SSOWA A.I CyberSecurity Scoring
11/05/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for Shared Services & Outsourcing Week Australasia in 2026.
No incidents recorded for Shared Services & Outsourcing Week Australasia in 2026.
No incidents recorded for Shared Services & Outsourcing Week Australasia in 2026.
We are TP Group. You’ve been calling us Teleperformance for almost 47 years. But in the AI era, the world has changed, and we had to change too to keep leading the digital business services market. We’re sharper, more modern, and even more empathetic. We are TP. Simple as that. Intelligent as always, and future-proof for the journey ahead.
iQor CXBPO™ is a trusted partner in intelligent customer experience solutions for global brands and a portfolio company of Mill Point Capital. With 47,000+ employees across 11 countries, iQor combines three decades of expertise with AI-driven innovation to optimize performance across the entire customer lifecycle. Through its three delivery pillars—CXBPO, Growth as a Service, and infinityAiQ—iQor delivers scalable solutions that drive acquisition, engagement, and retention. Powered by data intelligence and a people-first culture, iQor transforms customer interactions into measurable growth. Recognized as a Great Place to Work® and a leader in CX excellence, iQor empowers brands to grow smarter. Recent acquisitions of JumpCrew and OP360 further expand iQor’s global capabilities across sales, marketing, and customer experience delivery. Learn more at iQor.com.
We’re passionate about creating customers for life by designing experiences that elevate your brand. As your full-service CX partner from strategy to execution, we blend proven performance, industry-leading expertise and the right technology that delivers real results and limitless possibilities. What makes us different: We don't just deliver customer experiences—we pioneer them. Bold enough to challenge convention, relentless in delivering results, connected through deep client relationships, and true to our values of integrity and authenticity. Our global reach includes 100,000 professionals across 17 countries, serving 250+ brands in 75+ languages. Ready to be part of a team that's curious, creative, connected, and committed? Check out our careers page: alorica.com/careers
TaskUs delivers outsourced digital services that power the companies shaping the future. By combining specialized human talent and intelligent technology, we solve complex operational challenges for global category leaders within AI, autonomous vehicles (AV), robotics, social media, financial services, healthcare, and beyond. We enable our clients to elevate their customer experience, protect their platforms, and grow their brands.
Intelcia is a global player in outsourcing, which has supported its clients for 20 years combining talents, technologies, and processes to offer a tailor-made service and skills that meet international standards. In order to allow its customers to focus on their challenges and core business, Intelcia offers a global offer on shore, near shore and offshore around a cluster of 4 main solutions: Multichannel CX Solutions, Business Processes, IT Solutions, and Innovative & Consulting Solutions. Present in Europe (France, Portugal, Spain, United Kingdom), in North Africa (Morocco, Egypt) in Sub-Saharan Africa (Cameroon, Senegal, Ivory Coast), in the Indian Ocean (Mauritius, Madagascar), in North America (United States United) in Latin America (Colombia, Chile) and the Caribbean (Jamaica, Dominican Republic), the group currently has more than 35,000 employees, spread across 85 operational centers. Intelcia has announced its ambition to be in the top 10 global outsourcing players and to reach 1.5 billion euros in turnover by 2025.
Singapore-headquartered TDCX provides transformative digital CX solutions, enabling world-leading and disruptive brands to acquire new customers, to build customer loyalty, and to protect their online communities. TDCX helps clients achieve their customer experience aspirations by harnessing technology, human intelligence, and its global footprint. It serves clients in fintech, gaming, technology, travel and hospitality, digital advertising and social media, streaming and e-commerce. TDCX’s expertise and strong footprint in Asia have made it a trusted partner for clients, particularly high-growth, new economy companies, looking to tap the region’s growth potential. TDCX’s commitment to delivering positive outcomes for our clients extends to its role as a responsible corporate citizen. Its Corporate Social Responsibility program focuses on positively transforming the lives of its people, its communities, and the environment. TDCX employs more than 19,000 employees across 34 campuses globally, specifically in Brazil, Colombia, Hong Kong, India, Japan, Malaysia, Mainland China, Philippines, Türkiye, Singapore, South Korea, Spain, Thailand, Türkiye, and Vietnam. For more information, please visit www.tdcx.com. Community Guideline: We respect all feedback and do not remove comments unless they are deemed as spam or disrespectful to our community. We may remove repetitive posts to keep our pages clear and easy to navigate while facilitating transparent discussion.
Foundever™ is a global leader in the customer experience (CX) industry. With 170,000 associates across the globe, we’re the team behind the best experiences for +750 of the world’s leading and digital-first brands. Our innovative CX solutions, technology and expertise are designed to support operational needs for our clients and deliver a seamless experience to customers in the moments that matter. Supporting +9 million customer conversations every day in +60 languages across 45 countries, Foundever combines global strength and scale with the agile, entrepreneurial approach of our founder-led culture, enabling companies of all sizes and industries to transform their CX. Get to know us at www.foundever.com
A global customer experience (CX) management solutions provider, Startek® delivers best-in-class omnichannel CX, digital transformation and enterprise tech services for leading brands, from Fortune 500s to fast-growing startups. Our innovation and expertise ensure CX excellence across traditional and non-traditional channels. Working both in-center and via work at home, our 40,000 CX experts are present in 13 countries ensuring global reach and local connection no matter where your customers are based. The award-winning Startek Cloud, a hybrid-cloud platform integrated with AI capabilities, empowers remote and home-based team members, to deliver business agility and continuity. At Startek we believe that every organization can deliver meaningful customer experience (CX) at every touchpoint by harnessing the power of empathy. Empathy is looking through your customer’s eyes to understand the world as they see it and leveraging that understanding to build human-centric experiences that create an effortless 1-2-1 connection. Applying empathy across data, technology and people, we enable our clients to build long-term, profitable customer relationships by closing the CX gap. To find out more visit www.startek.com.
