Nordex Group A.I CyberSecurity Scoring
03/06/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for Nordex Group in 2026.
No incidents recorded for Nordex Group in 2026.
No incidents recorded for Nordex Group in 2026.
Vestas is the energy industry’s global partner on sustainable energy solutions. We design, manufacture, install, and service wind turbines across the globe, and with +200 GW of wind turbines in 88 countries, we have installed more wind power than anyone else. Through our industry-leading smart data capabilities and +160 GW of wind turbines under service, we use data to interpret, forecast, and exploit wind resources and deliver best-in-class wind power solutions. Together with our customers, Vestas’ more than 35,000 employees are bringing the world sustainable energy solutions to power a bright future.
Latest updates, reports, and threat intel affecting the global network.
EQS-News: Nordex SE / Key word: Incoming Orders The Nordex Group secures a new order for 120 MW in Türkiye 02.04.2026 / 09:00 CET/CEST The...
EQS-News: Nordex SE / Key word: Incoming Orders Nordex Group receives order for 28 MW in Saxony-Anhalt, Germany 26.03.2026 / 07:30 CET/CEST...
Nordex SE: Nordex Group receives 56 MW order for community wind farm in Schleswig-Holstein, Germany Nordex SE - order includes 20-year...
VERBUND Green Power has signed a multi-year agreement with Nordex Group for the supply of up to 700MW of onshore wind turbine capacity.
Nordex has received new wind turbine orders totalling 508MW, including a first order for its N175/6.X turbines in Canada.
Effective incident response to safeguard employee safety and well-being is essential for Nordex Group, a Hamburg, Germany-based company that designs,...
The Nordex Group has secured contracts from Alliant Energy to supply wind turbines in Iowa, US, marking a major advance for the region's...
The company's EBITDA margin rose to 8% in the quarter, compared to 4.3% in Q3 2024.
Nordex has launched an investigation following the collapse of a turbine at the Herkentrup wind farm in Coesfeld, in North Rhine-Westphalia...
Requesting a user or organization profile page (`GET /{username}`) with an `Accept: application/rss+xml` or `Accept: application/atom+xml` header returned the owner's activity feed without the visibility check that the profile page and the `.rss` and `.atom` routes apply. Anonymous users, restricted users and non-members could confirm the existence of limited or private users and private organizations and read their profile details and public activity, also when `[other] ENABLE_FEED` was disabled. Activity in private repositories was not included.
The Gitea API endpoint for creating push mirrors (`POST /api/v1/repos/{owner}/{repo}/push_mirrors`) checked only whether mirroring was enabled and not the `[mirror] DISABLE_NEW_PUSH` setting that the web interface enforces. A repository administrator could therefore create new push mirrors on instances where the site administrator had disabled them. A push mirror pushes all refs of the repository to a remote chosen by the caller, on each commit or on a schedule.
The Gitea API endpoint `GET /api/v1/repos/{owner}/{repo}/media/{filepath}` wrote files of up to 1 KiB that are stored directly in Git, not in LFS, to the response without the content type and disposition headers Gitea uses for user content. An HTML file committed to a repository was therefore rendered by the browser on the Gitea origin. A user who can push to a repository could run JavaScript in the session of a victim who opens the media URL and act with the victim's permissions.
With `[repository] FORCE_PRIVATE = true`, Gitea creates new repositories as private, but the post-receive hook still applied the `repo.private=false` push option to an empty repository created by push. Any user who can create repositories could make their new repository public in violation of the instance policy. The default configuration is not affected.
The Gitea push mirror API checked whether the repository owner, instead of the requesting user, may use local file system paths. On instances with `[security] IMPORT_LOCAL_PATHS = true`, a repository administrator who is not allowed to import local paths could add a push mirror to a local path on the server when the repository owner has that permission. Gitea then pushed the repository's refs into an existing Git repository at that path with the permissions of the Gitea process.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.