SAL A.I CyberSecurity Scoring
22/02/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for SmartLynx Airlines Ltd in 2026.
No incidents recorded for SmartLynx Airlines Ltd in 2026.
No incidents recorded for SmartLynx Airlines Ltd in 2026.
Welcome aboard Singapore Airlines on LinkedIn. Discover travel inspirations, business travel tips, cultural insights, our latest updates, and more. Singapore Airlines is a global company dedicated to providing air transportation services of the highest quality and to maximising returns for the benefit of its shareholders and employees. We have come a long way since our founding in 1972, evolving from a regional airline to one of the most respected travel brands around the world. We fly one of the youngest aircraft fleets in the world to destinations spanning a network across five continents, with the famed Singapore Girl as our internationally-recognisable icon providing the high standards of care and service that customers have come to expect of us. Please refer to https://bit.ly/2Z2MVN1 for guidelines on our social media channels.
Marhaba! Welcome to Etihad Airways. We are proud to be the national airline of the UAE, flying to 100+ destinations via Abu Dhabi. At Etihad, we don't stop at the border of what's possible, we go beyond it. Proudly inspired by our Emirati identity, we are dedicated to delivering extraordinary travel experiences, helping our guests realise their ambitions. Our journey started in 2003. Since then, we have proudly helped millions of guests travel the globe. We are honoured to have had over 12 million valued members join our Etihad Guest loyalty programme. Diversity is key in driving us forward. At 12,000+ employees representing 140+ nationalities, our team comes together to deliver exceptional experiences at every stage of the journey. If you share our spirit of ambition and would like to reach new heights, visit https://careers.etihad.com/
Red. Hot. Spicy. That’s not just our tagline, it’s how we fly. Red reflects the bold spirit we bring to every journey, energetic, passionate, and full of heart. Hot captures the warmth of our service and the vibrant destinations we connect. Spicy is our drive to keep travel exciting through innovation and industry-firsts. Since 2005, SpiceJet has been shaping India’s aviation journey, connecting people, places, and possibilities. We pioneered regional air connectivity under the UDAN scheme, making air travel more accessible across the country. We led several industry-firsts, including India’s first biofuel-powered flight, the first seaplane, and in-flight entertainment on personal devices. Our premium economy product, SpiceMax, brings added comfort, priority services, and hot meals, redefining low-cost travel. At SpiceJet, we fly with passion, powered by people, always Red. Hot. Spicy.
People. Passion. Pride. These have driven our team since 1833. Since that time, we have developed to become a critical partner in the global aviation industry, delivering time-critical logistics services at over 350 locations in 65 countries, across six continents. But at the heart of our business is our people. Whether serving our clients landside or airside, above or below the wing, our teams are agile, dedicated, and eager to help. Safety and security are at the heart of everything we do. We have a duty of care to look after each other, our customers and their customers. And we care about the communities in which we operate. We understand that what we do makes a difference at many levels. Our services help keep people moving with everyone playing their part, delivering with precision, round the clock, every minute of every day. In this we take immense pride, and it strengthens our determination to deliver. Our core services include ground, air cargo and fuel services.
Depuis 1933, la compagnie Air France porte haut les couleurs de la France à travers le monde entier. Avec une activité, répartie entre le transport aérien de passagers, le fret, la maintenance et l’entretien aéronautique, Air France est un acteur majeur du secteur aérien. Plus de 45 000 collaborateurs se mobilisent au quotidien pour proposer à chaque client, une expérience de voyage unique. Air France, KLM Royal Dutch Airlines et Transavia forment le Groupe Air France-KLM. Le Groupe s’appuie sur la force de ses hubs de Paris-Charles de Gaulle et d’Amsterdam-Schiphol pour offrir un vaste réseau international. Son programme de fidélité Flying Blue rassemble plus de 17 millions d’adhérents. Air France et KLM sont membres de l’alliance SkyTeam qui compte au total, 19 compagnies aériennes. Air France place la santé et la sécurité de ses clients et de ses personnels au cœur de ses préoccupations. Avec Air France Protect, son engagement sanitaire, la compagnie a instauré les mesures sanitaires les plus strictes pour un voyage en toute sécurité. Air France s’est fixé des objectifs ambitieux en matière de développement durable et travaille à réduire et compenser ses émissions de CO2. Dans le cadre du programme Horizon 2030, la compagnie s’est engagée à réduire de 50% ses émissions de CO2 par passager-kilomètre d’ici à 2030 à travers des investissements importants en faveur du renouvellement de sa flotte par des avions de nouvelle génération, l’utilisation de solutions innovantes pour réduire sa consommation de carburant ou encore l’utilisation progressive de carburants alternatifs durables. Plus d'informations sur : corporate.airfrance.com
JetBlue — New York's Hometown Airline — was born at JFK in 1999 with the mission of bringing humanity back to air travel, and is now a leading carrier in NYC, Boston, Fort Lauderdale, Orlando, and San Juan. JetBlue serves 40M+ customers annually, with low fares and award-winning service to 100+ destinations on both sides of the Atlantic. Questions? We’ve got you. Visit jetblue.com
Turkish Airlines has soared to new heights since its first flight in 1933, becoming the airline that connects more countries than any other. Our commitment to excellence is reflected in the world-class service, comfort, and innovative travel experience we offer, designed to elevate every journey. With a diverse team of professionals from around the world, we are proud to be a truly global company, bringing together different perspectives and expertise to deliver an unparalleled travel experience. Powered by an expansive and unrivaled network, we bridge continents and cultures, providing a seamless and premium journey that reflects our passion for aviation. Each flight carries the promise of comfort and the prestige of flying under the Turkish flag, with a dedication to delivering the best to our passengers. Our story is one of continuous growth, driven by a commitment to inspire new discoveries, and set the standard for global air travel.
