WC A.I CyberSecurity Scoring
13/09/2026
Access Monitoring Plan
Access Monitoring Plan
The Winn-Dixie Company has 69.97% fewer incidents than the average of same-industry companies with at least one recorded incident.
The Winn-Dixie Company has 2.91% fewer incidents than the average of all companies with at least one recorded incident.
The Winn-Dixie Company reported 1 incidents this year: 0 cyber attacks, 0 ransomware, 0 vulnerabilities, 1 data breaches, compared to industry peers with at least 1 incident.
Depuis plus de 70 ans, E.Leclerc poursuit un objectif : démocratiser la consommation, c'est l'expression de son utilité sociale. Cet engagement au service du plus grand nombre doit permettre à chacun d'accéder aux produits et services dont il a besoin ou envie, au quotidien. L'accessibilité, qu'elle soit une question de prix, de proximité ou d'information, est un combat permanent, sans cesse renouvelé par les attentes des consommateurs et les enjeux de société. Améliorer le pouvoir d'achat des consommateurs au quotidien ; Briser les monopoles pour ouvrir de nouveaux marchés, comme la parapharmacie ou les produits culturels ; Soutenir à la fois les producteurs français au travers des "Alliances Locales", et la préservation de l'environnement avec l'opération "Nettoyons la Nature" qui rassemble chaque année plusieurs centaines de milliers de bénévoles ; Développer les savoir-faire qui offrent une expérience toujours plus positive, durable et engagée dans la consommation ; tels sont les engagements qui caractérisent l'action de E.Leclerc et façonnent son image parmi les marques préférées des Français. Enseigne coopérative portée par 587 adhérents dans 721 centres et 690 drives, et par des millions de clients dans toute la France, E.Leclerc est leader du secteur de la grande distribution. Rejoignez le mouvement !
Founded in 1925, Winn-Dixie grocery stores, liquor stores and in-store pharmacies serve communities throughout five southeastern states - Alabama, Florida, Georgia, Louisiana and Mississippi. Winn-Dixie Stores, Inc. is a subsidiary of The Winn-Dixie Company, which is one of the largest supermarket chains based in the Southeast. About The Winn-Dixie Company The Winn-Dixie Company, based in Jacksonville, Florida, is a trusted neighborhood grocer with deep roots across Florida and southern Georgia. Building on more than a century of legacy, the company is shaping the future of neighborhood grocery through continued store investments, innovative formats and a seamless omnichannel experience that delivers exceptional value both in stores and online. Guided by its purpose to feed and enrich the communities it serves, The Winn-Dixie Company is known for exceptional service and locally authentic stores. The grocer is committed to offering fresh, high-quality products and meaningful value through its nationally recognized Winn-Dixie Rewards program. For more information and updates, visit WinnDixie.com and follow @WinnDixie on Facebook, Instagram, and LinkedIn.
Giant Eagle strives to be a best place to work in the eyes of the nearly 36,000 individuals who work in our stores, pharmacies, warehouses and in our corporate offices. At Giant Eagle, you'll have the opportunity to develop a real career with countless opportunities for you to grow with us. The way we conduct business and treat one another – our Team Members, customers, community members and valued partners – defines what the Giant Eagle culture is all about. Our Purpose Beyond Profit is "We are one Giant Eagle Family. Together, we provide our communities with life's essentials, so our neighbors have the opportunity to thrive." We do this by staying true to our Core Values: Respect All: We go out of our way to treat our guests and one another with kindness and dignity. Think Team: We value different viewpoints and love working together as family. See It, Own It: We keep our heads up, see opportunity and take action. Work Smart: We find ways to simplify. Live Well: We help everyone live a healthy, balance life. Do Right: We are ethical, giving, and good stewards of the world around us. Founded in 1931, Giant Eagle is one of the 40 largest family-operated companies in the US and operates Giant Eagle, GetGo and Market District stores. As we continue to grow and expand, our commitment to our core values and the well-being of our Team Members, customers, and our communities is as strong as ever. We listen to what you have to say and do everything we can to provide a safe, caring, family-oriented environment. To learn more about the benefits we have to offer, please visit jobs.gianteagle.com.
Con un tamaño promedio de 8.250 m2, Hipermercados Jumbo ofrece un variado surtido de productos, que incluye alimentos, abarrotes y una amplia gama de artículos no comestibles, como vestuario, elementos para el hogar y electrodomésticos. Además de las marcas tradicionales, Jumbo ofrece productos de marca propia, las cuales han alcanzado un sólido y fuerte posicionamiento comercial, asociado principalmente a la variedad y excelente calidad. Considerando el volumen de ventas, Jumbo es uno de los principales participantes del negocio de supermercados en Chile. Posee un sólido y claro posicionamiento comercial en el segmento al que está dirigido, lo que le ha permitido mantener márgenes de venta positivos y superiores al promedio de la industria.
