Petrofac A.I CyberSecurity Scoring
29/03/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for Petrofac in 2026.
No incidents recorded for Petrofac in 2026.
No incidents recorded for Petrofac in 2026.
World leader in engineering and R&D services, Capgemini Engineering combines its broad industry knowledge and cutting-edge technologies in digital and software to support the convergence of the physical and digital worlds. Coupled with the capabilities of the rest of the Group, it helps clients to accelerate their journey towards Intelligent Industry. Capgemini Engineering has 60,000 engineer and scientist team members in over 30 countries across sectors including Aeronautics, Space, Defense, Naval, Automotive, Rail, Infrastructure & Transportation, Energy, Utilities & Chemicals, Life Sciences, Communications, Semiconductor & Electronics, Industrial & Consumer, Software & Internet. Capgemini Engineering is an integral part of the Capgemini Group, a global business and technology transformation partner, helping organizations to accelerate their dual transition to a digital and sustainable world, while creating tangible impact for enterprises and society. It is a responsible and diverse group of 340,000 team members in more than 50 countries. With its strong over 55-year heritage, Capgemini is trusted by its clients to unlock the value of technology to address the entire breadth of their business needs. It delivers end-to-end services and solutions leveraging strengths from strategy and design to engineering, all fueled by its market leading capabilities in AI, cloud and data, combined with its deep industry expertise and partner ecosystem. The Group reported 2023 global revenues of €22.5 billion. Get The Future You Want | www.capgemini.com
We are a world-class engineering services and nuclear organization. We connect people, data and technology to transform the world’s infrastructure and energy systems. Together, with our industry partners and clients, and our global team of consultants, designers, engineers and project managers, we can change the world. ---
SYSTRA is one of the world's leading engineering and consultancy groups specialising in public transport and mobility solutions. For more than 65 years, the Group has been committed to helping cities and regions to contribute to their development by creating, improving and modernising their transport infrastructure. With its 11,000 employees, the Group's mission is to connect people and bring territories closer together in the 80 countries where it operates. By making travel more fluid, the infrastructures designed by SYSTRA bring communities together, develop social integration and facilitate access to employment, education and leisure. A signature for transport solutions, SYSTRA supports its partners and clients throughout the lifecycle of their projects. SYSTRA is involved at a very early stage in the design phase, right through to the deployment and maintenance test phases. SYSTRA provides all of its services in more than 80 countries worldwide and generates 80% of its turnover internationally. KEY FIGURES - €1.3 bn in sales in 2024 - 2nd international engineering company for Mass Transit & Rail* - 3d for Bridges* - 6th in the Transport sector* * Engineering News-Record (ENR) ranking, 2025
At ST Engineering, we apply our technology and innovation to solve real-world problems and improve lives. Our commitment to excellence and our track record as a global technology, defence, and engineering company earns us a reputation for quality and trust. Subscribe to get the latest news delivered to your inbox: http://eepurl.com/htCq_P. For more updates, follow us on Facebook, Instagram, LinkedIn and YouTube.
