UEBC A.I CyberSecurity Scoring
09/03/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for U.S. Embassy Bogotá, Colombia in 2026.
No incidents recorded for U.S. Embassy Bogotá, Colombia in 2026.
No incidents recorded for U.S. Embassy Bogotá, Colombia in 2026.
Latest updates, reports, and threat intel affecting the global network.
WASHINGTON (AP) — The Trump administration has notified Congress that it is taking the first steps to possibly reopen the shuttered U.S....
The Trump administration has notified Congress that it is taking the first steps to possibly reopen the shuttered U.S. Embassy in Venezuela...
The US Embassy cautioned citizens about armed militias and roadblocks, urging immediate departure and heightened vigilance while in...
As Washington moves to “run” Venezuela temporarily, American companies face major opportunity—and elevated security threats on the ground.
The U.S. Embassy in neighboring Colombia issued a shelter-in-place order for American citizens in Venezuela on Saturday, saying it was aware...
De la Espriella asks Washington to block F414G engine exports and halt Colombia's Gripen E/F deal, citing alleged corruption and political...
The Trump administration is barely bothering to pretend that its increasingly belligerent stance toward Venezuela is just about tackling...
BOGOTA, Oct 20 (Reuters) - Colombia said on Monday it has recalled its ambassador from Washington after U.S. President Donald Trump said he...
BOGOTA, Colombia (AP) — Colombian president Gustavo Petro on Tuesday lashed out at the U.S. government after it added Colombia to a list of...
Nginx Proxy Manager through 2.16.0 fails to restrict the advanced_config field to administrators, allowing non-admin users with manage permissions to inject arbitrary nginx directives. Attackers can inject malicious nginx configuration such as alias directives to serve arbitrary files or control routing for their assigned hosts.
Nginx Proxy Manager through 2.16.0 lacks rate-limiting on authentication endpoints, allowing unauthenticated attackers to make unlimited password guesses against any account. Attackers can brute-force login credentials via POST /api/tokens and subsequently guess TOTP codes via POST /api/tokens/2fa to gain full session access and administrative control.
httpdbg before 2.2.1 fails to validate URL schemes in recorded HTTP request URLs rendered as clickable links in the web interface. Attackers controlling traffic recorded by httpdbg can supply javascript: scheme URLs that execute malicious scripts in the application origin when clicked, allowing access to captured request and response data including headers and tokens.
Dozzle versions before 11.1.2 fail to sanitize container display names when building ZIP archive entry names in the log download endpoint. Attackers who can label containers can use path traversal sequences to write files outside the extraction directory when users download and extract logs.
A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects unknown code of the file /api/ZRQos/set_online_client. The manipulation of the argument ip leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.