Roche Africa A.I CyberSecurity Scoring
24/04/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for Roche Africa in 2026.
No incidents recorded for Roche Africa in 2026.
No incidents recorded for Roche Africa in 2026.
Avantor® is a leading global provider of mission-critical products and services to customers in the biopharma, healthcare, education & government, and advanced technologies & applied materials industries. Our portfolio is used in virtually every stage of the most important research, development and production activities in the industries we serve. Our global footprint enables us to serve more than 300,000 customer locations and gives us extensive access to research laboratories and scientists in more than 180 countries. We set science in motion to create a better world. More than 14,500 strong, our associates are passionate about our mission to set science in motion to create a better world. We share enthusiasm for innovation, excellence, and achievement. Whether we are collaborating with our customers to advance science or solve multifaceted problems, we help them reach their goals more efficiently and effectively. Visit our website to learn more about Avantor.
About Genentech We're passionate about finding solutions for people facing the world's most difficult-to-treat conditions. That is why we use cutting-edge science to create and deliver innovative medicines around the globe. To us, science is personal. Making a difference in the lives of millions starts when you make a change in yours. If you’d like to join our team, view our openings at gene.com/careers. Our patient resource center is dedicated to getting patients and caregivers to the right resources. You can reach them at 1 (877) GENENTECH (436-3683) Monday-Friday, 6am-5pm PST or [email protected]. Community Guidelines: 1. We want to foster positive conversation around the issues we are passionate about. To that end, we remove profanity, content that contains threatening language, content that is aimed at private individuals, personal information, and repeated unwanted messages. 2. Don’t mention any medicines by name — ours or anyone else’s. Because of the fair balance rules governing our industry, we cannot post any comments that reference any pharmaceutical brand, product, or service. Please do not mention any specific medicines by name, or include any links to third party sites in your comments. 3. This isn’t the place to report or discuss side effects. This site is not intended as a forum for reporting side effects experienced while taking a Genentech product. Instead, you should report any side effects to Genentech Drug Safety at 1-888-835-2555. You can also report side effects of any prescription product directly to the FDA at 1-800-FDA-1088 or by visiting www.FDA.gov/medwatch. 4. Don’t pitch your product or service. Please don't use our page as a place to promote your product or pitch your services. Please also avoid posting links to external sites. We reserve the right to remove any posts that are deemed promotional.
At Charles River, we are guided by our strong purpose—to create healthier lives—which centers around the patients who rely on the therapeutics we help to develop, the animals in our care, to our planet, and to the passionate and skilled people who are at the heart of our organization and make it all possible. #DrugDiscovery #Biotech #Biotechnology #Pharmaceuticals #CRL
Since our foundation in Dublin, Ireland in 1990, our mission has been to help our clients to accelerate the development of drugs and devices that save lives and improve quality of life. We do this by delivering best in class information, solutions and performance, with an unyielding focus on quality at all times. We offer a full range of consulting, development and commercialisation services from a global network of offices in 53 countries. We focus our innovation on the factors that are critical to our clients – reducing time to market, reducing cost, and increasing quality – and our global team of experts has extensive experience in a broad range of therapeutic areas.
Fortrea (Nasdaq: FTRE) is a leading global clinical research organization (CRO) dedicated to providing innovative clinical development solutions to the life sciences industry. With over 30 years of clinical research experience, Fortrea has evolved from Covance and Labcorp into a pureplay CRO built for biotech, biopharma, medical device and diagnostic innovators. Fortrea collaborates with both emerging and established companies to deliver agile, fit-for-purpose full service (FSO), functional service (FSP) and hybrid solutions. Fortrea provides comprehensive Phase I-IV clinical trial management, clinical pharmacology, and consulting services, backed by deep experience in more than 20 therapeutic areas. Operating in approximately 100 countries, our diverse and talented team brings scientific rigor, operational excellence, and a strong investigator site network to every trial. By combining the best of our legacy experience with forward-thinking innovation, Fortrea brings predictability to clinical trial execution and helps transform aspirations into outcomes. Together, exceptional is possible. Learn more at Fortrea.com
A family-owned company, bioMérieux has grown to become a world leader in the field of in vitro diagnostics. Our entrepreneurial adventure, begun over a century ago, is driven by an unrelenting commitment to improve public health worldwide. Since 1963, we've been paving the way in the field of in vitro diagnostics and have contributed greatly to improving public health and making the world a healthier place. The solutions that our teams imagine, develop and manufacture are key to enable healthcare professionals and industry players to make confident decisions to improve patient outcome and ensure consumer safety.
Since 1987, Eurofins has grown from one laboratory in Nantes, France to over 65,000 staff across a network of independent companies in 60 countries, operating over 950 laboratories. Performing over 450 million tests every year, Eurofins offers a portfolio of over 200,000 analytical methods to evaluate the safety, identity, composition, authenticity, origin, traceability and purity of biological substances and products, as well as providing innovative clinical diagnostic testing services, as one of the leading global emerging players in specialised clinical diagnostics testing. Ever since its IPO on the French stock exchange in 1997, Eurofins has been one of the fastest growing listed European companies.
