Mobil 1 A.I CyberSecurity Scoring
15/12/2025
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for Mobil 1 in 2026.
No incidents recorded for Mobil 1 in 2026.
No incidents recorded for Mobil 1 in 2026.
Valeo is a technology company and partner to all automakers and new mobility players worldwide. Valeo innovates to make mobility safer, smarter and more sustainable. Valeo enjoys technological and industrial leadership in electrification, driving assistance systems, reinvention of the interior experience and lighting everywhere. These four areas, vital to the transformation of mobility, are the Group's growth drivers. Valeo in figures: 21.5 billion euros in sales in 2024 | 106,100 employees, 28 countries, 155 plants, 64 research and development centers and 19 distribution platforms at February 28, 2025. Valeo is listed on the Paris Stock Exchange -- Valeo, entreprise technologique, partenaire de tous les constructeurs automobiles et des nouveaux acteurs de la mobilité, œuvre pour une mobilité plus propre, plus sûre et plus intelligente, grâce à ses innovations. Valeo dispose d’un leadership technologique et industriel dans l’électrification, les aides à la conduite, la réinvention de la vie à bord et l'éclairage à l’intérieur et à l’extérieur du véhicule. Ces quatre domaines, essentiels à la transformation de la mobilité, sont les vecteurs de croissance du Groupe. Valeo en chiffres: 21.5 milliards d'euros de chiffre d'affaires en 2024 | 106 100 employés, 28 pays, 155 sites de production, 64 centres de recherche et développement et 19 plateformes de distribution au 28 février 2025. Valeo est cotée à la Bourse de Paris.
ZF is a global technology company supplying advanced mobility products and systems for passenger cars, commercial vehicles and industrial technology. Its comprehensive product range is primarily aimed at vehicle manufacturers, mobility providers and start-up companies in the fields of transportation and mobility. ZF electrifies a wide range of vehicle types. With its products, the company contributes to reducing emissions, protecting the climate as well as enhancing safe mobility. Alongside the automotive sector – passenger cars and commercial vehicles – ZF also serves market segments such as construction and agricultural machinery, wind power, marine propulsion, rail drives and test systems. With some 161,600 employees worldwide, ZF reported sales of €41.4 billion in fiscal year 2024. The company operates 161 production locations in 30 countries. For further press information and photos please visit: www.zf.com Imprint: https://www.zf.com/site/meta/en/imprint.html Data Protection: https://www.zf.com/master/media/en/corporate/m_zf_com/meta/data_protection_social_media/Data_Protection_Notice_Social_Media_EN.pdf
MRF Limited, is a stalwart in the global tyre industry. Established in 1946, MRF has grown into one of the largest and most respected tyre manufacturers, renowned for its commitment to quality, innovation, and customer satisfaction. The company boasts a diverse range of high-quality tyres catering to various vehicles, including passenger cars, two-wheelers, commercial, agricultural and defence vehicles. Known for its cutting-edge research and development, MRF has consistently introduced innovative tyre technologies that enhance performance, safety, and fuel efficiency. MRF is not only the number 1 tyre manufacturer in the Indian market, but has also earned a formidable reputation globally, with its products exported to over 90 countries.
Autoliv, Inc. is the worldwide leader in automotive safety systems. We develop, manufacture and market protective systems, such as airbags, seatbelts, steering wheels and pedestrian protection systems for all major automotive manufacturers in the world. Our products save 37,000 lives and prevent 450,000 injuries each year. Our ~65,000 employees in 25 countries are passionate about our vision of Saving More Lives and quality is at the heart of everything we do. We have 13 technical centers, with 20 test tracks. In the world of automotive occupant safety, we were the first to introduce the two- and three-point seat belt system and airbags for front and side impacts. We were also the first to launch pyrotechnic belt pretensioners and pedestrian protection systems. Autoliv, Inc. is a publicly traded Delaware U.S. corporation with its headquarters in Stockholm, Sweden. The shares are listed on the New York Stock Exchange (NYSE: ALV) and the Swedish Depository Receipts on Nasdaq Stockholm (ALIV sdb). For more information go to www.autoliv.com.
Latest updates, reports, and threat intel affecting the global network.
The sport's fastest cars now depend on secure, global connectivity to make race-winning decisions in real time.
A critical vulnerability that affects Samsung mobile devices was exploited in the wild to distribute LANDFALL spyware.
The best Android antivirus apps will help keep your mobile device safe - especially as Android malware and scams are on the rise.
Israel wouldn't have earned its reputation as the Startup Nation if some of its companies hadn't earned big bucks for their investors.
