MSD Ukraine A.I CyberSecurity Scoring
10/03/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for MSD Ukraine in 2026.
No incidents recorded for MSD Ukraine in 2026.
No incidents recorded for MSD Ukraine in 2026.
Aurobindo Pharma Limited (NSE: AUROPHARMA, BSE: 524804, Reuters: ARBN.NS, Bloomberg: ARBP IN) is an integrated global pharmaceutical company headquartered in Hyderabad, India. The Company develops, manufactures, and markets a wide range of generic pharmaceuticals, branded specialty drugs, and active pharmaceutical ingredients (APIs) across more than 150 countries. It is ranked among the top 10 generic companies in eight European nations and holds the distinction of being the largest generic pharmaceutical company in the United States. With over 30 state-of-the-art manufacturing and packaging facilities approved by leading global regulatory authorities including USFDA, UK MHRA, EDQM, Japan PMDA, WHO, Health Canada, South Africa MCC, and Brazil ANVISA, Aurobindo Pharma ensures the highest standards of quality. Its robust portfolio spans eight major therapeutic areas: Central Nervous System (CNS), Antiretroviral (ARV), Cardiovascular (CVS), Antibiotics, Gastroenterology, Anti-diabetics, Oncology, and Dermatology, supported by a strong R&D infrastructure that drives innovation, affordability, and accessibility.
Founded to serve health 70 years ago, Servier is a global pharmaceutical group governed by a non-profit Foundation that aspires to make a meaningful social impact for patients and for a sustainable world. The Group’s unique governance model preserves its independence and means it can fully serve its vocation of being committed to therapeutic progress to serve patient needs while adopting a long-term vision. Its employees are fully committed to this shared vocation, which serves as a source of inspiration every day. A world leader in cardiometabolism and venous diseases, Servier has made a major shift into oncology, which represents a new pillar of strategic growth. The Group devotes close to 70% of its R&D budget to this field, with the ambition of becoming a focused and innovative player in the development of treatments targeting rare cancers. Neurology will constitute a future growth driver. Servier is focusing on a limited number of diseases in this area where accurate patient profiling makes it possible to offer a targeted therapeutic response through precision medicine. To promote widespread access to quality care at a lower cost, the Group also offers a range of quality generic drugs covering most pathologies, leveraging well-known brands in France, and Eastern Europe. In all these areas, the Group takes patient considerations into account at every stage of the medicine life cycle. Headquartered in France, Servier relies on committed teams and strong geographical footprint; its medicines are available in close to 140 countries. In 2023/2024, the Group achieved sales revenue of €5.9 billion and EBITDA of €1.3 billion in 2024 (22.2%). Today, the Group employs over 22,000 people worldwide. -- To report a suspected adverse event with a Servier drug, please visit servier.com
Sun Pharma is the world's fourth-largest speciality generic pharmaceutical company and No. 1 in India. We provide high-quality, affordable medicines trusted by customers and patients in over 100 countries. Sun Pharma's global presence is supported by more than 40 manufacturing facilities spread across 5 continents, R&D centres across the globe, and a multicultural workforce comprising over 50 nationalities. Sun Pharma fosters excellence through innovation supported by strong R&D capabilities comprising around 3,000 scientists and R&D investments of over 6-8% of annual revenues. At Sun, our people are our greatest asset. Ours has never been a story of individual brilliance but of cultivating a culture of realising collective potential. In our journey, everyone is enabled to take charge in an environment that offers limitless growth opportunities. We are with you every step of the way, so you can shine for years to come. With the launch of our Employee Value Proposition (EVP), we define our promise to ‘Create Your Own Sunshine'—driven by the three pillars of Better Every Day, Take Charge, and Thrive Together. These pillars drive progress at Sun so that people can achieve what they would have thought impossible. Learn more about our EVP here: https://sunpharma.com/careers/
A vertically integrated, Global Pharmaceutical Company. Established in 1989, we are engaged in developing, manufacturing, and marketing a wide range of formulations across several major therapeutic areas including anti-infectives, cardiovascular, anti-diabetic, dermatology, and hormone treatment. We develop, manufacture, and globally distribute a broad range of pharmaceutical products across therapies in multiple dosage forms such as solid orals, liquid orals, topical formulations, injectables (Dry Powder) metered dose inhalers and dry powder inhalers. Our Vision To be a leading global pharmaceutical company by providing high quality, affordable and innovative therapeutic solutions for patients with diverse medical needs. Our Mission To contribute towards improving patients’ quality of life across the globe, by providing effective and accessible medicines.
