ZRN A.I CyberSecurity Scoring
02/04/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for Zeppelin Rental Norway in 2026.
No incidents recorded for Zeppelin Rental Norway in 2026.
No incidents recorded for Zeppelin Rental Norway in 2026.
Construction
🏗️ Building a sustainable tomorrow at BAM! As leaders in the construction industry, we are committed to pioneering sustainable practices that not only enhance our projects but also contribute to a better future for generations to come. Our strategy revolves around focusing to protect profitability, transforming to strengthen competitive advantage, and expanding for future growth. Join us in making possible by prioritising sustainability in everything we do. 🌍
Tata Projects is one of the most admired Technology led Engineering, Procurement and Construction (EPC) companies in India. We have expertise in providing sustainable solutions in the execution of large and complex urban and industrial infrastructure projects while also demonstrating strong presence in refineries and petrochemical plants. We leverage our domain knowledge across various business segments to address the shift to clean energy to meet the nation’s Net Zero ambitions. We provide ready-to-deploy solutions for semiconductor facilities, giga factories, data centres, refineries, green fuels, roads, bridges, integrated rail & metro systems, commercial building & airports, power generation, transmission & distribution systems, chemical process plants, water & waste management, and mining & metal purification systems. Tata Projects offers one stop service covering entire life cycle of the project, from project conceptualization to operations & maintenance. It uses innovative technology solutions to offer bouquet of services which includes engineering, procurement, construction, commissioning, inspection & expediting, operations, repairs & maintenance, and shutdown services. Over the years, Tata Projects has received several awards and recognitions for its project delivery and commitment to safety & quality. We are a part of the TATA Group which operates in more than 100 countries across six continents, with a mission ‘To improve the quality of life of the communities we serve globally, through long-term stakeholder value creation based on Leadership with Trust’. In 2023-24, the revenue of Tata companies, taken together, was $165Billion. These companies collectively employ over 10,00,000 people. *Caution against fraudulent job offers*: Tata Projects does not charge/accept any amount or security deposit from job seekers during the selection process or while inviting candidates for an interview. To know more visit - www.tata.com/jobalert
The IBEW represents 860,000 active. and retired who work in a wide variety of fields, including utilities, construction, telecommunications, broadcasting, manufacturing, railroads and government. The IBEW has members in both the United States and Canada and stands out among the American unions in the AFL-CIO because it is among the largest and has members in so many skilled occupations. As union members, we bargain collectively with our employers over wages, benefits, and rights. Most of us have very limited bargaining power as one person, but as a group, we are strong. And, with a good negotiated contract, we have legal protections we would not have otherwise. Follow us on: Twitter: https://twitter.com/IBEW Facebook: https://www.facebook.com/IBEWFB YouTube: http://www.youtube.com/user/TheElectricalWorker
At STRABAG around 86,000 people working on progress at more than 2,400 locations worldwide. Uniqueness and individual strengths characterise both our projects and each of us as individuals. Whether its building construction, civil engineering, road construction, underground engineering, bridge building, tunnelling, construction material production, project development or building management – we are always one step ahead so that we can become the most innovative and sustainable construction technology company in Europe. Diversity, inclusion and equal opportunities are integral to this, who we are as a company and how we work. Together we work as partners to complete projects successfully and grow with new challenges. Together we achieve great things. Let’s progress!
Holcim is the leading partner for sustainable construction with net sales of CHF 15.7 billion in 2025, creating value across the built environment from infrastructure and industry to buildings. We have more than 45 000 employees in 43 attractive markets – across Europe, Latin America and Asia, Middle East & Africa – and have been recognized as a Global Top Employer by the Top Employers Institute. Holcim offers high-value end-to-end Building Materials and Building Solutions, from foundations and flooring to walling and roofing – powered by premium brands including ECOPact, ECOPlanet and ECOCycle.
Founded in 1952 by Francis Bouygues, Bouygues is a diversified services group operating in over 80 countries with 200,000 employees all working to make life better every day. Its business activities in construction (Bouygues Construction, Bouygues Immobilier, Colas); energies & services (Equans); media (TF1) and telecoms (Bouygues Telecom) are able to drive growth since they all satisfy constantly changing and essential needs.
ALEC Holdings, part of the Investment Corporate of Dubai (ICD), is a leading construction and related businesses group operating in the UAE and KSA. The company builds and provides construction solutions that set industry benchmarks for quality, safety, functionality, and aesthetics. ALEC Holdings offers its clients complete turnkey solutions in construction, MEP, fit-out, marine, oil & gas, modular construction, energy efficiency and solar projects, heavy equipment rental, technology systems, data centers and asset maintenance. With these capabilities, the company successfully serves a diverse range of sectors including airports, retail, hotels & resorts, high-rise buildings, and themed projects.
Hassan Allam Holding is a leading group with a focus on engineering and construction, and investment and development. The Group operates in diverse sectors including infrastructure, energy, water, industrial, logistics, petrochemical, and complex large-scale projects in Egypt and the MENA region. The founders of Hassan Allam Holding commenced operations in 1936, making the oldest construction franchise in the MENA region with a solid reputation, superior technical capabilities, and a diversified portfolio. With a legacy of identifying and investing in attractive infrastructure projects, in the past five years, it has delivered over 70 projects and has a current backlog exceeding USD 5 billion. The Group is named among the Engineering News-Record (ENR) list of the top 250 global contractors. Today, we continue to lead our industry with a large dynamic business, employing more than 50,000 employees in Egypt and the MENA Region.
