UCB A.I CyberSecurity Scoring
14/06/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for UCB in 2026.
No incidents recorded for UCB in 2026.
No incidents recorded for UCB in 2026.
Pharmaceutical Manufacturing
Viatris Inc. (NASDAQ: VTRS) is a global healthcare company uniquely positioned to bridge the traditional divide between generics and brands, combining the best of both to more holistically address healthcare needs globally. With a mission to empower people worldwide to live healthier at every stage of life, we provide access at scale. In 2022 alone, we supplied high-quality medicines to approximately 1 billion patients around the world. With our exceptionally extensive and diverse portfolio of medicines, a one-of-a-kind global supply chain designed to reach more people when and where they need them, and the scientific expertise to address some of the world’s most enduring health challenges, access takes on deep meaning at Viatris. We have the ability to touch all of life’s moments, from birth to end of life, acute conditions to chronic diseases. We are headquartered in the U.S., with global centers in Pittsburgh, Shanghai and Hyderabad, India Social Media Guidelines: https://newsroom.viatris.com/social-media-community-guidelines Investors: https://investor.viatris.com Corporate Social Responsibility: https://www.viatris.com/sustainability Connect with Viatris Instagram: https://www.instagram.com/viatrisinc X: https://www.x.com/viatrisinc Viatris and our recruiting firms will not ask for sensitive personal information, such as your social security number, date of birth or bank account details via text, email or social media. Additionally, Viatris representatives do not request payment or personal bank information nor send payment to purchase hardware on your own. Viatris.com is the primary source of all company job postings and authorized third-party career websites.
Novartis is an innovative medicines company. Every day, working to reimagine medicine to improve and extend people’s lives so that patients, healthcare professionals and societies are empowered in the face of serious disease. Our medicines reach more than 250 million people worldwide. Find out more at https://www.novartis.com See our community guidelines: https://go.novartis.social/3Nboxki
Glenmark Pharmaceuticals Limited is a research-led, global organization committed to enriching lives. Innovation is deeply embedded in Glenmark’s culture; it is how we differentiate ourselves in our key markets and create greater value for our stakeholders. In our journey of innovation over the past four and a half decades, we have evolved from a generics company to a global organization offering specialty and branded products. Glenmark’s core values of Achievement, Respect, and Knowledge impart a sense of organizational unity that drives our growth. We have established a robust global branded generics, specialty, and OTC business; with a significant presence in the therapy areas of dermatology, respiratory, and oncology. Our ten state-of-the-art manufacturing facilities spread across four continents with operations in over 80 countries help us impact millions of patients across the globe. We recently consolidated our innovation efforts in small molecules and biologics research with the formation of ‘Ichnos Glenmark Innovation’ (IGI). This alliance is aimed at leveraging the capabilities of Glenmark and its subsidiary, Ichnos Sciences, to accelerate innovation in cancer treatment. To know more about IGI, check out: https://iginnovate.com/ Sustainability is an integral aspect of all our operations and we are focused on achieving our Environment, Social and Governance (ESG) goals. Our responsibility also extends to our communities, and over the years, our CSR efforts have touched the lives of over 3 million people.
