SWACDS A.I CyberSecurity Scoring
28/12/2025
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for Swiss WorldCargo - Air cargo division of SWISS in 2026.
No incidents recorded for Swiss WorldCargo - Air cargo division of SWISS in 2026.
No incidents recorded for Swiss WorldCargo - Air cargo division of SWISS in 2026.
At Saudia Group, we're on a mission to inspire people to go beyond borders. Our purpose is rooted in unlocking human potential and connecting the world in ways never thought possible. We are committed to reshaping the aviation ecosystem in our region and beyond, by embracing innovation and a customer-centric approach. Our Vision: To be the preferred choice of a customer-centric aviation ecosystem from the region. Our Mission: By driving synergies, unlocking opportunities, and embracing a tech-first mindset, we will maximize sustainable value creation, and earn the loyalty of our people, customers, and communities. Our Core Values: - Customer Centricity - People - Heritage & Innovation - Collaboration - Collective Accountability - Excellence These values are the guiding principles that define our culture and drive our decisions. We are dedicated to nurturing a workplace where everyone feels valued and empowered to contribute to our shared vision. Join us on this exhilarating journey of redefining aviation, breaking boundaries, and fostering connections across the globe.
gategourmet has been serving the airline industry for more than 70 years and has become the world’s largest independent provider of airline catering and logistics. We prepare tens of thousands of tasty, nutritious passenger meals and snacks daily and reliably service more than 2 million flights a year in “last mile” operations worldwide. gategourmet is the core business behind gategroup, the leading independent global provider of products, services and solutions related to an airline passenger’s onboard experience. Our 27,000 employees work to serve people on the move with their expertise in catering and hospitality, provisioning and logistics, and onboard solutions. We serve over 250 carriers in more than 30 countries and provide our customers with expertise and solutions tailored to their guests, service offerings, and geographic regions.
Welcome to AISATS! As India's leading gateway services company headquartered in Mumbai and operating in Delhi, Bengaluru, Hyderabad, Thiruvananthapuram, Mangaluru and Ranchi airports, we at AISATS, care for our client airlines and their passengers. Our customers know when they do business with us, they do business with our 15000+ value creators, because our people are passionate believers of the company’s vision, mission and core values. Our comprehensive gateway services that include ground handling and air cargo handling are managed by a team of experts that understand the importance of your business. That’s why, every time we serve a passenger, we partner with our customer airlines to create a new travel memory. Every piece of cargo held, is our promise to deliver it carefully and every ramp support offered is a commitment to safe and secure operations. At AISATS we place purpose at the core of everything we do. Every day, everyone comes together to pursue our promise of service excellence. No matter what the ask, we always deliver. We are AISATS. People First - Customer Focused - Purpose Driven
Welcome aboard Singapore Airlines on LinkedIn. Discover travel inspirations, business travel tips, cultural insights, our latest updates, and more. Singapore Airlines is a global company dedicated to providing air transportation services of the highest quality and to maximising returns for the benefit of its shareholders and employees. We have come a long way since our founding in 1972, evolving from a regional airline to one of the most respected travel brands around the world. We fly one of the youngest aircraft fleets in the world to destinations spanning a network across five continents, with the famed Singapore Girl as our internationally-recognisable icon providing the high standards of care and service that customers have come to expect of us. Please refer to https://bit.ly/2Z2MVN1 for guidelines on our social media channels.
