Nomeco A.I CyberSecurity Scoring
03/12/2025
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for Nomeco in 2026.
No incidents recorded for Nomeco in 2026.
No incidents recorded for Nomeco in 2026.
Transportation, Logistics, Supply Chain and Storage
Yusen Logistics is the insight-driven, customer-centric logistics partner to global business. We deliver this through an extended range of services from International Freight Forwarding and Contract Logistics to Supply Chain Solutions and Industry insights covering the full supply chain. We invest in a deep understanding of our customers' business, their customers, the challenges they face and the goals they want to achieve. Yusen Logistics has a global network linking Japan, the Americas, Europe, East Asia and South Asia & Oceania, and operates more than 650 distribution centers/offices in 46 countries and over 25.000 employees. Designing and implementing award winning solutions to complex supply chain requirements, Yusen Logistics’ skilled teams, state-of-the-art equipment and sophisticated technology deliver cost effective results with added value. Yusen Logistics delivers high performance solutions from raw materials to finished products throughout the supply chain. Working with manufacturers and retailers Yusen Logistics offers specialist expertise in: • Automotive • Aerospace • Consumer Electronics & Technology • Healthcare & Pharmaceuticals • Retail • Food Logistics Yusen Logistics works closely with customers to create enhanced solutions with the design, planning, and execution of key services including: • Global Freight Forwarding • Transportation Management • Warehousing and Distribution • End to end Supply Chains With regional headquarters in Europe, Japan, East Asia, Oceania and the Americas, Yusen Logistics’ international network covers almost every country in the world. Building on its established infrastructure Yusen Logistics is rolling out networks in emerging markets to mirror clients’ changing sourcing patterns. INSIGHT INTO ACTION. YUSEN LOGISTICS
C.H. Robinson is the global leader in Lean AI supply chains. For more than a century, companies everywhere have looked to us to reimagine how goods move. Now, as we redefine what’s next for the industry, that same drive fuels our commitment to Building Tomorrow’s Supply Chains, Today™. Trusted by 83,000 customers and 450,000 contract carriers, we manage an unmatched 37 million shipments annually, representing $23 billion in freight. We deliver tailored solutions across the world via truckload, less-than-truckload, ocean, air, and more. With our unique combination of human insight and Lean AI working as one, supply chains move faster, smarter, and more sustainably. As a responsible global citizen, we proudly contribute millions to the causes that matter most to our employees. For more information visit www.chrobinson.com. (Nasdaq: CHRW)
UPS Supply Chain Solutions offers a comprehensive portfolio of services to enhance customers' business performance, including logistics and distribution, transportation and freight, consulting, customs brokerage, and international trade services. UPS provides the expertise and the scale to meet the total supply chain needs of customers worldwide, whether it requires the movement of goods, information or funds.
Penske Truck Leasing is a Penske Transportation Solutions company headquartered in Reading, Pennsylvania. A leading provider of innovative transportation solutions, Penske operates and maintains nearly 400,000 vehicles and serves its customers from approximately 1,000 maintenance facilities and more than 1,900 truck rental locations across North America. Solutions from Penske include full-service truck leasing, fleet maintenance, truck rentals, used trucks, and a comprehensive array of technologies to keep the world moving forward. Penske Truck Leasing Co., L.P. is a partnership of Penske Corporation, Penske Automotive Group and Mitsui & Co., Ltd.
As the world’s largest contract logistics specialist, we create competitive advantage for customers through customized logistics solutions based on globally standardized warehousing, transportation and integrated services components. We bring sector expertise, global scale and local knowledge to design and manage supply chains from raw materials and manufacturing to finished goods delivery and return services.
Blue Dart Express Ltd., South Asia's premier express air, integrated transportation & distribution company, offers secure and reliable delivery of consignments to over 56,000+ locations in India. Blue Dart is a provider of choice for its stakeholders due to its customer centric approach and aims to further strengthen this partnership. As part of DHL Group’s DHL eCommerce division, Blue Dart accesses the largest and most comprehensive express and logistics network worldwide, covering over 220 countries and territories, and offers an entire spectrum of distribution services including air express, freight forwarding, supply chain solutions, customs clearance etc. The Blue Dart team drives market leadership through its motivated people, dedicated air and ground capacity, cutting-edge technology, wide range of innovative, vertical specific products and value-added services to deliver unmatched standards of service quality to its customers. Blue Dart's market leadership is further validated by its position as the nation’s most innovative and awarded express logistics company for exhibiting reliability, superior brand experience and sustainability which include recognition as one of ‘India's Best Companies to Work For’ by The Great Place to Work® Institute, India, ranked amongst ‘Best Multinational Workplaces in Asia’ by The Great Place to Work® Institute, Asia, voted a ‘Superbrand’ and ‘Reader’s Digest Most Trusted Brand’, listed as one of Fortune 500’s ‘India's Largest Corporations’ and Forbes ‘India's Super 50 Companies’ to name a few. Blue Dart’s Diversity and Inclusion initiatives have also led to it being recognized as one of India’s ‘Best Workplaces for Women’ in 2021 and ‘Best Organizations for Women’ in 2022 by the Economic Times. Blue Dart fulfils its social responsibility of climate protection (GoGreen), disaster management (GoHelp) and education (GoTeach) through its GoPrograms.
CEVA provides world-class supply chain solutions for large and medium-size national and multinational companies across the globe. As an industry leader, CEVA offers customers complete supply chain design and implementation in contract logistics and freight management, alone or in combination. Together with CMA CGM, a leading worldwide shipping group and CEVA’s strategic partner, we are able to offer our customers end-to-end logistics solutions. CEVA’s integrated global network has over 1,000 facilities in more than 170 countries and 98,000 employees; all dedicated to delivering consistently excellent operations and supply chain solutions.