The Zydus Group with an overarching purpose of empowering people with freedom to live healthier and more fulfilled lives, is an innovative, global life-sciences company that discovers, develops, manufactures, and markets a broad range of healthcare therapies. The group employs over 27000 people worldwide and is driven by its mission to unlock new possibilities in life-sciences through quality healthcare solutions that impact lives. The group aspires to transform lives through pathbreaking discoveries.
Torrent Pharma, with annual revenues of more than Rs 10,700 crores, is the flagship Company of the Torrent Group, with group revenues of Rs 41,000 crores. It is ranked 5th in the Indian Pharma Market and is among the Top 5 in the therapeutic segments of Cardiovascular (CV), Central Nervous System (CNS), Gastro-intestinal (GI), Vitamins Minerals Nutritionals (VMN) and Cosmo-Dermatology. The Company also has significant presence in diabetology, pain management, gynaecology, oncology and anti-infective segments. Torrent has 8 manufacturing facilities , of which 5 are USFDA approved. With R&D as the backbone for its growth in domestic & overseas market, it has invested significantly in R&D capabilities with state-of-the-art R&D infrastructure employing around 800 scientists. The acquisition of Elder Pharma's Indian branded business in 2013, Dermaceuticals business of Zyg Pharma in 2015, API plant of Glochem Industries in 2016, Women healthcare brands from Novartis and Unichem's Indian branded business along with its Sikkim Plant in 2017 strengthened Torrent Pharma's position in the Indian Pharma market. Torrent Pharma started international acquisitions in 2005 with entry into the German market. Today, the Company has presence in more than 50 countries and is ranked No. 1 among the Indian pharma Companies in Brazil and Germany. Torrent Pharma is committed towards “not just healthcare but lifecare.”
We are an R&D driven, AI-powered biopharma company committed to improving people’s lives and delivering compelling growth. We apply our deep understanding of the immune system to invent medicines and vaccines that treat and protect millions of people around the world, with an innovative pipeline that could benefit millions more. Our team is guided by one purpose: we chase the miracles of science to improve people’s lives; this inspires us to drive progress and deliver positive impact for our people and the communities we serve, by addressing the most urgent healthcare, environmental, and societal challenges of our time. Interactions with this account must comply with the Terms: https://bit.ly/sanofi-terms
Lupin Limited is a global pharmaceutical leader headquartered in Mumbai, India, with products distributed in over 100 markets. Lupin specializes in pharmaceutical products, including branded and generic formulations, complex generics, biotechnology products, and active pharmaceutical ingredients. Trusted by healthcare professionals and consumers globally, the company enjoys a strong position in India and the U.S. across multiple therapy areas, including respiratory, cardiovascular, anti-diabetic, anti-infective, gastrointestinal, central nervous system, and women’s health. Lupin has 15 state-of-the-art manufacturing sites and 7 research centers globally, along with a dedicated workforce of over 23,000 professionals. Lupin is committed to improving patient health outcomes through its subsidiaries – Lupin Diagnostics, Lupin Digital Health, and Lupin Manufacturing Solutions.
At Merck, known as MSD outside of the United States and Canada, we are unified around our purpose: We use the power of leading-edge science to save and improve lives around the world. For more than 130 years, we have brought hope to humanity through the development of important medicines and vaccines. We aspire to be the premier research-intensive biopharmaceutical company in the world – and today, we are at the forefront of research to deliver innovative health solutions that advance the prevention and treatment of diseases in people and animals. We foster a diverse and inclusive global workforce and operate responsibly every day to enable a safe, sustainable and healthy future for all people and communities. For more information, visit www.merck.com. This site is intended for residents of the United States and Canada and their territories only. FLS: http://merck.us/3TKXNuZ
Latest updates, reports, and threat intel affecting the global network.
When Merck first confirmed a cyberattack hit the company back in June 2017, it was impossible to know the extent of the damage or what would...
