What is the official website of BB Asset Management ?

The official website of BB Asset Management is https://www.bb.com.br/pbb/pagina-inicial/bb-asset#/.

What is BB Asset Management's cybersecurity risk score?

BB Asset Management has an AI-generated cybersecurity risk score of 746 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has BB Asset Management experienced?

According to Rankiteo, BB Asset Management currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has BB Asset Management been affected by any supply chain cyber incidents ?

According to Rankiteo, BB Asset Management has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does BB Asset Management have SOC 2 Type 1 certification ?

According to Rankiteo, BB Asset Management is not certified under SOC 2 Type 1.

Does BB Asset Management have SOC 2 Type 2 certification ?

According to Rankiteo, BB Asset Management does not hold a SOC 2 Type 2 certification.

Does BB Asset Management comply with GDPR ?

According to Rankiteo, BB Asset Management is not listed as GDPR compliant.

Does BB Asset Management have PCI DSS certification ?

According to Rankiteo, BB Asset Management does not currently maintain PCI DSS compliance.

Does BB Asset Management comply with HIPAA ?

According to Rankiteo, BB Asset Management is not compliant with HIPAA regulations.

Does BB Asset Management have ISO 27001 certification ?

According to Rankiteo,BB Asset Management is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does BB Asset Management operate in ?

BB Asset Management operates primarily in the Investment Management industry.

How many employees does BB Asset Management have ?

BB Asset Management employs approximately 68 people worldwide.

Does BB Asset Management own any subsidiaries ?

BB Asset Management presently has no subsidiaries across any sectors.

How many LinkedIn followers does BB Asset Management have ?

BB Asset Management's official LinkedIn profile has approximately 34,393 followers.

What is the NAICS classification code for BB Asset Management ?

BB Asset Management is classified under the NAICS code 5239, which corresponds to Other Financial Investment Activities.

Does BB Asset Management have a Crunchbase profile ?

No, BB Asset Management does not have a profile on Crunchbase.

Does BB Asset Management have a LinkedIn profile ?

Yes, BB Asset Management maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/bbasset.

How many cybersecurity incidents has BB Asset Management experienced ?

As of July 2, 2026, Rankiteo reports that BB Asset Management has not experienced any cybersecurity incidents.

How many peer or competitor companies does BB Asset Management have ?

BB Asset Management has an estimated 5,364 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

BAM

Boost Score +25 with badge (5 left)

746

/1000

Moderate

771

/1000

Fair

BB Asset Management Vendor Cyber Rating & Cyber Score

bb.com.br

Add Your Compliance Badge

A BB Asset Management é uma empresa especialista na gestão de recursos de terceiros e na administração dos fundos de investimento dos clientes do Banco do Brasil, distribuídos na maior rede de atendimento bancário do país. A empresa iniciou suas atividades em 1986 e ao longo desses anos passou por mudanças para aperfeiçoar sua estrutura. A BB Asset é líder da indústria nacional de fundos de investimento e carteiras administradas, com patrimônio superior a R$ 1 trilhão, conforme ranking da ANBIMA.

BAM A.I CyberSecurity Scoring

Scoring History

BAM

BB Asset Management CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

BAM Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for BAM

Incidents vs Investment Management Industry Avg (This Year)

No incidents recorded for BB Asset Management in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for BB Asset Management in 2026.

Incident Types BAM vs Investment Management Industry Avg (This Year)

No incidents recorded for BB Asset Management in 2026.

Incident History - BAM (X = Date, Y = Severity)

Loading…

SUBSIDIARY

BB Asset Management Subsidiaries

BAM

Investment Management

Website: https://www.bb.com.br/pbb/pagina-inicial/bb-asset#/

Company Size: 201-500 employees

Banco do BrasilBanking

BB PrivateBancos

Loading…

BB Asset Management Similar Companies

Essar

essar.com

Essar, with an entrepreneurial track record spanning 50+ years, specialises in investing and developing assets to create value in core sectors such as Energy, Infrastructure, Metals & Mining, and Technology & Retail. With a presence in eight countries, Essar generates revenues of US$15 billion and provides employment for over 7,000 people. Over the past five years, Essar has strategically rebalanced its portfolio by monetising some world-class assets. Essar is now positioned to transition its existing assets to a greener regime and invest in businesses driving the transformation of sector landscapes from carbon-centric to a clean energy ecosystem, both nationally and globally. The Group is developing sustainable assets and industry ecosystems, with a particular focus on hydrogen, green mobility, and green steel. Essar Foundation, the CSR arm of Essar, has a rich 50-year heritage of service across India, focusing on areas such as health, education, livelihood, women empowerment, sports, environment, and infrastructure.