Offering flexible solutions for all of the UAE’s staffing needs since 2001, Transguard Group is the region’s most trusted expert in security, facilities management, cash services and white-collar staffing, and more. With an annual turnover of AED 3.2 billion in FY24/25, Transguard’s expertise is in supplying the right people for its clients, precisely when and where they’re needed. To learn more, visit www.transguardgroup.com.
Latest updates, reports, and threat intel affecting the global network.
A remote attacker who controls a container registry may be able to direct a client's token request to a host of the attacker's choice, and disclose the victim's registry credentials to that host. This vulnerability is addressed in containerization version 0.41.0.
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the djust live transport resolves the LiveView to mount from a client-supplied dotted path by calling `__import__(module_path, ...)`. The module is imported — running its top-level code (import side effects) — before the framework checks that the resolved object is a `LiveView` subclass and before any per-view authentication. The `LIVEVIEW_ALLOWED_MODULES` allowlist that should contain this is fail-open (`if allowed_modules:` — skipped when the setting is unset, the framework default) and uses loose `startswith` matching. An unauthenticated WebSocket client (the WS handshake does not require auth; per-view auth runs only after import + instantiate) can therefore send a `mount` / `live_redirect_mount` / `url_change` frame (or an SSE mount) with `view = "<any.importable.module>.AnyName"` and cause the server to import — and execute the top-level code of — any importable Python module by name. Version 1.0.7 fixes the issue with a fail-closed resolution gate (`djust._view_resolution.is_view_import_allowed`): a client view path resolves only if (a) its module is already loaded (`sys.modules` — so resolving runs no new code; URL-routed views loaded by URLconf at startup keep working with zero config) or (b) it matches `LIVEVIEW_ALLOWED_MODULES` on a module-segment boundary (explicit opt-in for lazily-imported views). The gate runs before `__import__` at all three sinks (+ defense-in-depth inside `_instantiate_view`). As a workaround, set `LIVEVIEW_ALLOWED_MODULES` to the narrow list of modules that contain your mountable LiveView classes. (Note: pre-patch the allowlist is `startswith`-matched and the import still precedes the subclass check, so this is mitigation, not a complete fix.)
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, djust's per-object authorization (`get_object` + `has_object_permission`, ADR-017) was enforced on the WebSocket mount and event paths but not on three other render entry points: (a) the initial HTTP GET render, (b) SPA `url_change` navigation, and (c) `{% live_render %}` embedded child views. An authenticated user could therefore view (and on some paths act on) an object they are not authorized for by loading the page directly, navigating to it via SPA url-change, or composing it as an embedded child — a classic IDOR / broken object-level access control on object-scoped views. This is fixed in djust 1.0.7. All render entry points now route through a shared `enforce_object_permission` chokepoint: HTTP GET returns 403, `url_change` emits a `permission_denied` frame and skips the render, and `{% live_render %}` (eager + lazy) refuses the embed. Views without a custom `get_object` are unaffected (no-op). No reliable workaround short of upgrading. Do not expose object-scoped views through the HTTP-GET / url_change / live_render paths until patched.
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the WebSocket `handle_mount` and `ViewRuntime._build_request` rebuild an `HttpRequest` via `RequestFactory().get(...)` with no `HTTP_HOST`, so `request.get_host()` defaulted to `"testserver"` on the live path. Host/subdomain/domain `TenantResolver`s then misresolved the tenant — `None` on the live path while the HTTP path resolved correctly. With `STRICT_MODE=False` the tenant-scoped managers returned unscoped rows (cross-tenant disclosure); with the default they returned an empty queryset (broken tenancy). This is fixed in djust 1.0.7. The handshake Host is extracted from the ASGI scope, validated against `ALLOWED_HOSTS` (the same logic as the CSWSH Origin gate, parsed with Django's `split_domain_port` so malformed Hosts are rejected at the boundary), and propagated — with the TLS scheme — into the reconstructed request, so live-path tenant resolution matches HTTP exactly. There is no known workaround on the live path short of upgrading. Users are most exposed when combined with `STRICT_MODE=False`.
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, when a Django `Model` instance is assigned to a public view attribute, djust serialized it to the client with no sensitive-field denylist — sending fields such as `password` (the hash), privilege flags (e.g. `is_staff` / `is_superuser`), tokens, and other PII to the browser. Because exposing model objects to templates is a normal djust pattern, this could leak credentials/PII without the developer realizing the full object crossed the wire. This is fixed in djust 1.0.7. Model serialization applies a secure-by-default sensitive-field denylist (password/hash/token/secret-style fields and known privilege flags are withheld) with an identity-subset fallback. As a workaround, keep `Model` instances on `_private` attributes and expose only the specific fields needed, until patched.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.