Merck & Co. was one of the victims of a worldwide ransomware cyberattack yesterday. Believed to be part of the “Petyka” cyberattack, it began in Ukraine.
Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-grpc grpc (GRPC.Compressor.Gzip, GRPC.Message modules) allows a denial of service via a gzip decompression bomb. This vulnerability is associated with program files lib/grpc/compressor/gzip.ex, lib/grpc/message.ex and program routines 'Elixir.GRPC.Compressor.Gzip':decompress/1, 'Elixir.GRPC.Message':from_data/2. 'Elixir.GRPC.Compressor.Gzip':decompress/1 calls :zlib.gunzip/1 directly on attacker-controlled bytes with no decompressed-size limit, ratio check, or incremental decoding. Because this module is the registered gzip GRPC.Compressor implementation, it is invoked automatically whenever an incoming gRPC frame carries the grpc-encoding: gzip header. :zlib.gunzip/1 allocates the entire decompressed result as a single binary, so a small highly compressible payload (for example a few kilobytes of zeros, which gzip compresses at roughly 1000:1) expands to multiple gigabytes inside a single call. The max_receive_message_length limit is enforced only against the already-decompressed message, so it provides no protection. An unauthenticated remote peer can send a single crafted frame to exhaust the BEAM node's heap and trigger an out-of-memory kill. This issue affects grpc: from 0.4.0 before 1.0.0.
Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc allows unauthenticated attackers to exhaust the BEAM's memory and crash the server by streaming a large or slow-trickle unary request body. 'Elixir.GRPC.Server.Adapters.Cowboy.Handler':read_full_body/3 (lib/grpc/server/adapters/cowboy/handler.ex) accumulates every received chunk into a single growing binary with no size cap. Additionally, when the client omits the grpc-timeout header, the per-chunk read timeout resolves to :infinity, allowing a slow-trickle client to keep the connection alive indefinitely while memory grows. A single connection is sufficient to exhaust server memory and crash the node. This issue affects grpc from 0.3.1 before 1.0.0.
Deserialization of Untrusted Data and Allocation of Resources Without Limits or Throttling vulnerabilities in elixir-grpc grpc allow unauthenticated attackers to crash the BEAM node via atom table exhaustion and, when a decoded term flows into a call site that invokes it, achieve remote code execution on the server. 'Elixir.GRPC.Codec.Erlpack':decode/2 (lib/grpc/codec/erlpack.ex) calls :erlang.binary_to_term/1 on the raw gRPC message body without the :safe option, no size bound, and no type guard. Any unauthenticated peer that sends a request with Content-Type: application/grpc+erlpack can send a crafted payload that mints arbitrary new atoms (which are never garbage-collected, exhausting the bounded atom table and crashing the VM) or that encodes a fun term which, if applied anywhere downstream, executes attacker-controlled code inside the server process. This issue affects grpc from 0.4.0 before 1.0.0.
The browserstack-cypress-cli is BrowserStack's CLI which allows users to run Cypress tests on BrowserStack. Versions prior to 1.36.4 are vulnerable to OS command injection via the cypress_config_file configuration parameter. In readCypressConfigUtil.js, the loadJsFile() function constructs a shell command by interpolating the user-controlled cypress_config_filepath value into a template literal, then executes it via child_process.execSync(). Shell metacharacters in the config path (specifically " and ;) allow breaking out of the quoted argument and injecting arbitrary commands. This issue has been fixed in version 1.36.6.
Authorization Bypass Through User-Controlled Key vulnerability in elixir-grpc grpc allows authenticated attackers to access or modify resources belonging to other users by smuggling a conflicting value for any path-bound field via the query string or request body. In 'Elixir.GRPC.Server.Transcode':map_request/5 (lib/grpc/server/transcode.ex), all three clauses use Map.merge/2 with path bindings as the first argument, giving them the lowest merge precedence. A request such as GET /users/me/profile?user_id=victim (or a POST with {"user_id": "victim"} when body: "*") yields a decoded protobuf struct where the path-bound field carries the attacker-supplied value rather than the router-extracted value. Any handler that uses the path-bound field for authorization, multi-tenancy scoping, or ownership checks is silently bypassed. This issue affects grpc from 0.8.0 before 1.0.0.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.