Cybercrime is like high blood pressure. Until the damage occurs, nothing can be felt. But a hacked website or identity theft are more than...
T-Mobile agreed to a $350 million settlement to compensate affected customers and cover legal fees associated with the class action lawsuit.
Major IoT conferences in 2025 cover the latest news and developments on IoT platforms, systems design, integration, applications, security, AI and emerging...
As mobile phones become more integral assets to interacting with the world and services, Cyber Magazine examines the top 10 that can offer...
US telecoms giant T-Mobile has confirmed that it was also among the companies that were targeted by Chinese threat actors to gain access to valuable...
Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-grpc grpc (GRPC.Compressor.Gzip, GRPC.Message modules) allows a denial of service via a gzip decompression bomb. This vulnerability is associated with program files lib/grpc/compressor/gzip.ex, lib/grpc/message.ex and program routines 'Elixir.GRPC.Compressor.Gzip':decompress/1, 'Elixir.GRPC.Message':from_data/2. 'Elixir.GRPC.Compressor.Gzip':decompress/1 calls :zlib.gunzip/1 directly on attacker-controlled bytes with no decompressed-size limit, ratio check, or incremental decoding. Because this module is the registered gzip GRPC.Compressor implementation, it is invoked automatically whenever an incoming gRPC frame carries the grpc-encoding: gzip header. :zlib.gunzip/1 allocates the entire decompressed result as a single binary, so a small highly compressible payload (for example a few kilobytes of zeros, which gzip compresses at roughly 1000:1) expands to multiple gigabytes inside a single call. The max_receive_message_length limit is enforced only against the already-decompressed message, so it provides no protection. An unauthenticated remote peer can send a single crafted frame to exhaust the BEAM node's heap and trigger an out-of-memory kill. This issue affects grpc: from 0.4.0 before 1.0.0.
Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc allows unauthenticated attackers to exhaust the BEAM's memory and crash the server by streaming a large or slow-trickle unary request body. 'Elixir.GRPC.Server.Adapters.Cowboy.Handler':read_full_body/3 (lib/grpc/server/adapters/cowboy/handler.ex) accumulates every received chunk into a single growing binary with no size cap. Additionally, when the client omits the grpc-timeout header, the per-chunk read timeout resolves to :infinity, allowing a slow-trickle client to keep the connection alive indefinitely while memory grows. A single connection is sufficient to exhaust server memory and crash the node. This issue affects grpc from 0.3.1 before 1.0.0.
Deserialization of Untrusted Data and Allocation of Resources Without Limits or Throttling vulnerabilities in elixir-grpc grpc allow unauthenticated attackers to crash the BEAM node via atom table exhaustion and, when a decoded term flows into a call site that invokes it, achieve remote code execution on the server. 'Elixir.GRPC.Codec.Erlpack':decode/2 (lib/grpc/codec/erlpack.ex) calls :erlang.binary_to_term/1 on the raw gRPC message body without the :safe option, no size bound, and no type guard. Any unauthenticated peer that sends a request with Content-Type: application/grpc+erlpack can send a crafted payload that mints arbitrary new atoms (which are never garbage-collected, exhausting the bounded atom table and crashing the VM) or that encodes a fun term which, if applied anywhere downstream, executes attacker-controlled code inside the server process. This issue affects grpc from 0.4.0 before 1.0.0.
The browserstack-cypress-cli is BrowserStack's CLI which allows users to run Cypress tests on BrowserStack. Versions prior to 1.36.4 are vulnerable to OS command injection via the cypress_config_file configuration parameter. In readCypressConfigUtil.js, the loadJsFile() function constructs a shell command by interpolating the user-controlled cypress_config_filepath value into a template literal, then executes it via child_process.execSync(). Shell metacharacters in the config path (specifically " and ;) allow breaking out of the quoted argument and injecting arbitrary commands. This issue has been fixed in version 1.36.6.
Authorization Bypass Through User-Controlled Key vulnerability in elixir-grpc grpc allows authenticated attackers to access or modify resources belonging to other users by smuggling a conflicting value for any path-bound field via the query string or request body. In 'Elixir.GRPC.Server.Transcode':map_request/5 (lib/grpc/server/transcode.ex), all three clauses use Map.merge/2 with path bindings as the first argument, giving them the lowest merge precedence. A request such as GET /users/me/profile?user_id=victim (or a POST with {"user_id": "victim"} when body: "*") yields a decoded protobuf struct where the path-bound field carries the attacker-supplied value rather than the router-extracted value. Any handler that uses the path-bound field for authorization, multi-tenancy scoping, or ownership checks is silently bypassed. This issue affects grpc from 0.8.0 before 1.0.0.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.