Space Norway A.I CyberSecurity Scoring
31/03/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for Space Norway in 2026.
No incidents recorded for Space Norway in 2026.
No incidents recorded for Space Norway in 2026.
Latest updates, reports, and threat intel affecting the global network.
PRNewswire/ -- Following the global success of its European and American editions, CYSAT Asia concluded its first-ever regional event in...
Camilla Mathiesen, Acting Director of Defence Construction and Morten Tengs, CEO of Space Norway | Image courtesy: Space Norway.
The latest edition of the Seriously Risky Business cybersecurity newsletter, now on Lawfare.
1. The Unshakable Cybersecurity Investment Thesis. Seewald outlined four pillars that make cybersecurity a uniquely resilient and growing...
Top space and cyber influencers look back at critical cyber events of 2025, and how these events have implications for the space industry.
Geopolitical, economic, and climate change dynamics drive the need for better satcom capabilities in the strategic Arctic region.
ESA's General Support Technology Programme (GSTP) has published the (Cyber)Security Products for Space Systems Protection 2026-2028 document...
Discover the 2026 cybersecurity outlook revealing a surge in AI breaches, escalating geopolitical cyber conflicts, and emerging threats from...
Nginx Proxy Manager through 2.16.0 fails to restrict the advanced_config field to administrators, allowing non-admin users with manage permissions to inject arbitrary nginx directives. Attackers can inject malicious nginx configuration such as alias directives to serve arbitrary files or control routing for their assigned hosts.
Nginx Proxy Manager through 2.16.0 lacks rate-limiting on authentication endpoints, allowing unauthenticated attackers to make unlimited password guesses against any account. Attackers can brute-force login credentials via POST /api/tokens and subsequently guess TOTP codes via POST /api/tokens/2fa to gain full session access and administrative control.
httpdbg before 2.2.1 fails to validate URL schemes in recorded HTTP request URLs rendered as clickable links in the web interface. Attackers controlling traffic recorded by httpdbg can supply javascript: scheme URLs that execute malicious scripts in the application origin when clicked, allowing access to captured request and response data including headers and tokens.
Dozzle versions before 11.1.2 fail to sanitize container display names when building ZIP archive entry names in the log download endpoint. Attackers who can label containers can use path traversal sequences to write files outside the extraction directory when users download and extract logs.
A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects unknown code of the file /api/ZRQos/set_online_client. The manipulation of the argument ip leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.