SCAS A.I CyberSecurity Scoring
01/03/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for SoftwareOne Cloud & Application Services in 2026.
No incidents recorded for SoftwareOne Cloud & Application Services in 2026.
No incidents recorded for SoftwareOne Cloud & Application Services in 2026.
Founded in 1982 by a small group of entrepreneurs, Softtek started out in Mexico providing local IT services, and today is a global leader in next-generation digital solutions. The first company to introduce the Nearshore model, Softtek helps Global 2000 organizations build their digital capabilities constantly and seamlessly, from ideation and development to execution and evolution. Its entrepreneurial drive spans 20+ countries and more than 15,000 talented professionals. For more information on what we do, who we are, and career opportunities, visit www.softtek.com / Follow us on Instagram (@softtekofficial), on Twitter (@Softtek), and be our fan on Facebook www.facebook.com/softtek.
eClerx is a productized services company, bringing together people, technology and domain expertise to amplify business results. Our mission is to set the benchmark for client service and success in our industry. Our vision is to be the innovation partner of choice for technology, data analytics and process management services.
Capita is an outsourcer, helping clients across the public and private sectors run complex business processes more efficiently, creating better consumer experiences. Operating across eight countries, Capita’s 34,000 colleagues support primarily UK and European clients with people-based services underpinned by market-leading technology. We’re a vital support service for our clients, enabling the everyday interactions that we expect to run seamlessly, to run seamlessly. A publicly listed business with adjusted revenue of £2.4bn, Capita’s areas of focus are Central Government, Local Public Service, Defence, Learning, Fire & Security, Contact Centres and Pensions Solutions. We’re embracing change to respond to the ever-changing needs of society, creating better outcomes for all our stakeholders.
Oracle is a global leader in AI, delivering the cloud infrastructure, data, and applications that organizations across the world trust to successfully achieve business outcomes at scale. Oracle Cloud Infrastructure (OCI) provides fast, flexible, scalable AI infrastructure. With superior compute performance and network design, a comprehensive choice of AI services for developing and orchestrating agentic AI workflows at scale, and unrivaled data control, security, privacy, and governance, OCI is designed for AI workloads. It also gives customers the flexibility to run their workloads wherever they need by supporting public cloud, multicloud, hybrid cloud, sovereign, and on-premises deployments. The Oracle AI Database is the only database with AI natively built in everywhere. By bringing AI to where data lives, the Oracle AI Database delivers enterprise-grade AI securely, cost-effectively, and at scale. In-database machine learning and vector search enable AI models to run where data resides. Support for multi-modal data (structured, unstructured, graph, vector) enables richer AI use cases. The Oracle AI Data Platform enables organizations to build, deploy, and govern AI agents and applications on top of private, secure, and distributed enterprise data. This enables organizations to operationalize AI without compromising data security or control. Oracle Applications embed AI directly into business workflows and industry processes to ensure AI is delivered in context, where work happens. They include the only applications suite that brings AI to every aspect of a business, with AI-powered ERP, HCM, and CX applications, and the Oracle Health Suite which provides applications for managing the entire healthcare ecosystem. Oracle also provides industry-specific cloud application suites for more than two dozen industries and NetSuite, the world’s first cloud computing company. This LinkedIn page serves as Oracle’s official global company page.
Reply [EXM, STAR: REY] specialises in the design and implementation of solutions based on new communication channels and digital media. As a network of highly specialised companies, Reply defines and develops business models enabled by the new models of AI, big data, cloud computing, digital media and the internet of things. Reply delivers consulting, system integration and digital services to organisations across the telecom and media; industry and services; banking and insurance; and public sectors.
GDIT is a global technology and professional services company that delivers solutions, technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 30,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading capabilities in digital modernization, AI/ML, Cloud, Cyber and application development. GDIT is part of General Dynamics, a global aerospace and defense company. We have shared our clients’ sense of purpose for over half a century and have a unique understanding of their missions, complex environments, and a rapidly changing world. Together with our clients, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology.
NCS, a subsidiary of Singtel Group, is a leading technology services firm with presence in Asia Pacific and partners with governments and enterprises to advance communities through technology. Combining the experience and expertise of its 14,000-strong team across 56 specialisations, NCS provides differentiated and end-to-end technology services to clients with its NEXT capabilities in digital, data, cloud and platforms, as well as core offerings in application, infrastructure, engineering and cybersecurity. NCS also believes in building a strong partner ecosystem with leading technology players, research institutions and start-ups to support open innovation and co-creation. For more information, visit ncs.co.
Coforge is a global digital services and solutions provider that fuses deep domain expertise with emerging technologies to deliver real-world business impact. With a sharp focus on select industries and an execution intensity that’s uniquely our own, Coforge has emerged as the 7th largest Indian IT services firm, with a revenue growth rate nearly 8x the industry average. We help enterprises transform into intelligent, high-growth businesses through a wide gamut of digital transformation capabilities and deep experience across industries, including Agentic AI, Cloud, Data & Analytics, Low-Code Platforms, Intelligent Automation, Cybersecurity, and the setup and scaling of Global Capability Centers (GCCs). We deliver a wide range of digital engineering services—enabling modernization, operational agility, customer experience transformation, and industry-specific platform solutions. We operate across 24 countries, with 30 global delivery centers and a thriving workforce of 33,497 employees. “We are somewhat atypical in our approach to solving business problems. We are specialists, not just engineers and technologists, who spend an inordinate amount of time understanding the targeted functional spaces that we focus on.” — Sudhir Singh, CEO Coforge is a certified Great Place to Work® (5 years in a row), recognized for excellence in Employee Engagement, Learning & Development, and Corporate Social Responsibility. Our Greater Noida HQ runs entirely on 100% green energy. Through initiatives like The Coforge Public Library, we provide free, inclusive access to knowledge in Noida and Gurugram—and intend to expand this network across India. Coforge has been recognized by leading analysts and advisory firms, including Gartner, Forrester, Everest Group, Zinnov, and more.