Syneos Health® is a leading fully integrated biopharmaceutical solutions organization built to accelerate customer success. We translate unique clinical, medical affairs and commercial insights into outcomes to address modern market realities. We bring together a talented team of professionals with a deep understanding of patient and physician behaviors and market dynamics. Together we share insights, use the latest technologies and apply advanced business practices to speed our customers’ delivery of important therapies to patients. Syneos Health supports a diverse, equitable and inclusive culture that cares for colleagues, customers, patients, communities and the environment.
Biocon: Enhancing Global Healthcare Biocon Limited, publicly listed in 2004, is India's largest and fully-integrated, innovation-led biopharmaceutical company. It is an emerging global biopharmaceutical enterprise serving customers in over 120 countries. Driven by a vision to enhance global healthcare through innovative and affordable biopharmaceuticals, we have enabled access to advanced therapies for diseases that are chronic, where medical needs are largely unmet and treatment costs are high. The early anticipation of the increasing dominance of biologics in global development pipelines helped us to be ahead of the curve in crafting a differentiated product portfolio based on fermentation and recombinant technologies, which straddles fermentation-derived small molecules and biologics, both novel as well as biosimilars. The significant brand equity that we have built worldwide for our small molecule APIs across statins, immunosuppresants and other specialty products has made us a leading global supplier of these products. We have also built one of the largest and most diverse biosimilar pipelines, spanning insulins, monoclonal antibodies and other recombinant proteins that address critical chronic diseases such as diabetes, cancer and autoimmune disorders. Ranked among the Top 3 biosimilar players globally for rh-insulin and insulin glargine in volume terms, we are the first Indian company to launch a biosimilar in Japan with Insulin Glargine, which also has been approved for sale in EU and Australia. Our insulin products have made a difference to the lives of millions of people with diabetes across the globe. We now aim to provide our insulin products to ‘one in five’ people with diabetes in need of insulin-based therapy anywhere in the world within the next 10 years. We are also making a huge impact in the area of cancer care. Our biosimilar Trastuzumab, which was the first to be approved anywhere in the world and launched in India in 2014, has helped treat several thousand HER2-positive metastatic breast cancer patients. We are also the first company from India to get its biosimilar approved by the USFDA; Ogivri™, co-developed by Biocon and Mylan, is the first biosimilar Trastuzumab to be approved in the US. In addition to Trastuzumab, several of our biosimilar assets are on track for anticipated regulatory approvals in developed markets. We are also developing a pipeline of patented biologics to address global unmet medical needs. We have successfully launched a couple of novel biologics in India: Nimotuzumab for the treatment of head and neck cancer and Itolizumab to tackle psoriasis. Besides these, we have a basket of novel assets are under various stages of clinical development, including a high potential oral insulin. Through our subsidiary, Syngene, we offer a suite of integrated, end-to-end discovery and development services for novel molecular entities (NMEs) to the global life sciences sector. Ranked by the prestigious Science magazine among the Top 10 Best employers in the biotech industry, Biocon is passionately pursuing a mission to rationalize healthcare spends, enhance access to life-saving therapies and make a significant impact to global healthcare through ‘blockbuster’ drugs with the potential to benefit a billion patients.
Latest updates, reports, and threat intel affecting the global network.
An entrepreneur and healthcare advocate, has lauded the growing partnership between the National Health Insurance Authority (NHIA) and Roche Nigeria.
Commvault has appointed Bill O'Connell as the new Chief Security Officer. He joins Commvault with nearly 20 years of cybersecurity, risk, and data privacy...
Roche has signed as the founding partner to initiate the consortium which will generate genomic and clinical data from up to 7,500 African...
Prosper Africa's Tech for Trade Alliance (AT4T) is launching its latest pilot in Africa to field test a digital platform designed to increase visibility in...
A New Global Powerhouse Unveiled: TeKnowledge combines the expertise of Cytek Security, Tek Experts, and Elev8 Tek, to redefine digital...
German blue-chip companies BASF, Siemens, Henkel along with a host of others said on Wednesday they had been victims of cyber attacks.
A flaw was found in DPDK lib/vhost. Missing length validation before reading command_data in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash.