Nuestro propósito: Simplificar y Disfrutar más la vida. Pertenecemos a Falabella, una de las mayores compañías de retail de América Latina. En 2002 ingresamos al mercado peruano bajo la marca Tottus y posteriormente al chileno en 2004. Somos un equipo que trabajamos para superar cada día la expectativas de nuestros clientes y colaboradores. Creemos en nuestros talentos internos y buscamos la excelencia en todos nuestros procesos, con el único propósito de poder simplificar y disfrutar más la vida. Además trabajamos para vincularnos cara a cara con la comunidad, porque somos parte del territorio en el que estamos insertos con nuestra operación y con cada acción construimos una historia y guiamos un destino de largo plazo con la sociedad.
Latest updates, reports, and threat intel affecting the global network.
A remote attacker who controls a container registry may be able to direct a client's token request to a host of the attacker's choice, and disclose the victim's registry credentials to that host. This vulnerability is addressed in containerization version 0.41.0.
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the djust live transport resolves the LiveView to mount from a client-supplied dotted path by calling `__import__(module_path, ...)`. The module is imported — running its top-level code (import side effects) — before the framework checks that the resolved object is a `LiveView` subclass and before any per-view authentication. The `LIVEVIEW_ALLOWED_MODULES` allowlist that should contain this is fail-open (`if allowed_modules:` — skipped when the setting is unset, the framework default) and uses loose `startswith` matching. An unauthenticated WebSocket client (the WS handshake does not require auth; per-view auth runs only after import + instantiate) can therefore send a `mount` / `live_redirect_mount` / `url_change` frame (or an SSE mount) with `view = "<any.importable.module>.AnyName"` and cause the server to import — and execute the top-level code of — any importable Python module by name. Version 1.0.7 fixes the issue with a fail-closed resolution gate (`djust._view_resolution.is_view_import_allowed`): a client view path resolves only if (a) its module is already loaded (`sys.modules` — so resolving runs no new code; URL-routed views loaded by URLconf at startup keep working with zero config) or (b) it matches `LIVEVIEW_ALLOWED_MODULES` on a module-segment boundary (explicit opt-in for lazily-imported views). The gate runs before `__import__` at all three sinks (+ defense-in-depth inside `_instantiate_view`). As a workaround, set `LIVEVIEW_ALLOWED_MODULES` to the narrow list of modules that contain your mountable LiveView classes. (Note: pre-patch the allowlist is `startswith`-matched and the import still precedes the subclass check, so this is mitigation, not a complete fix.)
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, djust's per-object authorization (`get_object` + `has_object_permission`, ADR-017) was enforced on the WebSocket mount and event paths but not on three other render entry points: (a) the initial HTTP GET render, (b) SPA `url_change` navigation, and (c) `{% live_render %}` embedded child views. An authenticated user could therefore view (and on some paths act on) an object they are not authorized for by loading the page directly, navigating to it via SPA url-change, or composing it as an embedded child — a classic IDOR / broken object-level access control on object-scoped views. This is fixed in djust 1.0.7. All render entry points now route through a shared `enforce_object_permission` chokepoint: HTTP GET returns 403, `url_change` emits a `permission_denied` frame and skips the render, and `{% live_render %}` (eager + lazy) refuses the embed. Views without a custom `get_object` are unaffected (no-op). No reliable workaround short of upgrading. Do not expose object-scoped views through the HTTP-GET / url_change / live_render paths until patched.
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the WebSocket `handle_mount` and `ViewRuntime._build_request` rebuild an `HttpRequest` via `RequestFactory().get(...)` with no `HTTP_HOST`, so `request.get_host()` defaulted to `"testserver"` on the live path. Host/subdomain/domain `TenantResolver`s then misresolved the tenant — `None` on the live path while the HTTP path resolved correctly. With `STRICT_MODE=False` the tenant-scoped managers returned unscoped rows (cross-tenant disclosure); with the default they returned an empty queryset (broken tenancy). This is fixed in djust 1.0.7. The handshake Host is extracted from the ASGI scope, validated against `ALLOWED_HOSTS` (the same logic as the CSWSH Origin gate, parsed with Django's `split_domain_port` so malformed Hosts are rejected at the boundary), and propagated — with the TLS scheme — into the reconstructed request, so live-path tenant resolution matches HTTP exactly. There is no known workaround on the live path short of upgrading. Users are most exposed when combined with `STRICT_MODE=False`.
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, when a Django `Model` instance is assigned to a public view attribute, djust serialized it to the client with no sensitive-field denylist — sending fields such as `password` (the hash), privilege flags (e.g. `is_staff` / `is_superuser`), tokens, and other PII to the browser. Because exposing model objects to templates is a normal djust pattern, this could leak credentials/PII without the developer realizing the full object crossed the wire. This is fixed in djust 1.0.7. Model serialization applies a secure-by-default sensitive-field denylist (password/hash/token/secret-style fields and known privilege flags are withheld) with an identity-subset fallback. As a workaround, keep `Model` instances on `_private` attributes and expose only the specific fields needed, until patched.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.