We make the experience of travel better for everyone, everywhere by inspiring innovation, partnerships and responsibility to people, places and planet. Our technology powers the travel and tourism industry. We inspire more connected ways of thinking, centered around the traveler. Our platform connects the travel and hospitality ecosystem. We are making travel a force for social and environmental good. We are passionate about travel. With a unique perspective, at the heart of our industry, we are redesigning the travel of tomorrow.
Latest updates, reports, and threat intel affecting the global network.
Combines SoftwareOne's global services and cloud capabilities with Crayon's channel-centric heritage and partner expertise.
An update from SoftwareOne Holding Ltd. ( (CH:SWON) ) is now available. SoftwareOne Holding AG, a global software and cloud solutions...
The collaboration with AWS represents a unified commitment to accelerate cloud adoption and GenAI innovation across Asia Pacific following...
SoftwareOne and AWS have entered into a multi-year agreement to support digital transformation, cloud adoption, and genAI innovation across...
SINGAPORE – Media OutReach Newswire – 30 October 2025 – SoftwareOne, a global leader in cloud and software services, today announced a...
As a global provider of end-to-end software and cloud technology solutions and a Microsoft partner, SoftwareOne says that it is closely...
Former SoftwareOne trio aiming to help "accidental licensing partners" tap into CSP opportunity.
Summary. SoftwareOne has distribution relationships with more than 7,500 software and cloud vendors, including many of the world's largest...
Merger of Cloud Companies with Offices in Ukraine: SoftwareOne Acquires Crayon · The merged company will operate under the SoftwareOne brand and...
Graylog is a free and open log management platform. From 6.2.0 until 6.3.12, 7.0.7, and 7.1.2, the DELETE /users/{userId}/tokens/{idOrToken} endpoint implemented by UsersResource.revokeToken() in graylog2-server/src/main/java/org/graylog2/rest/resources/users/UsersResource.java checks USERS_TOKENREMOVE permission against the attacker-controlled userId path parameter before resolving the token selected by idOrToken. An authenticated user can provide an authorized userId while accessTokenService.loadById() or accessTokenService.load() resolves a token belonging to another user, including a service account or administrator, after which accessTokenService.destroy() deletes that token without checking AccessToken.getUserName(). The issue does not expose token contents, but unauthorized deletion causes integrity impact and can disrupt access-token-based integrations. This issue is fixed in versions 6.3.12, 7.0.7, and 7.1.2.
MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb does not gate clear-text password authentication plugins on transport encryption because the AuthenticationPlugin interface has no capability for a plugin to require a secure connection. A hostile or man-in-the-middle MariaDB server can send an AuthSwitchRequest naming mysql_clear_password or dialog (PAM) over a plain-TCP unencrypted connection, and AuthenticationFlow permits ClearPasswordPluginFlow or PamPluginFlow to return the user's password as cleartext bytes on the wire. The disclosed credentials can subsequently be used to authenticate directly to the database server. This issue is fixed in version 1.4.1.
MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb encodes and decodes all character data under the assumption that the connection character set is UTF-8. A server can announce a mid-session change to character_set_client through the OK-packet session-state-tracking mechanism, including through SET NAMES executed by a stored routine or trigger, server configuration, or a hostile or man-in-the-middle server. If the new character set is not UTF-8, the driver continues to exchange UTF-8 while the server interprets the same bytes under a different encoding, causing silent data corruption and a client/server charset-confusion mismatch that can defeat byte-wise quoting or escaping. The fix accepts only utf8, utf8mb3, or utf8mb4 after initialization; any other value raises R2dbcNonTransientResourceException with SQLState 08000 and closes the connection. This issue is fixed in version 1.4.1.
MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, the connector encodes and decodes protocol text and performs client-side escaping under the assumption that the connection character set is UTF-8. The server can report a mid-session change to character_set_client through OK-packet session-state tracking, including a change caused by SET NAMES, a stored routine or trigger, server configuration, or a hostile server. If character_set_client changes to a non-UTF-8 value, the driver continues to read and write UTF-8 while the server interprets the same bytes under another encoding, causing silent data corruption and a client/server charset-confusion mismatch that can defeat byte-wise quoting or escaping. The fix accepts only utf8, utf8mb3, or utf8mb4 after initialization; any other value causes SQLException with SQLState 08000 and closes the connection. This issue is fixed in versions 2.7.14, 3.3.5, 3.4.3, and 3.5.9.
MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, PAM dialog authentication can be coerced into transmitting the account password over an insecure connection. The mysql_clear_password plugin is gated behind a secure transport, but the sibling PAM handler SendPamAuthPacketFactory, named dialog by the server, does not declare that requirement and inherits the default secure-required value false; older branches implement the same affected behavior in SendPamAuthPacket. A hostile or man-in-the-middle server can send an Authentication Switch Request for dialog over plain TCP, causing the driver to return the user's password in cleartext when sslMode=DISABLE and restrictedAuth=null, which is the default configuration. Properly verified TLS and local Unix sockets are not exposed to this transport vector. This issue is fixed in versions 2.7.14, 3.3.5, 3.4.3, and 3.5.9.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.