Maravel, a PHP framework oriented towards dependency injection, prior to version 10.74.0 has a high-severity Token Replay Vulnerability arising from a structural lifecycle mismatch between stateless token validation engines and high-performance relational caching layers. Any application with low cache memory that causes premature eviction to free up memory and applications running macropay-solutions/maravel-framework that utilize tymon/jwt-auth for API token authentication and blacklist management or any other package that does the same may be affected. This architectural risk might also impact native Laravel applications utilizing cache tags under specific volatile or eviction-capped environments. tymon/jwt-auth automatically probes for cache tag support. If found, it forcefully wraps 14-day token blacklist entries (jti) inside a relational tymon.jwt tag. In environments where the O(1) Atomic Lazy Eviction model is active — either natively inside Maravel-Framework v20.x or manually backported into v10.x via the explicit DI container singletons provided in PR #104 (App\Cache\TaggedCache and App\Cache\TagSet) — a strict global tracking ceiling (Container::TAGGED_CACHE_TTL_CAP_SECONDS) of 7,200 seconds (2 hours) is enforced to secure the system against memory index bloat. This ceiling forcefully truncates the 14-day blacklist lifespan down to a maximum of 2 hours, after which individual tracking keys naturally expire and disappear from the active cache window. Furthermore, because the optimized engine implements a generational version matrix to achieve O(1) flush speeds, any programmatic or manual invocation of a tag flush or reset (e.g., Cache::tags([...])->flush()) instantly bumps the internal atomic master version pointer. This shifts the computed cryptographic composite hash (sha1($this->tags->getNamespace())) for all overlapping components, rendering the entire existing index immediately unreachable. Consequently, through either natural 2-hour expiration or an intervening tag flush execution (like the cache naturally cleaning old values to free up memory), the invalidation state records are entirely wiped out. Because the tokens' physical cryptographic signatures remain structurally valid for up to 14 days, stolen, hijacked, or legitimately logged-out tokens are instantly and silently resurrected across the entire API gateway, leaving the application critically vulnerable to widespread Token Replay Attacks. Because this issue is caused by an upstream architectural assumption within the tymon/jwt-auth package rather than a core defect inside the framework, there is no direct framework version upgrade that can safely bypass this lifecycle collision without breaking business cache recycling bounds. Maravel version 10.74.0 introduced a way to backport the new fixed tagged cache from 20.x into 10.x by resolving TagSet and TaggedCache from DI, which is how this latent architectural lifecycle vulnerability was discovered. Users must apply the decoupled configuration workaround outlined below. As a workaround, make sure that cache memory size does not generate early natural evictions from cache to free up space, deleting blacklisted jwt ids before they expire. Applications must decouple flat authentication vectors from the relational tagging subsystem. This forces token identifiers to write directly to the primary cache keyspace as flat, un-tagged key-value pairs where they securely retain their unclipped 14-day lifecycle.
Sylius is an Open Source eCommerce Framework on Symfony. Starting in version 2.0.0 and prior to version 2.0.18, 2.1.15, and 2.2.6, the `GET /api/v2/shop/payment-requests/{hash}` and `PUT /api/v2/shop/payment-requests/{hash}` endpoints look up the payment request solely by the hash from the URL. No ownership check is performed against the authenticated customer or the underlying order. An attacker who obtains a payment request hash can read the payment request and, through the `payment` IRI in the response, recover the underlying order's `tokenValue` (which itself grants access to the full order, items, addresses, customer email, totals); and/or update the payment request payload (e.g. `target_path`, `after_path`). These fields are used by the front-end controller to redirect the user after the payment, so an attacker can flip them to an attacker-controlled URL and intercept the buyer. The hash is a UUID, so it has to be obtained out-of-band (logs, shared links, referrer headers, a co-located client), but once it is known no other credential is required, neither authentication nor knowledge of the order token. The creation endpoint `POST /api/v2/shop/orders/{tokenValue}/payment-requests` shares the same flaw: it resolves the target order solely from the `tokenValue` in the URL without verifying that the caller owns the order. The issue is fixed in versions 2.0.18, 2.1.15, and 2.2.6. As a workaround, add a query extension that filters the `GET` operation; decorate the `PUT` state provider, guard the `POST` creation endpoint with a command-bus middleware, and wire the services.
Sylius is an Open Source eCommerce Framework on Symfony. Starting in version 2.0.0 and prior to version 2.0.18, 2.1.15, and 2.2.6, an authorization bypass vulnerability exists in the shop account API. The `PATCH /api/v2/shop/account/orders/{tokenValue}/payments/{paymentId}` endpoint, used by an authenticated shop customer to change the payment method of an order that has been placed but not yet paid (state `STATE_NEW`), does not validate that the chosen payment method is enabled for the order's channel. The equivalent checkout endpoint (`PATCH /api/v2/shop/orders/{tokenValue}/payments/{paymentId}`) correctly rejects out-of-channel payment methods with `HTTP 422`; the account endpoint silently accepts them and returns `HTTP 200`. An authenticated customer can therefore assign any globally enabled payment method to their own placed order, including methods that the store operator has explicitly excluded from that channel. The issue is fixed in versions: 2.0.18, 2.1.15, 2.2.6 and above. As a workaround, decorate the `Sylius\Bundle\ApiBundle\Changer\PaymentMethodChangerInterface` service in the application.
Sylius is an Open Source eCommerce Framework on Symfony. Versions 2.0.0 through 2.0.17, 2.1.0 through 2.1.14, and 2.2.0 through 2.2.5 contain an improper workflow enforcement vulnerability in the cart `FormComponent`. When an order is completed while its cart page remains open, the stale LiveComponent does not detect the order’s changed state and continues to permit cart actions, allowing an authenticated customer to modify or permanently delete an already completed order. Versions 2.0.18, 2.1.15, and 2.2.6 contain a patch. As a workaround, deployments can copy the patched `FormComponent` into the application's `src/` directory and override the `sylius_shop.twig.component.cart.form` service definition to use that class.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.