We are the leading airline in South America with the largest destinations, frequencies and aircraft fleet offer. We have the largest network of domestic destinations in five South American markets: Brazil, Chile, Colombia, Ecuador and Peru, and international operations in Latin America, Europe, the United States, Oceania and the Caribbean. Discover your next destination at latam.com Follow us on: Facebook: www.facebook.com/LATAMAirlines Twitter: www.twitter.com/LATAMAirlines YouTube: www.youtube.com/LATAMAirlines_EN Instagram: www.instagram.com/LATAMAirlines
Based in Dubai, the Emirates Group employs over 120,000 staff from more than 170 nationalities. The Emirates Group’s extensive and diverse international portfolio includes the world’s largest international airline, Emirates, and one of the largest combined air services provider in the world, dnata. Within the Group there are a diverse range of businesses which offer a wide spectrum of career opportunities, all of which can be explored through the Group's dedicated careers website, emirates.com/careers Essential to the Group’s ongoing success is the employment of high-quality people who benefit from living and working in Dubai, a modern cosmopolitan city offering one of the most desirable lifestyles in the world. The Emirates Group employees come from over 170 nationalities, receive tax-free salary and benefits package, and are offered professional development opportunities to further their careers with the organisation. If you are a high-performer, seeking a career challenge, personal and professional development, and reward and recognition for your contribution, then the Emirates Group is the perfect opportunity for you. To find out more about the career opportunities the Emirates Groups offers and how to become part of our future growth and rapid success, visit emirates.com/careers
Ryanair Holdings plc, Europe’s largest airline group, is the parent company of Ryanair DAC, Lauda, Buzz and Ryanair UK. Carrying 160m+ guests p.a. on over 3,000 daily flights to/from 225 airports. Plan to carry 225m+ guests p.a. by 2026. Unfortunately, we are unable to answer customer service queries through LinkedIn. Please contact our customer service department through our website: http://www.ryanair.com/ie/questions/contacting-customer-service/ alternatively you can contact us through Twitter @askRyanair or on facebook.com/Ryanair
Depuis 1933, la compagnie Air France porte haut les couleurs de la France à travers le monde entier. Avec une activité, répartie entre le transport aérien de passagers, le fret, la maintenance et l’entretien aéronautique, Air France est un acteur majeur du secteur aérien. Plus de 45 000 collaborateurs se mobilisent au quotidien pour proposer à chaque client, une expérience de voyage unique. Air France, KLM Royal Dutch Airlines et Transavia forment le Groupe Air France-KLM. Le Groupe s’appuie sur la force de ses hubs de Paris-Charles de Gaulle et d’Amsterdam-Schiphol pour offrir un vaste réseau international. Son programme de fidélité Flying Blue rassemble plus de 17 millions d’adhérents. Air France et KLM sont membres de l’alliance SkyTeam qui compte au total, 19 compagnies aériennes. Air France place la santé et la sécurité de ses clients et de ses personnels au cœur de ses préoccupations. Avec Air France Protect, son engagement sanitaire, la compagnie a instauré les mesures sanitaires les plus strictes pour un voyage en toute sécurité. Air France s’est fixé des objectifs ambitieux en matière de développement durable et travaille à réduire et compenser ses émissions de CO2. Dans le cadre du programme Horizon 2030, la compagnie s’est engagée à réduire de 50% ses émissions de CO2 par passager-kilomètre d’ici à 2030 à travers des investissements importants en faveur du renouvellement de sa flotte par des avions de nouvelle génération, l’utilisation de solutions innovantes pour réduire sa consommation de carburant ou encore l’utilisation progressive de carburants alternatifs durables. Plus d'informations sur : corporate.airfrance.com
It all starts here. 23 years ago, a dream took flight - shaping and forever changing the travel industry in Asia. The idea was simple: Make flying affordable for everyone. We made that dream happen. We started an airline in 2001. Today, we’ve evolved to become something much bigger. We’re now a world-class brand, a leading Asean airline, a digital travel and lifestyle platform; and we’re not stopping. If you’re passionate about connecting people and transforming lives, we want you onboard. When it comes to your career, your Allstar journey will be an adventure. Find your dream career destination with us.
Latest updates, reports, and threat intel affecting the global network.
Shipping seafood, electronics or a spare part by air? It might get a window seat now on Swiss International Air Lines.
Lufthansa Cargo is the first airline to apply a surcharge on shippers to help cover the cost of blending expensive alternative fuel with ...
A remote attacker who controls a container registry may be able to direct a client's token request to a host of the attacker's choice, and disclose the victim's registry credentials to that host. This vulnerability is addressed in containerization version 0.41.0.