This channel is not intended for U.S. and Canadian visitors. Merck operates in the U.S. and Canada as EMD Serono in Healthcare, MilliporeSigma in Life Science and EMD Electronics in Electronics. An unaffiliated and unrelated company, Merck & Co., Inc., Kenilworth, NJ, US holds the rights in the trademark MERCK in the U.S. and Canada. _______________________________ We are Merck, a leading global science and technology company headquartered in Germany. We are curious explorers, courageous pioneers, and ingenious inventors. Our colleagues across the globe love innovating with science and technology to enrich people’s lives with our solutions in Life Science, Healthcare, and Electronics. Together, we dream big and are passionate about caring for our rich mix of people, customers, patients, and the planet. We believe in the positive power of science and technology. It has determined our actions since 1668 and inspires us to continue researching for a future worth living. As a family-owned company with over 350 years of experience, we stand for sustainability, responsibility, and innovative strength. We take pride in being a diverse and inclusive company that values and fosters the talents and abilities of our employees. That's why we are always looking for curious minds that see themselves imagining the unimaginable with us. Work your Magic and join Merck. Legal Disclaimer: www.merckgroup.com/en/legal-disclaimer.html Data Privacy Declaration: www.merckgroup.com/en/privacy-statement
At Merck, known as MSD outside of the United States and Canada, we are unified around our purpose: We use the power of leading-edge science to save and improve lives around the world. For more than 130 years, we have brought hope to humanity through the development of important medicines and vaccines. We aspire to be the premier research-intensive biopharmaceutical company in the world – and today, we are at the forefront of research to deliver innovative health solutions that advance the prevention and treatment of diseases in people and animals. We foster a diverse and inclusive global workforce and operate responsibly every day to enable a safe, sustainable and healthy future for all people and communities. For more information, visit www.merck.com. This site is intended for residents of the United States and Canada and their territories only. FLS: http://merck.us/3TKXNuZ
A single idea, which sprouts from a human mind, contains the potential to create marvels that can influence generations. It can redefine rules, it can transform the world. Back in the year 1973, a team of individuals came with such an idea – The idea called Alkem. It was highly potent and resilient, like a spark that could ignite a thousand more ideas. And it did! Looking back at our 4 decade, illustrious journey, that one small idea has Not only triggered us to become one of India’s largest generic and specialty pharmaceutical company but also, create a foothold in over 50 countries 32% of our revenue is generated via offshore sales. As well as we have consistently been ranked amongst the top ten pharmaceutical companies in India. Our portfolio includes illustrious brands like Clavam, Pan, Pan-D and Taxim-O, which feature amongst top 50 pharmaceutical brands in India. For over a decade, our dominance in anti-infective segment has remained unchallenged. We have 21 manufacturing facilities at multiple locations in India and the United States of America. Our upper-crest facilities are inspected and audited as per cGMP guidelines as laid down by leading regulatory authorities such as USFDA, MHRA - UK, SAHPRA-South Africa, TGA - Australia, ANVISA - Brazil, WHO - Geneva, TPD - Health Canada, PPB - Kenya, NDA - Uganda, MOH - Sudan, INVIMA - Colombia, TFDA - Tanzania, Zimbabwe, BfArM-Germany & Other Africa, Asian & CIS Countries. Another feather in our cap was added on December 23rd, 2015, when, Alkem completed it's Initial Public Offering (IPO) and was listed on the Bombay Stock Exchange Limited and the National Stock Exchange of India Limited. Although passion is the fuel that keeps ideas alive, innovation is the catalyst that gives it flight! With over 500 scientists working in 5 global R&D centers, we are empowering innovations that align with our philosophy of ‘Extended Lifecare Beyond Boundaries’.
A vertically integrated, Global Pharmaceutical Company. Established in 1989, we are engaged in developing, manufacturing, and marketing a wide range of formulations across several major therapeutic areas including anti-infectives, cardiovascular, anti-diabetic, dermatology, and hormone treatment. We develop, manufacture, and globally distribute a broad range of pharmaceutical products across therapies in multiple dosage forms such as solid orals, liquid orals, topical formulations, injectables (Dry Powder) metered dose inhalers and dry powder inhalers. Our Vision To be a leading global pharmaceutical company by providing high quality, affordable and innovative therapeutic solutions for patients with diverse medical needs. Our Mission To contribute towards improving patients’ quality of life across the globe, by providing effective and accessible medicines.
Lupin Limited is a global pharmaceutical leader headquartered in Mumbai, India, with products distributed in over 100 markets. Lupin specializes in pharmaceutical products, including branded and generic formulations, complex generics, biotechnology products, and active pharmaceutical ingredients. Trusted by healthcare professionals and consumers globally, the company enjoys a strong position in India and the U.S. across multiple therapy areas, including respiratory, cardiovascular, anti-diabetic, anti-infective, gastrointestinal, central nervous system, and women’s health. Lupin has 15 state-of-the-art manufacturing sites and 7 research centers globally, along with a dedicated workforce of over 23,000 professionals. Lupin is committed to improving patient health outcomes through its subsidiaries – Lupin Diagnostics, Lupin Digital Health, and Lupin Manufacturing Solutions.
