AFL-CIO
Company Details
Linkedin ID:
afl-cio
Website:
Employees number:
749
Number of followers:
19,903
NAICS:
921
Industry Type:
Homepage:
aflcio.org
IP Addresses:
0
Company ID:
AFL_1578395
Scan Status:
In-progress
AFL-CIO Company CyberSecurity Posture
aflcio.org
The AFL-CIO represents people who work. We are the umbrella federation for U.S. unions, with 57 unions representing more than 12.5 million working men and women. The American Federation of Labor and Congress of Industrial Organizations is an expression of the hopes and aspirations of the working people of America. We resolve to fulfill the yearning of the human spirit for liberty, justice and community; to advance individual and associational freedom; to vanquish oppression, privation and cruelty in all their forms; and to join with all persons, of whatever nationality or faith, who cherish the cause of democracy and the call of solidarity, to grace the planet with these achievements. We dedicate ourselves to improving the lives of working families, bringing fairness and dignity to the workplace and securing social equity in the nation.
AFL-CIO A.I CyberSecurity Scoring
AFL-CIO Risk Score (AI oriented)Between 700 and 749
AFL-CIO
Updated:
- Powered by our proprietary A.I cyber incident model
- Insurance preferes TPRM score to calculate premium
AFL-CIO Global Score (TPRM)XXXX
AFL-CIO
- Instant access to detailed risk factors
- Benchmark vs. industry & size peers
- Vulnerabilities
- Findings
AFL-CIO Company CyberSecurity News & History
Past Incidents
0
Attack Types
0
No data available
AFL-CIO Company Scoring based on AI Models
Cyber Incidents Likelihood 3 - 6 - 9 months
A.I Risk Score Likelihood 3 - 6 - 9 months
Underwriter Stats for AFL-CIO
Incidents vs Public Policy Offices Industry Average (This Year)
No incidents recorded for AFL-CIO in 2025.
Incidents vs All-Companies Average (This Year)
No incidents recorded for AFL-CIO in 2025.
Incident Types AFL-CIO vs Public Policy Offices Industry Avg (This Year)
No incidents recorded for AFL-CIO in 2025.
Incident History — AFL-CIO (X = Date, Y = Severity)
AFL-CIO cyber incidents detection timeline including parent company and subsidiaries
AFL-CIO Company Subsidiaries
The AFL-CIO represents people who work. We are the umbrella federation for U.S. unions, with 57 unions representing more than 12.5 million working men and women. The American Federation of Labor and Congress of Industrial Organizations is an expression of the hopes and aspirations of the working people of America. We resolve to fulfill the yearning of the human spirit for liberty, justice and community; to advance individual and associational freedom; to vanquish oppression, privation and cruelty in all their forms; and to join with all persons, of whatever nationality or faith, who cherish the cause of democracy and the call of solidarity, to grace the planet with these achievements. We dedicate ourselves to improving the lives of working families, bringing fairness and dignity to the workplace and securing social equity in the nation.
Loading...
AFL-CIO Similar Companies
Consumer Council
Established under the Consumer Council Ordinance (Cap. 216), the Consumer Council is committed to enhancing consumer welfare and empowering consumers to protect themselves, by acting as advocate for consumer interests, facilitating constructive discussion and promulgation of pro-consumer policies, a
Muslim Public Affairs Council Foundation
Founded in 1988, the Muslim Public Affairs Council (MPAC) is a national public affairs nonprofit organization working to promote and strengthen American pluralism by increasing understanding and improving policies that impact American Muslims. Over the past 30 years, MPAC has built a reputation of b
Creative UK
Here for those who dare to imagine. Creative UK works to harness the power of the Creative Industries to build a stronger, fairer, and more prosperous future. Creative UK is the result of the Creative Industries Federation and Creative England coming together under one brand identity. We will cont
Alliance for Health Policy
The Alliance for Health Policy is a nonpartisan, not-for-profit organization dedicated to helping policymakers and the public better understand health policy, the root of the nation’s health care issues, and the trade-offs posed by various proposals for change. We believe a better health care system
Benchmark Strategies
Benchmark Strategies is a Boston-based public affairs firm led by Patrick Bench. Benchmark Strategies provides strategic counsel and public affairs services to international and domestic businesses, large corporations, small businesses and non-profits. Benchmark Strategies specializes in economi
Washington State Board of Education
Vision The Washington State Board of Education envisions an education system where students are engaged in personalized education pathways that prepare them for civic engagement, careers, postsecondary education, and lifelong learning. Mission The mission of the State Board of Education is to prov
.png)
AFL-CIO CyberSecurity News
November 20, 2025 08:18 PM
Inside UMassD November 20, 2025
The Arnold M. Dubin Labor Education Center marked 50 years of empowering workers and advancing social and economic justice, honoring AFL-CIO...
November 07, 2025 06:13 AM
CISA Fired 45 Stakeholder Engagement Personnel Since Shutdown, Court Told (Nov 6, 2025)
By Tom Leithauser The Cybersecurity and Infrastructure Security Agency laid off 54 employees in its stakeholder engagement division on Oct.
October 22, 2025 07:00 AM
Microsoft CEO Satya Nadella gets a $17 million pay raise
Sadella made headlines last year when he asked the company's board to cut his salary following a number of cybersecurity issues at the...