Amazon Delivery Service Partner Programm Wir suchen praxisorientierte Unternehmer, die mit Leidenschaft großartige Teams aufbauen und entwickeln. Mit niedrigen Anlaufkosten, einer hohen Nachfrage, dem Zugang zu Technologien und dem umfassenden Logistik-Know-how von Amazon ist dies die Gelegenheit, ein erfolgreiches Lieferunternehmen zu gründen und aufzubauen. Werden Sie zum Amazon Delivery Service Partner in einer der am schnellsten wachsenden Branchen der Welt.
Penske Logistics is a Penske Transportation Solutions company headquartered in Reading, Pennsylvania. The company is a leading provider of innovative supply chain and logistics solutions. Penske offers solutions including dedicated transportation, distribution center management, 4PL and lead logistics, transportation management, freight brokerage, and a comprehensive array of technologies to keep the world moving forward. We serve a variety of industries including: automotive; food, beverage, grocery, wine and spirits; cold chain; convenience and drug stores; quick service restaurants (QSRs); retail; big box retailers; building and construction products; CPG; healthcare; energy; industrial manufacturing; consumer appliances and consumer electronics; and many others. Visit PenskeLogistics.com to learn more.
Latest updates, reports, and threat intel affecting the global network.
Healthcare logistics specialist Nomeco, a PHOENIX company, continues its transformation by partnering with Capgemini on an end-to-end SAP S/4HANA...
Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-grpc grpc (GRPC.Compressor.Gzip, GRPC.Message modules) allows a denial of service via a gzip decompression bomb. This vulnerability is associated with program files lib/grpc/compressor/gzip.ex, lib/grpc/message.ex and program routines 'Elixir.GRPC.Compressor.Gzip':decompress/1, 'Elixir.GRPC.Message':from_data/2. 'Elixir.GRPC.Compressor.Gzip':decompress/1 calls :zlib.gunzip/1 directly on attacker-controlled bytes with no decompressed-size limit, ratio check, or incremental decoding. Because this module is the registered gzip GRPC.Compressor implementation, it is invoked automatically whenever an incoming gRPC frame carries the grpc-encoding: gzip header. :zlib.gunzip/1 allocates the entire decompressed result as a single binary, so a small highly compressible payload (for example a few kilobytes of zeros, which gzip compresses at roughly 1000:1) expands to multiple gigabytes inside a single call. The max_receive_message_length limit is enforced only against the already-decompressed message, so it provides no protection. An unauthenticated remote peer can send a single crafted frame to exhaust the BEAM node's heap and trigger an out-of-memory kill. This issue affects grpc: from 0.4.0 before 1.0.0.
Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc allows unauthenticated attackers to exhaust the BEAM's memory and crash the server by streaming a large or slow-trickle unary request body. 'Elixir.GRPC.Server.Adapters.Cowboy.Handler':read_full_body/3 (lib/grpc/server/adapters/cowboy/handler.ex) accumulates every received chunk into a single growing binary with no size cap. Additionally, when the client omits the grpc-timeout header, the per-chunk read timeout resolves to :infinity, allowing a slow-trickle client to keep the connection alive indefinitely while memory grows. A single connection is sufficient to exhaust server memory and crash the node. This issue affects grpc from 0.3.1 before 1.0.0.
Deserialization of Untrusted Data and Allocation of Resources Without Limits or Throttling vulnerabilities in elixir-grpc grpc allow unauthenticated attackers to crash the BEAM node via atom table exhaustion and, when a decoded term flows into a call site that invokes it, achieve remote code execution on the server. 'Elixir.GRPC.Codec.Erlpack':decode/2 (lib/grpc/codec/erlpack.ex) calls :erlang.binary_to_term/1 on the raw gRPC message body without the :safe option, no size bound, and no type guard. Any unauthenticated peer that sends a request with Content-Type: application/grpc+erlpack can send a crafted payload that mints arbitrary new atoms (which are never garbage-collected, exhausting the bounded atom table and crashing the VM) or that encodes a fun term which, if applied anywhere downstream, executes attacker-controlled code inside the server process. This issue affects grpc from 0.4.0 before 1.0.0.
The browserstack-cypress-cli is BrowserStack's CLI which allows users to run Cypress tests on BrowserStack. Versions prior to 1.36.4 are vulnerable to OS command injection via the cypress_config_file configuration parameter. In readCypressConfigUtil.js, the loadJsFile() function constructs a shell command by interpolating the user-controlled cypress_config_filepath value into a template literal, then executes it via child_process.execSync(). Shell metacharacters in the config path (specifically " and ;) allow breaking out of the quoted argument and injecting arbitrary commands. This issue has been fixed in version 1.36.6.
Authorization Bypass Through User-Controlled Key vulnerability in elixir-grpc grpc allows authenticated attackers to access or modify resources belonging to other users by smuggling a conflicting value for any path-bound field via the query string or request body. In 'Elixir.GRPC.Server.Transcode':map_request/5 (lib/grpc/server/transcode.ex), all three clauses use Map.merge/2 with path bindings as the first argument, giving them the lowest merge precedence. A request such as GET /users/me/profile?user_id=victim (or a POST with {"user_id": "victim"} when body: "*") yields a decoded protobuf struct where the path-bound field carries the attacker-supplied value rather than the router-extracted value. Any handler that uses the path-bound field for authorization, multi-tenancy scoping, or ownership checks is silently bypassed. This issue affects grpc from 0.8.0 before 1.0.0.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.