Qantas A.I CyberSecurity Scoring
13/09/2026
Access Monitoring Plan
Access Monitoring Plan
Qantas has 10.71% fewer incidents than the average of same-industry companies with at least one recorded incident.
Qantas has 94.17% more incidents than the average of all companies with at least one recorded incident.
Qantas reported 2 incidents this year: 1 cyber attacks, 0 ransomware, 0 vulnerabilities, 1 data breaches, compared to industry peers with at least 1 incident.
Welcome to the official Cathay Pacific LinkedIn page. We have over 200 destinations in our global network, but want to do more than just move you from A to B. We want to take you further in your journey, and ultimately, to move beyond. And we’re here to do what we can to help you discover what’s next. For flight and related enquiries, please contact us via WhatsApp (+852 2747 2747). For other feedback or a formal response, please fill out the form at https://bit.ly/3N7e3BM.
At Southwest®, everything we do—from our smiling People to our policies—is designed to let you go with Heart. No matter what comes up in your travels, we’ve got your back. Because while any airline can fly you, only Southwest lets you go with Heart. Application fees don’t fly. The only way to apply for a job at Southwest Airlines is through careers.southwestair.com. We'll never ask for any payment for your application or training.* *Destination 225° is a Southwest Airlines program. Applying is free; however, candidates advancing through the selection process are responsible for all costs incurred.
Ethiopian Airlines Group (Ethiopian) is a true African success story, transforming a visionary dream into a globally renowned reality for nearly eight decades. Operating flights to more than 160 domestic and international passenger, and cargo destinations across five continents, Ethiopian bridges the gaps between Africa and the world. Emphasizing passenger comfort and environmental sustainability, Ethiopian utilizes ultra-modern aircraft such as Boeing 737s, 777s, 787s, Airbus A350-900, A350-1000, and De Havilland Q400. Ethiopian, the Star Alliance member airline since 2011, champions in various coveted awards including Skytrax’s ‘Best Airline in Africa Award’ for eight consecutive years, APEX ‘Best Overall in Africa’ award and ‘Leadership in Connecting Africa through Transport’ Award among others. Ethiopian aims to further excel in its success through a strategic plan dubbed ‘Vision 2035’ and become one of the top 20 most competitive and leading aviation groups in the world. Embracing a Pan-African spirit, Ethiopian is pursuing multi-hub strategy through hubs in Lomé, Togo with ASKY, in Lilongwe, Malawi with Malawi Airlines, in Lusaka, Zambia with Zambia Airways, and in Kinshasa, Democratic Republic of the Congo (DRC) with Air Congo.
Qatar Airways is the national airline of the State of Qatar. Based in Doha, the Airline’s trendsetting on-board product focuses on: comfort, fine cuisine, the latest in-flight audio & video entertainment, award-winning service and one of the youngest and most advanced aircraft fleet in the sky. Awards by industry audit Skytrax: - Airline of the Year (2011, 2012, 2015, 2017, 2019, 2021, 2022, 2024, 2025) - World's Best Business Class (2010, 2013, 2014, 2016, 2017, 2018, 2019, 2021, 2022, 2023, 2024, 2025) - World’s Best Business Class Airline Lounge (2013, 2014, 2016, 2017, 2021, 2023, 2024, 2025) - Best Airline in the Middle East (2011, 2012, 2013, 2014, 2015, 2017, 2018, 2019, 2021, 2022, 2023, 2024, 2025) Connecting through its Doha hub, Qatar Airways serves more than 170 key business and leisure destinations worldwide, with a fleet of over 200 aircraft. The airline flies to Australia, Asia, Europe, Middle East, Africa, North America, and South America. Qatar Airways is looking for the very best candidates to help support the Airline's incredible growth. Visit http://bit.ly/QRvacancies to land a great career. Please visit www.qatarairways.com/support if you require a response to a formal complaint.