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the djust live transport resolves the LiveView to mount from a client-supplied dotted path by calling `__import__(module_path, ...)`. The module is imported — running its top-level code (import side effects) — before the framework checks that the resolved object is a `LiveView` subclass and before any per-view authentication. The `LIVEVIEW_ALLOWED_MODULES` allowlist that should contain this is fail-open (`if allowed_modules:` — skipped when the setting is unset, the framework default) and uses loose `startswith` matching. An unauthenticated WebSocket client (the WS handshake does not require auth; per-view auth runs only after import + instantiate) can therefore send a `mount` / `live_redirect_mount` / `url_change` frame (or an SSE mount) with `view = "<any.importable.module>.AnyName"` and cause the server to import — and execute the top-level code of — any importable Python module by name. Version 1.0.7 fixes the issue with a fail-closed resolution gate (`djust._view_resolution.is_view_import_allowed`): a client view path resolves only if (a) its module is already loaded (`sys.modules` — so resolving runs no new code; URL-routed views loaded by URLconf at startup keep working with zero config) or (b) it matches `LIVEVIEW_ALLOWED_MODULES` on a module-segment boundary (explicit opt-in for lazily-imported views). The gate runs before `__import__` at all three sinks (+ defense-in-depth inside `_instantiate_view`). As a workaround, set `LIVEVIEW_ALLOWED_MODULES` to the narrow list of modules that contain your mountable LiveView classes. (Note: pre-patch the allowlist is `startswith`-matched and the import still precedes the subclass check, so this is mitigation, not a complete fix.)
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, djust's per-object authorization (`get_object` + `has_object_permission`, ADR-017) was enforced on the WebSocket mount and event paths but not on three other render entry points: (a) the initial HTTP GET render, (b) SPA `url_change` navigation, and (c) `{% live_render %}` embedded child views. An authenticated user could therefore view (and on some paths act on) an object they are not authorized for by loading the page directly, navigating to it via SPA url-change, or composing it as an embedded child — a classic IDOR / broken object-level access control on object-scoped views. This is fixed in djust 1.0.7. All render entry points now route through a shared `enforce_object_permission` chokepoint: HTTP GET returns 403, `url_change` emits a `permission_denied` frame and skips the render, and `{% live_render %}` (eager + lazy) refuses the embed. Views without a custom `get_object` are unaffected (no-op). No reliable workaround short of upgrading. Do not expose object-scoped views through the HTTP-GET / url_change / live_render paths until patched.
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the WebSocket `handle_mount` and `ViewRuntime._build_request` rebuild an `HttpRequest` via `RequestFactory().get(...)` with no `HTTP_HOST`, so `request.get_host()` defaulted to `"testserver"` on the live path. Host/subdomain/domain `TenantResolver`s then misresolved the tenant — `None` on the live path while the HTTP path resolved correctly. With `STRICT_MODE=False` the tenant-scoped managers returned unscoped rows (cross-tenant disclosure); with the default they returned an empty queryset (broken tenancy). This is fixed in djust 1.0.7. The handshake Host is extracted from the ASGI scope, validated against `ALLOWED_HOSTS` (the same logic as the CSWSH Origin gate, parsed with Django's `split_domain_port` so malformed Hosts are rejected at the boundary), and propagated — with the TLS scheme — into the reconstructed request, so live-path tenant resolution matches HTTP exactly. There is no known workaround on the live path short of upgrading. Users are most exposed when combined with `STRICT_MODE=False`.
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, when a Django `Model` instance is assigned to a public view attribute, djust serialized it to the client with no sensitive-field denylist — sending fields such as `password` (the hash), privilege flags (e.g. `is_staff` / `is_superuser`), tokens, and other PII to the browser. Because exposing model objects to templates is a normal djust pattern, this could leak credentials/PII without the developer realizing the full object crossed the wire. This is fixed in djust 1.0.7. Model serialization applies a secure-by-default sensitive-field denylist (password/hash/token/secret-style fields and known privilege flags are withheld) with an identity-subset fallback. As a workaround, keep `Model` instances on `_private` attributes and expose only the specific fields needed, until patched.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.