Sonae

sonae.pt

Sonae exists to create a lasting positive impact on businesses, people, communities and on the planet. Managing a diverse portfolio of businesses in retail, financial services, technology, investments, real estate and telecommunications, Sonae makes the most of its expertise and pushes itself to create the future we all want and need. Creating today a better tomorrow, for all.

Sabanci Holding

sabanci.com

Sabancı Holding is one of Turkey’s leading conglomerate, engaged in a wide variety of business activities through its subsidiaries and affiliates, mainly in the banking, financial services, energy, industrials, building materials and retail sectors. Our Group companies most of which are leaders in their respective sectors. As Sabancı Group, we position ourselves in new economy, with global partnerships, employment for 60 thousand, and reaching more than 40 million people on 5 continents. We invest in energy & climate, material and digital technologies, through an agile global footprint to design a sustainable future with a goal of achieving 'Net Zero' by 2050. We stride confidently towards the future through Sabancı of New Generation culture and our purpose driven, stakeholder oriented, agile and diverse organization. We are committed to ensuring equal rights and opportunities to foster a positive and an inclusive work environment and to contribute to the socio economic development of the community. With tens of thousands of talents, stakeholders and investments in multiple businesses worldwide, what connects us is our purpose: We unite Turkey and the World for a sustainable life with leading enterprises.

Ackermans & van Haaren

avh.be

Ackermans & van Haaren is a diversified group active in 4 core sectors: Marine Engineering & Contracting (DEME, one of the largest dredging companies in the world - CFE, a construction group with headquarters in Belgium), Private Banking (Delen Private Bank, one of the largest independent private asset managers in Belgium, and asset manager JM Finn in the UK - Bank J.Van Breda & C°, niche bank for entrepreneurs and liberal professions in Belgium), Real Estate & Senior Care (Nextensa, a Euronext-listed land and real estate developer focused on Belgium and Luxembourg) and Energy & Resources (SIPEF, an agro-industrial group in tropical agriculture). In 2023, through its share in its participations, the AvH group represented a turnover of 6.5 billion euros and employed 21,887 people. The group concentrates on a limited number of strategic participations with significant potential for growth. The AvH share is part of the BEL20 index, the BEL-ESG index of Euronext Brussels and the European DJ Stoxx 600.

Odebrecht

novonor.com.br

Founded in 1944, Odebrecht is a Brazilian group with diverse businesses and world-class standards of quality. Its Members, guided by the Group’s own philosophy, the Odebrecht Entrepreneurial Technology (TEO), provide services and manufacture products for clients on five continents. As part of their entrepreneurial responsibility while serving clients and local communities, they contribute to the development of economically prosperous, socially just, environmentally sustainable, politically inclusive and culturally rich societies and countries.

Loading…

NEWS

BB Asset Management CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

January 04, 2026 08:00 AM

Best Cybersecurity Stocks To Consider – January 3rd

CrowdStrike, Palo Alto Networks, Fortinet, SentinelOne, Globant, BlackBerry, and NetScout Systems are the seven Cybersecurity stocks to...

Read Article

January 01, 2026 08:00 AM

PICC P&C Signs Three-Year Connected Technology Service Deal With PICC Technology

Detailed price information for Picc Property and Casualty Co. Ltd (PPCCF) from The Globe and Mail including charting and trades.

Read Article

December 31, 2025 08:00 AM

BlackBerry (BB): Earnings Beat, IoT Growth, Analyst Neutrality

BlackBerry Limited (NYSE:BB) is one of the best NYSE stocks under $5 to buy. On December 19, RBC Capital reaffirmed its Sector Perform...

Read Article

December 19, 2025 08:00 AM

BlackBerry Seeks New Growth Pathway Amid Financial Shifts

BlackBerry Limited stocks have been trading down by -9.7 percent following escalating concerns around counterintelligence measures impacting...

Read Article

December 07, 2025 08:00 AM

BlackBerry Stock (BB) on December 7, 2025: Price, QNX EV Deal, Analyst Forecasts and AI-Powered Outlook

Updated: December 7, 2025. BlackBerry Limited (NYSE: BB, TSX: BB) heads into mid-December 2025 as a lean software company focused on cybersecurity and...

Read Article

December 06, 2025 08:00 AM

BlackBerry Stock Outlook: Can BB’s Cybersecurity and QNX Wins Power the Next Leg Higher in 2025–2026?

As of 6 December 2025, BlackBerry Limited (NYSE: BB; TSX: BB) is back on many traders' and long‑term investors' watchlists.

Read Article

December 03, 2025 08:00 AM

Private Market Titans Step Up to Prove Resilience

Welcome to Going Private, Bloomberg's twice-weekly newsletter about private markets and the forces moving capital away from the public eye.