We are Quest Global. We’re in the business of engineering, but what we’re really building is a brighter future. It’s not just what we do, but why we do it that makes us different. We believe engineering has the unique opportunity to solve the problems of today that stand in the way of tomorrow. For more than 25 years, we have strived to be the most trusted partner for the world’s hardest engineering problems. As a global organization headquartered in Singapore, we live and work in 18 countries, with 93 global delivery centers and offices, driven by 21,000+ extraordinary employees who make the impossible possible every day. Quest Global delivers world-class end-to-end engineering solutions by leveraging our deep industry knowledge and digital expertise. By bringing together technologies and industries, alongside the contributions of diverse individuals and their areas of expertise, we are able to solve problems better, faster. This multi-dimensional approach enables us to solve the most critical and large-scale challenges across the aerospace & defense, automotive, energy, hi-tech, healthcare, medical devices, rail and semiconductor industries. Integrity Matters: Protecting Against Job Search Scams. Quest Global conducts a formal interview process however we do NOT ask for payment at any stage of the recruitment process. Find out more - https://careers.quest-global.com/global/en
TR is an international general contractor engaged in the engineering and construction of industrial facilities in the fields of: -Oil & Gas -Refining & Petrochemical -Power Generation -Infrastructures and industries -Energy Transition Engaging in the engineering, design and construction of various types of industrial facilities for a broad spectrum of customers throughout the world, including many of the principal national oil companies and several multinational companies. Leader for engineering and construction in the oil and gas sector in Spain, one of the leaders in Europe in the design and construction of oil and gas facilities, and one of the world leaders in the refining sector. especialiced on large turnkey industrial projects, although we also provide engineering, management, start-up and operating services for industrial plants. You can also follow us on twitter: @TRSA_rrhh
Saipem is a global leader in the engineering and construction of major projects for the energy and infrastructure sectors, both offshore and onshore. Saipem is “One Company” organized into business lines: Asset Based Services, Drilling, Energy Carriers, Offshore Wind, Sustainable Infrastructures. The company has 5 fabrication yards and an offshore fleet of 17 owned construction vessels and 12 drilling rigs, of which 9 owned. Always oriented towards technological innovation, the company’s purpose is “Engineering for a sustainable future”. As such Saipem is committed to supporting its clients on the energy transition pathway towards Net Zero, with increasingly digital means, technologies and processes geared for environmental sustainability. Listed on the Milan Stock Exchange, it is present in more than 50 countries around the world and employs about 30,000 people of over 130 nationalities.
Ramboll is a global architecture, engineering and consultancy company founded in Denmark in 1945. Our 18,000+ experts create sustainable solutions across Buildings, Transport, Energy, Environment & Health, Water, Management Consulting and Architecture & Landscape. Across the world, Ramboll combines local experience with a global knowledge base to create sustainable cities and societies. We combine insights with the power to drive positive change for our clients, in the form of ideas that can be realised and implemented. We call it: Bright ideas. Sustainable change. Visit us at ramboll.com
Black & Veatch is an employee-owned, global leader in building critical human infrastructure in Energy, Water, Digital Connectivity and Government Services. Since 1915, we have helped our clients improve business operations and the lives of people in over 100 countries through consulting, engineering, construction, operations and program management. Our purpose is building a world of difference and our vision is to be THE leader in sustainable infrastructure. Black & Veatch Holding Company, its subsidiaries and its affiliated companies, complies with all Equal Employment Opportunity (EEO) affirmative action laws and regulations. Black & Veatch does not discriminate on the basis of age, race, religion, color, sex, national origin, marital status, genetic information, sexual orientation, gender Identity and expression, disability, veteran status, pregnancy status or other status protected by law.
Latest updates, reports, and threat intel affecting the global network.
Petrofac Emirates was acquired by a consortium led by Mason Capital Management and Pearlstone Alternative.
Abu Dhabi Customs alerts the public about scam texts impersonating officials, urging caution against fraudulent messages claiming to...
Artificial intelligence is transforming cybersecurity at remarkable speed but while AI can strengthen defenses, leaders warn that confidence...
Event tackles how AI is reshaping cyber threats, defence, governance & real-time security.
Dubai: Petrofac's collapse has become more than a company crisis — it's a stress test for how the global energy industry manages risk.
With a global IT crisis in her first week, Samantha, our Chief Information Officer (CIO) had an interesting start to her career at Petrofac.
Here are the worldwide cybersecurity job openings available as of June 10, 2025, including on-site, hybrid, and remote roles.
Petrofac's AKS protection utilizes Upwind to discover its containerized resources, identify any vulnerabilities, and collect real-time insights.
Petrofac and American University of Sharjah (AUS) have signed a Memorandum of Agreement (MOA) to help shape the future of technology and...
Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-grpc grpc (GRPC.Compressor.Gzip, GRPC.Message modules) allows a denial of service via a gzip decompression bomb. This vulnerability is associated with program files lib/grpc/compressor/gzip.ex, lib/grpc/message.ex and program routines 'Elixir.GRPC.Compressor.Gzip':decompress/1, 'Elixir.GRPC.Message':from_data/2. 'Elixir.GRPC.Compressor.Gzip':decompress/1 calls :zlib.gunzip/1 directly on attacker-controlled bytes with no decompressed-size limit, ratio check, or incremental decoding. Because this module is the registered gzip GRPC.Compressor implementation, it is invoked automatically whenever an incoming gRPC frame carries the grpc-encoding: gzip header. :zlib.gunzip/1 allocates the entire decompressed result as a single binary, so a small highly compressible payload (for example a few kilobytes of zeros, which gzip compresses at roughly 1000:1) expands to multiple gigabytes inside a single call. The max_receive_message_length limit is enforced only against the already-decompressed message, so it provides no protection. An unauthenticated remote peer can send a single crafted frame to exhaust the BEAM node's heap and trigger an out-of-memory kill. This issue affects grpc: from 0.4.0 before 1.0.0.
Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc allows unauthenticated attackers to exhaust the BEAM's memory and crash the server by streaming a large or slow-trickle unary request body. 'Elixir.GRPC.Server.Adapters.Cowboy.Handler':read_full_body/3 (lib/grpc/server/adapters/cowboy/handler.ex) accumulates every received chunk into a single growing binary with no size cap. Additionally, when the client omits the grpc-timeout header, the per-chunk read timeout resolves to :infinity, allowing a slow-trickle client to keep the connection alive indefinitely while memory grows. A single connection is sufficient to exhaust server memory and crash the node. This issue affects grpc from 0.3.1 before 1.0.0.
Deserialization of Untrusted Data and Allocation of Resources Without Limits or Throttling vulnerabilities in elixir-grpc grpc allow unauthenticated attackers to crash the BEAM node via atom table exhaustion and, when a decoded term flows into a call site that invokes it, achieve remote code execution on the server. 'Elixir.GRPC.Codec.Erlpack':decode/2 (lib/grpc/codec/erlpack.ex) calls :erlang.binary_to_term/1 on the raw gRPC message body without the :safe option, no size bound, and no type guard. Any unauthenticated peer that sends a request with Content-Type: application/grpc+erlpack can send a crafted payload that mints arbitrary new atoms (which are never garbage-collected, exhausting the bounded atom table and crashing the VM) or that encodes a fun term which, if applied anywhere downstream, executes attacker-controlled code inside the server process. This issue affects grpc from 0.4.0 before 1.0.0.
The browserstack-cypress-cli is BrowserStack's CLI which allows users to run Cypress tests on BrowserStack. Versions prior to 1.36.4 are vulnerable to OS command injection via the cypress_config_file configuration parameter. In readCypressConfigUtil.js, the loadJsFile() function constructs a shell command by interpolating the user-controlled cypress_config_filepath value into a template literal, then executes it via child_process.execSync(). Shell metacharacters in the config path (specifically " and ;) allow breaking out of the quoted argument and injecting arbitrary commands. This issue has been fixed in version 1.36.6.
Authorization Bypass Through User-Controlled Key vulnerability in elixir-grpc grpc allows authenticated attackers to access or modify resources belonging to other users by smuggling a conflicting value for any path-bound field via the query string or request body. In 'Elixir.GRPC.Server.Transcode':map_request/5 (lib/grpc/server/transcode.ex), all three clauses use Map.merge/2 with path bindings as the first argument, giving them the lowest merge precedence. A request such as GET /users/me/profile?user_id=victim (or a POST with {"user_id": "victim"} when body: "*") yields a decoded protobuf struct where the path-bound field carries the attacker-supplied value rather than the router-extracted value. Any handler that uses the path-bound field for authorization, multi-tenancy scoping, or ownership checks is silently bypassed. This issue affects grpc from 0.8.0 before 1.0.0.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.