Somos a maior Companhia Aérea do País e estamos entre as que mais crescem no mundo. A nossa história começou em 2001 e, desde então, somos responsáveis por inovar o mercado da aviação no Brasil. Tudo isso graças à dedicação do nosso Time para garantir o nosso Valor número 1, a Segurança, entregando sempre a melhor experiência em voar. Carregamos em nossa bagagem o respeito para promover a diversidade e a inclusão em nosso ambiente de trabalho, valorizando o talento das nossas Águias e seguindo nosso propósito de ser a Primeira para Todos, seja no solo ou no céu. Além disso, criamos uma série de facilidades que tornam as viagens dos nossos Clientes ainda mais tranquilas, como: Novo App, Selfie Check-in, GOL+ Conforto, Programa de fidelidade da Smiles e Entretenimento a bordo. Com a laranjinha, você voa mais alto e leva a nossa essência Simples, Humana e Inteligente em todas as decolagens.
Based in Dubai, the Emirates Group employs over 120,000 staff from more than 170 nationalities. The Emirates Group’s extensive and diverse international portfolio includes the world’s largest international airline, Emirates, and one of the largest combined air services provider in the world, dnata. Within the Group there are a diverse range of businesses which offer a wide spectrum of career opportunities, all of which can be explored through the Group's dedicated careers website, emirates.com/careers Essential to the Group’s ongoing success is the employment of high-quality people who benefit from living and working in Dubai, a modern cosmopolitan city offering one of the most desirable lifestyles in the world. The Emirates Group employees come from over 170 nationalities, receive tax-free salary and benefits package, and are offered professional development opportunities to further their careers with the organisation. If you are a high-performer, seeking a career challenge, personal and professional development, and reward and recognition for your contribution, then the Emirates Group is the perfect opportunity for you. To find out more about the career opportunities the Emirates Groups offers and how to become part of our future growth and rapid success, visit emirates.com/careers
We’re on a mission to make low-cost travel easy. Whatever your role, you’ll connect millions of people to what they love using Europe’s best airline network, great value fares, and friendly service. And to help us get there we’ll give you everything you need to make a personal impact on our growing business. We believe in sharing new opportunities, stepping up to challenges, and supporting each other with our Orange Spirit. Get ready to make a difference. Make it easyJet.
gategourmet has been serving the airline industry for more than 70 years and has become the world’s largest independent provider of airline catering and logistics. We prepare tens of thousands of tasty, nutritious passenger meals and snacks daily and reliably service more than 2 million flights a year in “last mile” operations worldwide. gategourmet is the core business behind gategroup, the leading independent global provider of products, services and solutions related to an airline passenger’s onboard experience. Our 27,000 employees work to serve people on the move with their expertise in catering and hospitality, provisioning and logistics, and onboard solutions. We serve over 250 carriers in more than 30 countries and provide our customers with expertise and solutions tailored to their guests, service offerings, and geographic regions.
Marhaba! Welcome to Etihad Airways. We are proud to be the national airline of the UAE, flying to 100+ destinations via Abu Dhabi. At Etihad, we don't stop at the border of what's possible, we go beyond it. Proudly inspired by our Emirati identity, we are dedicated to delivering extraordinary travel experiences, helping our guests realise their ambitions. Our journey started in 2003. Since then, we have proudly helped millions of guests travel the globe. We are honoured to have had over 12 million valued members join our Etihad Guest loyalty programme. Diversity is key in driving us forward. At 12,000+ employees representing 140+ nationalities, our team comes together to deliver exceptional experiences at every stage of the journey. If you share our spirit of ambition and would like to reach new heights, visit https://careers.etihad.com/
Latest updates, reports, and threat intel affecting the global network.
A fake Qantas IT support call enabled a vishing attack that exposed 5.67 million customer records, Australia's privacy regulator says.
The Qantas cyber breach will not be investigated by the Office of the Australian Information Commissioner after preliminary inquiries showed...
The final report into last year's Qantas hack, which affected approximately 5 million Australians, has found that there was nothing more...
Qantas confirms a cyber incident involving a third-party call centre platform, potentially affecting millions of customers' data. No passwords or financial...
A group called Scattered Spider was responsible for the Qantas attack, in which a member posing as an airline employee gained access to a...
The Qantas breach, disclosed in July, was part of a sophisticated campaign by the hacking group Scattered Lapsus$ Hunters that compromised...
When courts ban people from accessing leaked data – as happened after the airline's data breach – only hackers and scammers win.
Tech News News: Qantas CEO Vanessa Hudson announced a key executive departure, with Chief Customer and Digital Officer Catriona Larritt...
Qantas cyber security boss resigns, prompting executive reshuffle ... Qantas will reorganise its executive team following the resignation of its...
