IPP A.I CyberSecurity Scoring
10/03/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for Irving Pulp & Paper in 2026.
No incidents recorded for Irving Pulp & Paper in 2026.
No incidents recorded for Irving Pulp & Paper in 2026.
Latest updates, reports, and threat intel affecting the global network.
New Brunswick will invest up to $54.3M over three years, including $15M yearly for Irving Paper, to boost competitiveness and protect 183...
Employees working at the chip plant at Irving's sawmill near Sussex, N.B., were notified last week their jobs are moving to Saint John.
Employees working at the chip plant at J.D. Irving, Ltd.'s (JDI) sawmill outside of Sussex, N.B. were notified last week that the company is...
After serving Irving Tissue for nearly six years as a process engineer in Toronto, Caroline Forbes has been promoted to operations leader...
Large industrial companies in New Brunswick are making a push to exit the N.B. Power grid and generate their own renewable electricity in a...
B&W Canada has been awarded a more than $10 million contract by Irving Pulp & Paper Limited to install boiler equipment.
Irving Pulp & Paper has awarded a contract worth more than US$10 million to Babcock & Wilcox (B&W) Canada to install equipment as part of a...
The Canada Infrastructure Bank (CIB) recently reached financial close on a $660-million loan to Irving Pulp & Paper to support the...
The Canada Infrastructure Bank (CIB) has reached financial close on a $660 million loan to Irving Pulp & Paper to support the large-scale...
A flaw has been found in OpenClaw up to 2026.9.5. Affected is the function createCanvasHostHandler of the file extensions/canvas/src/host/server.ts of the component Canvas Host Route. Executing a manipulation can lead to denial of service. The attack can be launched remotely. The exploit has been published and may be used. Fix suggestion's "streaming/size-limit" was never shipped - latest 2026.9.5 still buffers the whole file via readFile() (src/canvas/serve.runtime.ts:17,114), unlike the sibling WS path which caps at 64KB. The vendor was contacted early about this disclosure.
A security vulnerability has been detected in DLR-RM stable-baselines3 up to 2.9.0. This affects the function PPO.load/load_replay_buffer/VecNormalize.load of the file save_util.py. Such manipulation leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. In v2.9.0 the PyTorch tensor load path is hardened (weights_only=True), but that hardening was later reverted on master via PR #1913 "Hotfix: revert loading with weights_only=True" [blocked] to fix PyTorch 1.13 compat - so even the one "safe" path is inconsistent across versions. #2281 was closed as a duplicate of #1831 since both are unsafe pickle deserialization - but #1831's fix (PR #41) only gated the Hugging Face Hub loader in the separate huggingface_sb3 package. This finding covers the core stable_baselines3 load APIs (PPO.load, load_replay_buffer, VecNormalize.load), which have no safe mode or gate and remained exploitable in v2.9.0 until the outstanding hardening (PR #2264) ships.
A vulnerability was detected in dmlc dgl up to 2.1.0. This impacts the function load_info/_read_torch_data of the file utils.py. Performing a manipulation of the argument path results in deserialization. The attack can be initiated remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
A weakness has been identified in piskvorky gensim up to 4.4.0. The impacted element is the function Load of the file gensim/utils.py of the component Model Loader. This manipulation of the argument fname causes deserialization. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. Maintainer closed #3663 same-day with no comment, PR, or fix; repo's last push (2025-11-01) predates the report, so the unsafe pickle.load in SaveLoad.load remains unguarded at develop HEAD.
A security flaw has been discovered in JusticeRage Manalyze 1.0.0. The affected element is the function PE::_parse_debug of the file manape/pe.cpp of the component PE Parser. The manipulation of the argument misc.Length results in integer underflow. The attack may be performed from remote. The patch is identified as 3e299685759f4f767088871de58c5d07f98ee382. A patch should be applied to remediate this issue.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.