CG A.I CyberSecurity Scoring
27/02/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for The ComTran Group in 2026.
No incidents recorded for The ComTran Group in 2026.
No incidents recorded for The ComTran Group in 2026.
Our purpose is to sustainably deliver infrastructure which is vital to the UK. As a leading provider of infrastructure services, construction and property developments, we are committed to delivering for communities and leaving lasting legacies through our work. We are committed to attracting, retaining and progressing talent within Kier, with a diverse, and resilient workforce that reflects the communities we serve. Follow the pages below to find out even more about what we do and the talented people we have within Kier and our supply chains who are helping us to meet our purpose. Kier Construction: https://www.linkedin.com/showcase/kier-construction Kier Transportation: https://www.linkedin.com/showcase/kier-transportation Kier Natural Resources, Nuclear & Networks: https://www.linkedin.com/showcase/kier-natural-resources-nuclear-networks Kier Property: https://www.linkedin.com/showcase/kier-property Kier Places: https://www.linkedin.com/showcase/kierplaces www.kier.co.uk
Fluor Corporation is a global engineering, procurement and construction company. We work with leaders in the energy, infrastructure, life sciences, advanced technologies, mining and metals industries, as well as government agencies, to build a better world. Since our founding in 1912, we have been building a legacy of innovation. Our nearly 27,000 employees provide professional and technical solutions to deliver safe, well-executed, capital-efficient projects for our global clients. At Fluor, we believe in open communication and value the conversations that are fostered through our social media communities. To learn more about our community standards, please visit: https://www.fluor.com/community-standards Fluor has been notified of fraudulent employment offers being made via email, WhatsApp and other channels to prospective candidates. Learn more: https://www.fluor.com/careers/recruitment-fraud-warning
Tata Projects is one of the most admired Technology led Engineering, Procurement and Construction (EPC) companies in India. We have expertise in providing sustainable solutions in the execution of large and complex urban and industrial infrastructure projects while also demonstrating strong presence in refineries and petrochemical plants. We leverage our domain knowledge across various business segments to address the shift to clean energy to meet the nation’s Net Zero ambitions. We provide ready-to-deploy solutions for semiconductor facilities, giga factories, data centres, refineries, green fuels, roads, bridges, integrated rail & metro systems, commercial building & airports, power generation, transmission & distribution systems, chemical process plants, water & waste management, and mining & metal purification systems. Tata Projects offers one stop service covering entire life cycle of the project, from project conceptualization to operations & maintenance. It uses innovative technology solutions to offer bouquet of services which includes engineering, procurement, construction, commissioning, inspection & expediting, operations, repairs & maintenance, and shutdown services. Over the years, Tata Projects has received several awards and recognitions for its project delivery and commitment to safety & quality. We are a part of the TATA Group which operates in more than 100 countries across six continents, with a mission ‘To improve the quality of life of the communities we serve globally, through long-term stakeholder value creation based on Leadership with Trust’. In 2023-24, the revenue of Tata companies, taken together, was $165Billion. These companies collectively employ over 10,00,000 people. *Caution against fraudulent job offers*: Tata Projects does not charge/accept any amount or security deposit from job seekers during the selection process or while inviting candidates for an interview. To know more visit - www.tata.com/jobalert
Bouygues Construction employs 35,600 people around the world, all driven by the greatest and most exciting responsibility of all – building for life. For our customers in more than 50 countries, we deliver much more than projects. We build to create spaces, connections and opportunities. We improve daily life for millions of people by creating structures and buildings that welcome life in all its diversity, serving all our needs: housing, healthcare, education, work, tourism, leisure activities, public services, etc. We are aware that everything we build is here to stay, and our legacy as builders will be with us for generations to come. This is why every day, we look for new solutions in order to design, renovate, and build differently. Our aim is to address the critical imperatives of the environmental transition: we are committed to making construction sustainable and less resource-intensive. We support the development of low-carbon energy production and public transport infrastructures, and we construct and renovate buildings and neighbourhoods using low-carbon materials, optimising the design of our structures and taking account of their lifecycle. Because the men and women of Bouygues Construction are our most precious asset, we ensure that everyone is safe at all times, and that human rights and ethical standards are respected. Finally, we are committed to ensuring that everyone can achieve their full potential in their work by building a career path that reflects the values we hold dear: respect, commitment, pioneering and sharing.
Fundada em Belo Horizonte, Minas Gerais, a Andrade Gutierrez tem reconhecida expertise no segmento de construção pesada. Na década de 1990 iniciou a diversificação dos negócios com investimentos nas áreas de Concessões e Telecomunicações. Hoje o Grupo Andrade Gutierrez é um dos maiores conglomerados de infraestrutura na América Latina e acumula projetos realizados em mais de 40 países. Participa como investidora em empresas como Oi e Contax (AG Telecom), CCR, Sanepar, e Cemig (AG Investimentos). AG Jovem: www.agjovem.com.br Facebook: https://www.facebook.com/AndradeGutierrezSA Twitter: https://twitter.com/Grupo_AG Youtube: http://www.youtube.com/user/AndradeGutierrez
Holcim is the leading partner for sustainable construction with net sales of CHF 15.7 billion in 2025, creating value across the built environment from infrastructure and industry to buildings. We have more than 45 000 employees in 43 attractive markets – across Europe, Latin America and Asia, Middle East & Africa – and have been recognized as a Global Top Employer by the Top Employers Institute. Holcim offers high-value end-to-end Building Materials and Building Solutions, from foundations and flooring to walling and roofing – powered by premium brands including ECOPact, ECOPlanet and ECOCycle.