Read Article

November 25, 2025 09:54 PM

$1B Broker/Dealer Dempsey Lord Smith Moves to Cambridge

Former independent broker/dealer with $1B in assets transitions to Cambridge Investment Research while maintaining leadership team.

Read Article

November 22, 2025 08:00 AM

PE Firms Flood Junk Debt Market to Pay Themselves: Credit Weekly

Private equity firms, struggling to find buyers for their investments, are turning to an old playbook like never before.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-55790

SUMMARY

Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.22 and 4.0.0-RC1 through 4.17.15, an attacker with only a GitHub account can plant a JavaScript payload in a craftcms/cms issue title. When a Craft admin uses the CraftSupport widget’s "Give feedback" screen and types a search term that returns the poisoned issue, the payload executes in the admin’s control panel session. No control panel account or elevated privileges are required on the attacker’s side. This issue has been fixed in versions 4.17.16 and 5.9.23.

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

cvss4

Base Score: 7.4

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-50284

SUMMARY

Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.21 and 4.0.0-RC1 through 4.17.14, theAssetsController::actionDeleteFolder() only requires the deleteAssets:<volume-uid> permission for the target folder. It never enforces deletePeerAssets:<volume-uid>, even though Assets::deleteFoldersByIds() cascades deletion to every descendant folder and every asset inside, regardless of the uploader's assigned privileges. A low-privilege user who has been granted folder-management rights on a shared volume can therefore destroy assets uploaded by other users (peer assets), bypassing the per-asset peer-permission check that the sibling actionDeleteAsset endpoint correctly applies. This issue has been fixed in versions 4.17.15 and 5.9.22.

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-50283

SUMMARY

Craft CMS is a content management system (CMS). Versions 5.0.0-RC1 through 5.9.20, and 4.0.0-RC1 through 4.17.13 contain an authorization issue in the AssetsController::actionReplaceFile that can delete a source asset without source delete permission by supplying both assetId and sourceAssetId. AssetsController::actionReplaceFile() supports replacing a target asset file using another existing asset as the source. The action loads: assetId -> $assetToReplace and sourceAssetId -> $sourceAsset, then enforces replace permissions using ($assetToReplace ?: $sourceAsset). When both IDs are provided, this expression resolves to the target asset so no permission check is performed against the source asset volume. When both assets are present, Craft copies the source file into the target and then deletes the source asset. There is no deletion check for for the source asset. An authenticated user who can replace files in one volume can delete assets in another volume where they do not have delete permission, as long as they can obtain a sourceAssetId, leading to broken content references and data loss. This issue has been fixed in versions 4.17.14 and 5.9.21.

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-14440

SUMMARY

Description: To issue and renew TLS certificates on behalf of customers, Cloudflare's Universal SSL feature automatically manages the CAA RRset for the customer's zone. This auto-managed RRset is permissive by design (e.g. 'issue "letsencrypt.org"' without parameters). On Universal SSL zones, Cloudflare's authoritative DNS serves this auto-managed RRset at query time, superseding any customer-configured CAA records on the zone. When a customer publishes a stricter CAA record using the RFC 8657 accounturi or validationmethods parameters, the Certificate Authority does not observe those parameters when evaluating the served RRset under RFC 8659. As a result, the RFC 8657 account-binding and validation-method-binding protections are not enforced end-to-end on Universal SSL zones. Successful exploitation could result in issuance of a browser-trusted TLS certificate to an attacker, enabling MITM against the affected domain. Exploitation is non-trivial in practice: an attacker would need to hold an ACME account at one of the Certificate Authorities in the served CAA RRset and to simultaneously satisfy domain control validation across the multiple geographically distinct Network Perspectives the CA relies on for Multi-Perspective Issuance Corroboration. Cloudflare prefixes are anycast-announced from hundreds of locations globally, raising the bar against single-vantage-point BGP hijacks. Any resulting misissuance of a browser-trusted certificate is subject to Certificate Transparency logging required by major browsers, and would be visible to CT monitoring. Mitigation: Customers requiring strict RFC 8657 enforcement need to disable Universal SSL on the affected zone. Universal SSL's automatic CAA management and customer-set RFC 8657 accounturi and validationmethods enforcement are mutually exclusive by the nature of the issue, so there is no in-product workaround that preserves both. Certificate Transparency monitoring is recommended for all customers as a general detection control. Credits: David Osipov (ORCID: https://orcid.org/0009-0005-2713-9242), independent researcher

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

cvss4

Base Score: 7.6

Complexity: HIGH

CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-14422

SUMMARY

Out of bounds read and write in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…