Established in 1907, Alembic Pharmaceuticals Limited is a leading pharmaceutical company in India. The Company is vertically integrated with the ability to develop, manufacture and market pharmaceutical products, pharmaceutical substances and Intermediates. Alembic is the market leader in the Macrolides segment of anti-infective drugs in India. Alembic's manufacturing facilities are located in Vadodara and Baddi in Himachal Pradesh. The plant at Vadodara has the largest fermentation capacity in India. The Panelav facility houses the API and formulation manufacturing (both US FDA approved) plants. The plant at Baddi, Himachal Pradesh manufactures formulations for the domestic and non-regulated export market. The company has a state of the art Research Centre at Vadodara.
Latest updates, reports, and threat intel affecting the global network.
Microsoft's new vulnerability-scanning system, codenamed MDASH, scored 88.45% on the CyberGym benchmark, surpassing single-model systems...
Updated May 11, 2026. Canvas access has now been restored across all UC locations. The University will continue monitoring the situation as...
What's a state cyber corps worth? A new publication from the Center for Long-Term Cybersecurity at UC Berkeley puts a number to the...
Learn what to expect from an online cyber security master's, from courses to career outlook, including tech jobs and salaries for graduates.
SAN FRANCISCO, March 25, 2026 — Federal cybersecurity funding for states and cities is stalling in Congress just as Chinese and Russian...
Shannon Pierson at UC Berkeley's Cybersecurity Center helps protect schools, hospitals, and utilities from cyberattacks they can't afford to...
UC Berkeley Center for Long-Term Cybersecurity's Shannon Pierson considers legislation passed in 2025 to surface the trends across states.
One of the best bug-hunters in the world is an AI tool called Xbow, just one of many signs of the coming age of cybersecurity automation.
Developed at the University of California, Berkeley, CyberGym includes 1,507 distinct benchmark tasks sourced from actual vulnerabilities found...
tls_opt_dtls_peer_connection_id_value_get() in subsys/net/lib/sockets/sockets_tls.c, which handles getsockopt(SOL_TLS, TLS_DTLS_PEER_CID_VALUE), passed the caller-supplied optval directly to mbedtls_ssl_get_peer_cid() without verifying the buffer was at least MBEDTLS_SSL_CID_OUT_LEN_MAX (default 32) bytes. mbedtls_ssl_get_peer_cid() copies the peer-negotiated DTLS Connection ID (length 1..MBEDTLS_SSL_CID_OUT_LEN_MAX) into that buffer without a destination-size parameter, so a caller-supplied optlen smaller than the CID causes a write of up to 31 bytes past the buffer end. In CONFIG_USERSPACE builds the getsockopt syscall verifier (z_vrfy_zsock_getsockopt) bounce-buffers the user's optval into a kernel allocation of exactly optlen bytes (k_usermode_alloc_from_copy -> z_thread_malloc), so an unprivileged user thread that passes a small optlen on a connected DTLS socket with Connection ID enabled induces a kernel-heap buffer overflow, with the overflowing content being the remote peer's CID. The defect requires CONFIG_MBEDTLS_SSL_DTLS_CONNECTION_ID, an established DTLS session with a negotiated peer CID, and (for the kernel-crossing case) CONFIG_USERSPACE. Introduced when the TLS_DTLS_CID option was added (v3.5.0). The fix rejects callers whose optlen is below MBEDTLS_SSL_CID_OUT_LEN_MAX with -EINVAL.
