `STATE_NEW`), does not validate that the chosen payment method is enabled for the order's channel. The equivalent checkout endpoint (`PATCH /api/v2/shop/orders/{tokenValue}/payments/{paymentId}`) correctly rejects out-of-channel payment methods with `HTTP 422`; the account endpoint silently accepts them and returns `HTTP 200`. An authenticated customer can therefore assign any globally enabled payment method to their own placed order, including methods that the store operator has explicitly excluded from that channel. The issue is fixed in versions: 2.0.18, 2.1.15, 2.2.6 and above. As a workaround, decorate the `Sylius\Bundle\ApiBundle\Changer\PaymentMethodChangerInterface` service in the application.
Sylius is an Open Source eCommerce Framework on Symfony. Versions 2.0.0 through 2.0.17, 2.1.0 through 2.1.14, and 2.2.0 through 2.2.5 contain an improper workflow enforcement vulnerability in the cart `FormComponent`. When an order is completed while its cart page remains open, the stale LiveComponent does not detect the order’s changed state and continues to permit cart actions, allowing an authenticated customer to modify or permanently delete an already completed order. Versions 2.0.18, 2.1.15, and 2.2.6 contain a patch. As a workaround, deployments can copy the patched `FormComponent` into the application's `src/` directory and override the `sylius_shop.twig.component.cart.form` service definition to use that class.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.