Founded in 1952 by Francis Bouygues, Bouygues is a diversified services group operating in over 80 countries with 200,000 employees all working to make life better every day. Its business activities in construction (Bouygues Construction, Bouygues Immobilier, Colas); energies & services (Equans); media (TF1) and telecoms (Bouygues Telecom) are able to drive growth since they all satisfy constantly changing and essential needs.
NCC is one of the leading construction companies in the Nordics. Based on its expertise in managing complex construction processes, NCC contributes to a positive impact of construction for its customers and society. NCC is one of the largest players in the Nordic construction market, and operates in Sweden, Norway, Denmark and Finland. Operations include building and infrastructure project contracting, asphalt and stone materials production, and commercial property development. In 2024, NCC had a turnover of about SEK 62 bn and 11,800 employees. NCC Infrastructure We build infrastructure for travel, transportation, energy and water throughout the Nordic region. NCC Building Sweden Builds and renovates sustainable housing, offices, healthcare buildings, schools, sports facilities and public buildings for public and private customers in Sweden. NCC Building Nordics Builds and renovates sustainable housing, offices, healthcare buildings, schools, sports facilities and public buildings for public and private customers in Denmark, Finland and Norway. NCC Industry Offers products and services for construction and infrastructure projects in Sweden, Norway, Denmark and Finland. Operations comprise production of stone materials and asphalt products and paving works. NCC Property Development Develops and sells commercial properties in defined growth markets in the Nordic region. NCC Green Industry Transformation In 2024, NCC established a new business area, NCC Green Industry Transformation, that will support industry players in the green transition. We as a company will never become better than our employees. One of our main objectives is therefore to be the industry leader in recruiting, retaining and developing employees. NCC can offer you a varied work life, with unique construction projects and inspiring challenges. Welcome to a corporate culture based on clear values and a strong team spirit.
VINCI is a world leader in concessions, energy and construction, employing 280.000 people in more than 120 countries. We design, finance, build and operate infrastructure and facilities that help improve daily life and mobility for all. Because we believe in all-round performance, above and beyond economic results, we are committed to operating in an environmentally and socially responsible manner. You can be part of projects that bring lasting change to urban ecosystems and entire regions. Join the team!
Latest updates, reports, and threat intel affecting the global network.
A vulnerability was detected in CodeAstro Student Attendance Management System 1.0. Impacted is an unknown function of the file /attendance-php/Admin/createStudents.php. Performing a manipulation of the argument admissionNumber results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.
A security vulnerability has been detected in D-Link DCS-935L 1.10.01. This issue affects the function snprintf of the file /web/cgi-bin/greece/rhea of the component HTTP Handler. Such manipulation of the argument data leads to format string. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.
Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 through 2.10.2 on Linux contains an Improper Authentication vulnerability (CWE-287) in the system configuration module. The /php/ajax-login.php endpoint returns userid=1 (administrator) in response to any HTTP POST request that supplies arbitrary credentials (e.g., action=dologin&login=<any_value>&pwd=<any_value>), and subsequent privileged endpoints under /php/ajax-main.php and /modules/* do not validate a server-side session. A remote unauthenticated attacker can invoke any administrative action exposed by the configuration module, including reading and modifying user rules, fuel tank gauges, fuel dispensers, relays, cash registers, bank terminals, fuel cards, price and customer displays, cash collection, and pricing rules.
SQL Injection in reports/catalogue_out.pl in Koha Community Koha through 22.11.37, 23.x, 24.x before 24.11.16, 25.05.x before 25.05.11, 25.11.x before 25.11.05, 26.05.x before 26.05.01, and 26.11.x before 26.11.00 allows an authenticated staff user with the Reports module flag to read arbitrary data from the Koha application database via the Filter URL parameter when the Criteria parameter matches /branchcode/. The vulnerable sink in sub calculate concatenates the unmodified Filter request parameter directly into a LIKE clause of the auxiliary $strsth2 statement and executes it via DBI without bound parameters: my $f = @$filters[0]; $f =~ s/\*/%/g; $strsth2 .= " AND $column LIKE '$f' "; This enables error-based SQL injection (e.g., via EXTRACTVALUE) and full read access to sensitive tables including borrowers (password hashes, 2FA secrets, PII), borrower_password_recovery, api_keys, and sessions. Proof of concept (error-based, single request): GET /cgi-bin/koha/reports/catalogue_out.pl?do_it=1&output=screen&Limit=10&Criteria=branchcode&Filter=x'+AND+EXTRACTVALUE(1,CONCAT(0x7e,VERSION(),0x7c,USER(),0x7c,DATABASE(),0x7e))--+- Cookie: CGISESSID=<LIBRARIAN_SESSION> The response body contains the DBI exception leaking the MariaDB version, database user, client IP, and database name, after which arbitrary data can be paged out using LIMIT n,1 / SUBSTRING(...). The vulnerable sink was introduced in commit 6bb77ae3e4 (2008-07-09); CVE-2015-4633 patched the same class in sibling files but did not generalise the fix to reports/catalogue_out.pl. Fixed in Koha 22.11.38, 24.11.16, 25.05.11, 25.11.05, 26.05.01, and 26.11.00 by replacing the raw concatenation with a parameterised placeholder.
The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bookly-customer-full-name' cookie in versions up to, and including, 27.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires 'Remember personal information in cookies' setting to be enabled (disabled by default).
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.