react18-use is a React 19 use hook shim. Between 2026-05-19 01:07:01 and 2026-05-19 15:20:43, the default branch contained malicious commits 7b79148d1495a2505f9277da295a98cf176f4496 through 7b79148d1495a2505f9277da295a98cf176f4496 that executed remote attacker-controlled code on developer machines during `npm install`. The commits were removed by force-push, but local clones, forks, and direct-SHA URLs may still contain them, and `npm install` against an affected checkout will still execute the code today. The package was not published to npm. `src/install.js` was added and wired into the `postinstall` script. It fetched a JavaScript payload from an attacker-controlled HTTPS endpoint (configurable via an environment variable), disabled TLS verification, and evaluated the response as code with `require` available. Execution was deliberately skipped on CI and cloud/serverless environments, targeting developer workstations. The second-stage payload was attacker-hosted and cannot be reconstructed. Assume full compromise of anything reachable from a Node process with the user's permissions. Those who ran `npm install` against an affected checkout on a developer machine on or after 2026-05-19 01:07:01 should treat the machine as compromised, rotate every credential the machine could reach, audit account activity since 2026-05-19 01:07:01, and clean local clones.
The UpdateHub management subsystem (subsys/mgmt/updatehub/updatehub.c) drives every update operation through a single file-scope ctx structure that holds the CoAP block context, payload buffer, status code, socket, and a one-element poll-fd array fds[1]. Access to ctx was not serialized, and prepare_fds() wrote ctx.fds[ctx.nfds] and incremented ctx.nfds with no bounds check. Two independent paths mutate ctx concurrently: the background autohandler running on the system workqueue, and user-triggered operations reached through the updatehub run shell command, direct API calls, or — since the operations are exposed as syscalls — userspace threads. When a second flow enters prepare_fds() while ctx.nfds is already 1, the write lands one element past the array; by struct layout it overlaps the adjacent ctx.sock/ctx.nfds members. More broadly, the unsynchronized sharing lets two flows interleave connection setup and teardown, double-closing a socket descriptor or scribbling the shared buffers. The result is corruption of the update subsystem's internal state and denial of service of the firmware-update path; the out-of-bounds write is contained within the ctx structure and there is no demonstrated path to memory outside it or to code execution. Triggering requires a local actor able to invoke update operations (or, with CONFIG_USERSPACE, an unprivileged userspace thread) and to win a timing race against the background handler; remote peers cannot control the race timing. The fix serializes the entry points with a mutex and adds a bounds check to prepare_fds().
The UpdateHub over-the-air update client's start_coap_client() in subsys/mgmt/updatehub/updatehub.c leaks the CoAP/DTLS socket descriptor on its connection-setup failure paths. The shared error: cleanup gated socket closing on a ret > 0 flag, but ret was set to -1 immediately after the socket was created, so when zsock_setsockopt() (DTLS) or zsock_connect() subsequently failed the gate was false and cleanup_connection() was never called. The open descriptor in the global ctx.sock was then overwritten by the next attempt, permanently leaking it from the socket / net_context pool until reboot. The failing setup path is reached every time the OTA client tries to contact the UpdateHub server and the connection cannot be established — driven automatically by the periodic autohandler() poll (and on demand via the updatehub_probe()/updatehub_update() API or the updatehub run shell command). The DTLS handshake/connect outcome is influenceable by a network or on-path attacker who drops, resets, or otherwise disrupts traffic to the server, and also fails naturally whenever the server is unreachable. Each failed attempt permanently leaks one descriptor; once the shared socket pool is exhausted, networking degrades device-wide until the device is rebooted, a denial-of-service condition. Severity is low because the leak rate is bounded by the configured OTA poll interval (default once per 24 hours), the effect is gradual and recovered by reboot, and only builds with the UpdateHub client enabled are affected. There is no memory-corruption, information-disclosure, or authentication impact.
Certain web interface components in affected TP-Link Aginet devices do not validate and sanitize user-supplied input properly before passing it to system-level command execution functions. An authenticated adjacent attacker may inject specially crafted input to execute arbitrary operation system commands with elevated privileges. Successful exploitation may allow execution of arbitrary system commands, potentially leading to full device compromise.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.