October 16, 2025 07:00 AM
Judge orders Trump administration to pause shutdown layoffs
Last week the Trump administration began firing thousands, saying it was due to the government shutdown.
October 10, 2025 07:00 AM
Trump administration begins laying off more than 4,000 federal workers amid government shutdown, court filing shows
Affected agencies include the departments of Homeland Security, Education, Treasury, Energy and Health and Human Services, according to a...
August 15, 2025 07:00 AM
Veterans Affairs employees protesting across the country over Trump administration changes
The workers warn that staffing reductions and erosion of collective bargaining at the VA will hurt the agency's ability to support veterans.
July 16, 2025 07:00 AM
Gov. Katie Hobbs Earns the Endorsement of Arizona AFL-CIO
PHOENIX – Today, Gov. Katie Hobbs is proud to announce the first endorsement of her campaign: the Arizona AFL-CIO, which represents over...
June 09, 2025 07:00 AM
Privacy Victory! Judge Grants Preliminary Injunction in OPM/DOGE Lawsuit
In a victory for personal privacy, a New York federal district court judge today granted a preliminary injunction in a lawsuit challenging...
May 29, 2025 07:00 AM
The Rise of AI Agents: Anticipating Cybersecurity Opportunities, Risks, and the Next Frontier
This study explores the cybersecurity implications of AI agents and presents a three-pronged framework to guide secure design and responsible deployment.
Frequently Asked Questions
Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
AFL-CIO CyberSecurity History Information
Official Website of AFL-CIO
The official website of AFL-CIO is http://www.aflcio.org.
AFL-CIO’s AI-Generated Cybersecurity Score
According to Rankiteo, AFL-CIO’s AI-generated cybersecurity score is 749, reflecting their Moderate security posture.
How many security badges does AFL-CIO’ have ?
According to Rankiteo, AFL-CIO currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
Does AFL-CIO have SOC 2 Type 1 certification ?
According to Rankiteo, AFL-CIO is not certified under SOC 2 Type 1.
Does AFL-CIO have SOC 2 Type 2 certification ?
According to Rankiteo, AFL-CIO does not hold a SOC 2 Type 2 certification.
Does AFL-CIO comply with GDPR ?
According to Rankiteo, AFL-CIO is not listed as GDPR compliant.
Does AFL-CIO have PCI DSS certification ?
According to Rankiteo, AFL-CIO does not currently maintain PCI DSS compliance.
Does AFL-CIO comply with HIPAA ?
According to Rankiteo, AFL-CIO is not compliant with HIPAA regulations.
Does AFL-CIO have ISO 27001 certification ?
According to Rankiteo,AFL-CIO is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Industry Classification of AFL-CIO
AFL-CIO operates primarily in the Public Policy Offices industry.
Number of Employees at AFL-CIO
AFL-CIO employs approximately 749 people worldwide.
Subsidiaries Owned by AFL-CIO
AFL-CIO presently has no subsidiaries across any sectors.
AFL-CIO’s LinkedIn Followers
AFL-CIO’s official LinkedIn profile has approximately 19,903 followers.
NAICS Classification of AFL-CIO
AFL-CIO is classified under the NAICS code 921, which corresponds to Executive, Legislative, and Other General Government Support.
AFL-CIO’s Presence on Crunchbase
No, AFL-CIO does not have a profile on Crunchbase.
AFL-CIO’s Presence on LinkedIn
Yes, AFL-CIO maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/afl-cio.
Cybersecurity Incidents Involving AFL-CIO
As of November 28, 2025, Rankiteo reports that AFL-CIO has not experienced any cybersecurity incidents.
Number of Peer and Competitor Companies
AFL-CIO has an estimated 1,023 peer or competitor companies worldwide.
AFL-CIO CyberSecurity History Information
How many cyber incidents has AFL-CIO faced ?
Total Incidents: According to Rankiteo, AFL-CIO has faced 0 incidents in the past.
What types of cybersecurity incidents have occurred at AFL-CIO ?
Incident Types: The types of cybersecurity incidents that have occurred include .
Incident Details
What are the most common types of attacks the company has faced ?
Additional Questions
.png)
Latest Global CVEs (Not Company-Specific)
Description
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.
Risk Information
cvss4
Base: 7.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
- https://github.com/angular/angular/commit/0276479e7d0e280e0f8d26fa567d3b7aa97a516f
- https://github.com/angular/angular/commit/05fe6686a97fa0bcd3cf157805b3612033f975bc
- https://github.com/angular/angular/commit/3240d856d942727372a705252f7c8c115394a41e
- https://github.com/angular/angular/releases/tag/19.2.16
- https://github.com/angular/angular/releases/tag/20.3.14
- https://github.com/angular/angular/releases/tag/21.0.1
- https://github.com/angular/angular/security/advisories/GHSA-58c5-g7wp-6w37
Description
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.
Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.
Risk Information
cvss4
Base: 6.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.
Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.
Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Access Data Using Our API
Get company history
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=afl-cio' -H 'apikey: YOUR_API_KEY_HERE'
RapidWhat Do We Measure ?
Incident
Finding
Grade
Digital Assets
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
These are some of the factors we use to calculate the overall score:
Network Security
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
SBOM (Software Bill of Materials)
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
CMDB (Configuration Management Database)
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Threat Intelligence
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