Based in Dubai, the Emirates Group employs over 120,000 staff from more than 170 nationalities. The Emirates Group’s extensive and diverse international portfolio includes the world’s largest international airline, Emirates, and one of the largest combined air services provider in the world, dnata. Within the Group there are a diverse range of businesses which offer a wide spectrum of career opportunities, all of which can be explored through the Group's dedicated careers website, emirates.com/careers Essential to the Group’s ongoing success is the employment of high-quality people who benefit from living and working in Dubai, a modern cosmopolitan city offering one of the most desirable lifestyles in the world. The Emirates Group employees come from over 170 nationalities, receive tax-free salary and benefits package, and are offered professional development opportunities to further their careers with the organisation. If you are a high-performer, seeking a career challenge, personal and professional development, and reward and recognition for your contribution, then the Emirates Group is the perfect opportunity for you. To find out more about the career opportunities the Emirates Groups offers and how to become part of our future growth and rapid success, visit emirates.com/careers
We’re on a mission to make low-cost travel easy. Whatever your role, you’ll connect millions of people to what they love using Europe’s best airline network, great value fares, and friendly service. And to help us get there we’ll give you everything you need to make a personal impact on our growing business. We believe in sharing new opportunities, stepping up to challenges, and supporting each other with our Orange Spirit. Get ready to make a difference. Make it easyJet.
Latest updates, reports, and threat intel affecting the global network.
Commercial aviation dispute establishes precedent for ACMI agreement enforcement and summary judgement applications.
Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.22 and 4.0.0-RC1 through 4.17.15, an attacker with only a GitHub account can plant a JavaScript payload in a craftcms/cms issue title. When a Craft admin uses the CraftSupport widget’s "Give feedback" screen and types a search term that returns the poisoned issue, the payload executes in the admin’s control panel session. No control panel account or elevated privileges are required on the attacker’s side. This issue has been fixed in versions 4.17.16 and 5.9.23.
Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.21 and 4.0.0-RC1 through 4.17.14, theAssetsController::actionDeleteFolder() only requires the deleteAssets:<volume-uid> permission for the target folder. It never enforces deletePeerAssets:<volume-uid>, even though Assets::deleteFoldersByIds() cascades deletion to every descendant folder and every asset inside, regardless of the uploader's assigned privileges. A low-privilege user who has been granted folder-management rights on a shared volume can therefore destroy assets uploaded by other users (peer assets), bypassing the per-asset peer-permission check that the sibling actionDeleteAsset endpoint correctly applies. This issue has been fixed in versions 4.17.15 and 5.9.22.
Craft CMS is a content management system (CMS). Versions 5.0.0-RC1 through 5.9.20, and 4.0.0-RC1 through 4.17.13 contain an authorization issue in the AssetsController::actionReplaceFile that can delete a source asset without source delete permission by supplying both assetId and sourceAssetId. AssetsController::actionReplaceFile() supports replacing a target asset file using another existing asset as the source. The action loads: assetId -> $assetToReplace and sourceAssetId -> $sourceAsset, then enforces replace permissions using ($assetToReplace ?: $sourceAsset). When both IDs are provided, this expression resolves to the target asset so no permission check is performed against the source asset volume. When both assets are present, Craft copies the source file into the target and then deletes the source asset. There is no deletion check for for the source asset. An authenticated user who can replace files in one volume can delete assets in another volume where they do not have delete permission, as long as they can obtain a sourceAssetId, leading to broken content references and data loss. This issue has been fixed in versions 4.17.14 and 5.9.21.
Description: To issue and renew TLS certificates on behalf of customers, Cloudflare's Universal SSL feature automatically manages the CAA RRset for the customer's zone. This auto-managed RRset is permissive by design (e.g. 'issue "letsencrypt.org"' without parameters). On Universal SSL zones, Cloudflare's authoritative DNS serves this auto-managed RRset at query time, superseding any customer-configured CAA records on the zone. When a customer publishes a stricter CAA record using the RFC 8657 accounturi or validationmethods parameters, the Certificate Authority does not observe those parameters when evaluating the served RRset under RFC 8659. As a result, the RFC 8657 account-binding and validation-method-binding protections are not enforced end-to-end on Universal SSL zones. Successful exploitation could result in issuance of a browser-trusted TLS certificate to an attacker, enabling MITM against the affected domain. Exploitation is non-trivial in practice: an attacker would need to hold an ACME account at one of the Certificate Authorities in the served CAA RRset and to simultaneously satisfy domain control validation across the multiple geographically distinct Network Perspectives the CA relies on for Multi-Perspective Issuance Corroboration. Cloudflare prefixes are anycast-announced from hundreds of locations globally, raising the bar against single-vantage-point BGP hijacks. Any resulting misissuance of a browser-trusted certificate is subject to Certificate Transparency logging required by major browsers, and would be visible to CT monitoring. Mitigation: Customers requiring strict RFC 8657 enforcement need to disable Universal SSL on the affected zone. Universal SSL's automatic CAA management and customer-set RFC 8657 accounturi and validationmethods enforcement are mutually exclusive by the nature of the issue, so there is no in-product workaround that preserves both. Certificate Transparency monitoring is recommended for all customers as a general detection control. Credits: David Osipov (ORCID: https://orcid.org/0009-0005-2713-9242), independent researcher
Out of bounds read and write in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.