A remote attacker who controls a container registry may be able to direct a client's token request to a host of the attacker's choice, and disclose the victim's registry credentials to that host. This vulnerability is addressed in containerization version 0.41.0.
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the djust live transport resolves the LiveView to mount from a client-supplied dotted path by calling `__import__(module_path, ...)`. The module is imported — running its top-level code (import side effects) — before the framework checks that the resolved object is a `LiveView` subclass and before any per-view authentication. The `LIVEVIEW_ALLOWED_MODULES` allowlist that should contain this is fail-open (`if allowed_modules:` — skipped when the setting is unset, the framework default) and uses loose `startswith` matching. An unauthenticated WebSocket client (the WS handshake does not require auth; per-view auth runs only after import + instantiate) can therefore send a `mount` / `live_redirect_mount` / `url_change` frame (or an SSE mount) with `view = "<any.importable.module>.AnyName"` and cause the server to import — and execute the top-level code of — any importable Python module by name. Version 1.0.7 fixes the issue with a fail-closed resolution gate (`djust._view_resolution.is_view_import_allowed`): a client view path resolves only if (a) its module is already loaded (`sys.modules` — so resolving runs no new code; URL-routed views loaded by URLconf at startup keep working with zero config) or (b) it matches `LIVEVIEW_ALLOWED_MODULES` on a module-segment boundary (explicit opt-in for lazily-imported views). The gate runs before `__import__` at all three sinks (+ defense-in-depth inside `_instantiate_view`). As a workaround, set `LIVEVIEW_ALLOWED_MODULES` to the narrow list of modules that contain your mountable LiveView classes. (Note: pre-patch the allowlist is `startswith`-matched and the import still precedes the subclass check, so this is mitigation, not a complete fix.)
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, djust's per-object authorization (`get_object` + `has_object_permission`, ADR-017) was enforced on the WebSocket mount and event paths but not on three other render entry points: (a) the initial HTTP GET render, (b) SPA `url_change` navigation, and (c) `{% live_render %}` embedded child views. An authenticated user could therefore view (and on some paths act on) an object they are not authorized for by loading the page directly, navigating to it via SPA url-change, or composing it as an embedded child — a classic IDOR / broken object-level access control on object-scoped views. This is fixed in djust 1.0.7. All render entry points now route through a shared `enforce_object_permission` chokepoint: HTTP GET returns 403, `url_change` emits a `permission_denied` frame and skips the render, and `{% live_render %}` (eager + lazy) refuses the embed. Views without a custom `get_object` are unaffected (no-op). No reliable workaround short of upgrading. Do not expose object-scoped views through the HTTP-GET / url_change / live_render paths until patched.
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the WebSocket `handle_mount` and `ViewRuntime._build_request` rebuild an `HttpRequest` via `RequestFactory().get(...)` with no `HTTP_HOST`, so `request.get_host()` defaulted to `"testserver"` on the live path. Host/subdomain/domain `TenantResolver`s then misresolved the tenant — `None` on the live path while the HTTP path resolved correctly. With `STRICT_MODE=False` the tenant-scoped managers returned unscoped rows (cross-tenant disclosure); with the default they returned an empty queryset (broken tenancy). This is fixed in djust 1.0.7. The handshake Host is extracted from the ASGI scope, validated against `ALLOWED_HOSTS` (the same logic as the CSWSH Origin gate, parsed with Django's `split_domain_port` so malformed Hosts are rejected at the boundary), and propagated — with the TLS scheme — into the reconstructed request, so live-path tenant resolution matches HTTP exactly. There is no known workaround on the live path short of upgrading. Users are most exposed when combined with `STRICT_MODE=False`.
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, when a Django `Model` instance is assigned to a public view attribute, djust serialized it to the client with no sensitive-field denylist — sending fields such as `password` (the hash), privilege flags (e.g. `is_staff` / `is_superuser`), tokens, and other PII to the browser. Because exposing model objects to templates is a normal djust pattern, this could leak credentials/PII without the developer realizing the full object crossed the wire. This is fixed in djust 1.0.7. Model serialization applies a secure-by-default sensitive-field denylist (password/hash/token/secret-style fields and known privilege flags are withheld) with an identity-subset fallback. As a workaround, keep `Model` instances on `_private` attributes and expose only the specific fields needed, until patched.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.