Consolidated Contractors International company is a leading diversified company carrying out construction, engineering, procurement, development and investment activities internationally. We are committed to providing reliable, amicable, and professional service to our valuable clients, and to being supportive to local businesses and social activities, being friendly to the environment as well as being proactive in the socio-economic environments within which we operate. Our appreciation of our clients' interests, evidenced by meeting their requirements and ensuring high quality work, is the prime directive of our management. Our growth and profitability are maintained through innovation, technical enhancement, and adaptability to all our markets. Our profitability is directed towards sustaining growth and to providing satisfactory returns to our shareholders. Our commitment to growth is firmly linked to our commitment to our employees' continuous development and rewarding careers. We are also devoted to our employee's safety and health, job security, and welfare. Our strength emanates from our distinct culture, strong and close relationships with our clients, employees' competence and loyalty, entrepreneurial and flexible management, capability, dynamism, focus on quality and safety, and commercial acumen.
Latest updates, reports, and threat intel affecting the global network.
Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.22 and 4.0.0-RC1 through 4.17.15, an attacker with only a GitHub account can plant a JavaScript payload in a craftcms/cms issue title. When a Craft admin uses the CraftSupport widget’s "Give feedback" screen and types a search term that returns the poisoned issue, the payload executes in the admin’s control panel session. No control panel account or elevated privileges are required on the attacker’s side. This issue has been fixed in versions 4.17.16 and 5.9.23.
Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.21 and 4.0.0-RC1 through 4.17.14, theAssetsController::actionDeleteFolder() only requires the deleteAssets:<volume-uid> permission for the target folder. It never enforces deletePeerAssets:<volume-uid>, even though Assets::deleteFoldersByIds() cascades deletion to every descendant folder and every asset inside, regardless of the uploader's assigned privileges. A low-privilege user who has been granted folder-management rights on a shared volume can therefore destroy assets uploaded by other users (peer assets), bypassing the per-asset peer-permission check that the sibling actionDeleteAsset endpoint correctly applies. This issue has been fixed in versions 4.17.15 and 5.9.22.
Craft CMS is a content management system (CMS). Versions 5.0.0-RC1 through 5.9.20, and 4.0.0-RC1 through 4.17.13 contain an authorization issue in the AssetsController::actionReplaceFile that can delete a source asset without source delete permission by supplying both assetId and sourceAssetId. AssetsController::actionReplaceFile() supports replacing a target asset file using another existing asset as the source. The action loads: assetId -> $assetToReplace and sourceAssetId -> $sourceAsset, then enforces replace permissions using ($assetToReplace ?: $sourceAsset). When both IDs are provided, this expression resolves to the target asset so no permission check is performed against the source asset volume. When both assets are present, Craft copies the source file into the target and then deletes the source asset. There is no deletion check for for the source asset. An authenticated user who can replace files in one volume can delete assets in another volume where they do not have delete permission, as long as they can obtain a sourceAssetId, leading to broken content references and data loss. This issue has been fixed in versions 4.17.14 and 5.9.21.
Description: To issue and renew TLS certificates on behalf of customers, Cloudflare's Universal SSL feature automatically manages the CAA RRset for the customer's zone. This auto-managed RRset is permissive by design (e.g. 'issue "letsencrypt.org"' without parameters). On Universal SSL zones, Cloudflare's authoritative DNS serves this auto-managed RRset at query time, superseding any customer-configured CAA records on the zone. When a customer publishes a stricter CAA record using the RFC 8657 accounturi or validationmethods parameters, the Certificate Authority does not observe those parameters when evaluating the served RRset under RFC 8659. As a result, the RFC 8657 account-binding and validation-method-binding protections are not enforced end-to-end on Universal SSL zones. Successful exploitation could result in issuance of a browser-trusted TLS certificate to an attacker, enabling MITM against the affected domain. Exploitation is non-trivial in practice: an attacker would need to hold an ACME account at one of the Certificate Authorities in the served CAA RRset and to simultaneously satisfy domain control validation across the multiple geographically distinct Network Perspectives the CA relies on for Multi-Perspective Issuance Corroboration. Cloudflare prefixes are anycast-announced from hundreds of locations globally, raising the bar against single-vantage-point BGP hijacks. Any resulting misissuance of a browser-trusted certificate is subject to Certificate Transparency logging required by major browsers, and would be visible to CT monitoring. Mitigation: Customers requiring strict RFC 8657 enforcement need to disable Universal SSL on the affected zone. Universal SSL's automatic CAA management and customer-set RFC 8657 accounturi and validationmethods enforcement are mutually exclusive by the nature of the issue, so there is no in-product workaround that preserves both. Certificate Transparency monitoring is recommended for all customers as a general detection control. Credits: David Osipov (ORCID: https://orcid.org/0009-0005-2713-9242), independent researcher
Out of bounds read and write in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.