Baker Hughes
Company Details
Linkedin ID:
bhge
Website:
Employees number:
65,278
Number of followers:
2,598,060
NAICS:
211
Industry Type:
Homepage:
bakerhughes.com
IP Addresses:
0
Company ID:
BAK_1892145
Scan Status:
In-progress
Baker Hughes Company CyberSecurity Posture
bakerhughes.com
Baker Hughes (NASDAQ: BKR) is an energy technology company that provides solutions for energy and industrial customers worldwide. Built on a century of experience and conducting business in over 120 countries, our innovative technologies and services are taking energy forward – making it safer, cleaner and more efficient for people and the planet. For more than a century, our inventions have revolutionized energy. We harness the power of engineering, data, and science to redefine what's possible. Our diverse portfolio of equipment and service capabilities span the energy and industrial value chain. Our two operating segments, Oilfield Services & Equipment (OFSE) and Industrial & Energy Technology (IET), are organized based on the nature of our markets and customers, and consist of similar products and services. Visit us at bakerhughes.com to learn more.
Baker Hughes A.I CyberSecurity Scoring
Baker Hughes Risk Score (AI oriented)Between 800 and 849
Baker Hughes
Updated:
- Powered by our proprietary A.I cyber incident model
- Insurance preferes TPRM score to calculate premium
Baker Hughes Global Score (TPRM)XXXX
Baker Hughes
- Instant access to detailed risk factors
- Benchmark vs. industry & size peers
- Vulnerabilities
- Findings
Baker Hughes Company CyberSecurity News & History
Past Incidents
0
Attack Types
0
No data available
Baker Hughes Company Scoring based on AI Models
Cyber Incidents Likelihood 3 - 6 - 9 months
A.I Risk Score Likelihood 3 - 6 - 9 months
Underwriter Stats for Baker Hughes
Incidents vs Oil and Gas Industry Average (This Year)
No incidents recorded for Baker Hughes in 2025.
Incidents vs All-Companies Average (This Year)
No incidents recorded for Baker Hughes in 2025.
Incident Types Baker Hughes vs Oil and Gas Industry Avg (This Year)
No incidents recorded for Baker Hughes in 2025.
Incident History — Baker Hughes (X = Date, Y = Severity)
Baker Hughes cyber incidents detection timeline including parent company and subsidiaries
Baker Hughes Company Subsidiaries
Baker Hughes (NASDAQ: BKR) is an energy technology company that provides solutions for energy and industrial customers worldwide. Built on a century of experience and conducting business in over 120 countries, our innovative technologies and services are taking energy forward – making it safer, cleaner and more efficient for people and the planet. For more than a century, our inventions have revolutionized energy. We harness the power of engineering, data, and science to redefine what's possible. Our diverse portfolio of equipment and service capabilities span the energy and industrial value chain. Our two operating segments, Oilfield Services & Equipment (OFSE) and Industrial & Energy Technology (IET), are organized based on the nature of our markets and customers, and consist of similar products and services. Visit us at bakerhughes.com to learn more.
Loading...
Baker Hughes Similar Companies
We are a global oil and gas company tasked with an important job—to safely find and deliver energy for the world. We’re experts in what we do—from the well site to the office. Across our operations and activities in 13 countries, we never forget our responsibility to be a great neighbor, and a gre
Sonatrach
Sonatrach (Société Nationale pour la Recherche, la Production, le Transport, la Transformation, et la Commercialisation des Hydrocarbures s.p.a.) is an Algerian government-owned company formed to exploit the hydrocarbon resources of the country. Its diversified activities cover all aspects of Oil &
Oxy is an international energy company with assets primarily in the United States, the Middle East and North Africa. We are one of the largest oil producers in the U.S., including a leading producer in the Permian and DJ basins, and offshore Gulf of Mexico. Our midstream and marketing segment provid
TotalEnergies
Have you ever thought of offering your skills and expertise to a multinational company? Give your best to better energy and make the commitment with TotalEnergies. With over 500-plus professions in 130 countries, we offer high safety and environmental standards, strong ethical values, an innovatio
Hindustan Petroleum Corporation Limited
Hindustan Petroleum Corporation Limited (HPCL) is a Maharatna Central Public Sector Enterprise (CPSE) and a S&P Global Platts Top 250 Global Energy Company. HPCL has a strong presence in downstream hydrocarbon sector of the country with a sizable share in petroleum product marketing and also has bus
Aker Solutions delivers integrated solutions, products and services to the global energy industry. We enable low-carbon oil and gas production and develop renewable solutions to meet future energy needs. By combining innovative digital solutions and predictable project execution we accelerate the tr
McDermott International, Ltd
McDermott is a premier provider of engineering and construction solutions to the energy industry. Our customers trust our technology-driven approach—engineered to responsibly harness and transform global energy resources into the products the world needs for now and what’s next. From concept to co
En YPF, tenemos un Plan 4x4 para convertirnos en una compañía de clase mundial y lograr transformarnos en grandes exportadores de hidrocarburos. Nuestros cuatro pilares son: la aceleración de la producción de petróleo en Vaca Muerta, el activo más importante que tiene nuestro país; la disciplina f
We’re a leading producer of the energy and chemicals that drive global commerce and enhance the daily lives of people around the globe by continuing delivering an uninterrupted supply of energy to the world. Our resilience and agility has built one of the world’s largest integrated energy and chemi
.png)
Baker Hughes CyberSecurity News
November 27, 2025 11:14 PM
ServiceNow could reportedly acquire cybersecurity startup Veza for $1B+
ServiceNow Inc. is reportedly in advanced talks to acquire Veza Inc., a startup with an identity management platform of the same name.
November 19, 2025 08:00 AM
Hall of Fame – Industrial Cybersecurity Champion Saltanat Mashirova
As part of its Hall of Fame series, Industrial Cyber caught up with Saltanat Mashirova, OT Cybersecurity Lead at CPX in the United Arab...
November 11, 2025 08:00 AM
Cybersecurity jobs available right now: November 11, 2025
Bridewell | United Kingdom | Hybrid – No longer accepting applications. As an Academy Cyber Threat Intelligence Analyst, you will manage...
November 11, 2025 08:00 AM
E&E News: Alaska LNG picks equipment provider
ENERGYWIRE | The Alaska LNG project has struck a deal with oil field technology company Baker Hughes, securing equipment for the project's...
November 06, 2025 08:00 AM
Ananym Capital Proposes Baker Hughes To Spin-Off Oilfield Services & Equipment Business
Ananym Capital Management proposed Baker Hughes Company to formally evaluate a tax-free spin-off of its Oilfield Services & Equipment (OFSE)...
October 28, 2025 07:00 AM
Baker Hughes Updates Outlook On IET Growth Momentum And LNG Exposure
Baker Hughes posts solid 3Q25 results and upgrades FY 2025 outlook backed by IET growth momentum. Expects to close the Chart acquisition by...
September 26, 2025 07:00 AM
Cybersecurity adapts to AI-driven threats
AI is reshaping cybersecurity with identity at the core. Okta and Accenture share strategies to secure human and non-human identities.
September 22, 2025 07:00 AM
Risk-based cybersecurity approach: How AWS drives efficiency
To operationalize its risk-based cybersecurity approach, AWS partners with CrowdStrike Holdings Inc. to strengthen endpoint protection.
September 18, 2025 07:00 AM
Adaptive defenses key as AI reshapes cybersecurity
CrowdStrike explores how AI is transforming cybersecurity with adaptive defenses, using new platforms and agent-driven systems.
Frequently Asked Questions
Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
Baker Hughes CyberSecurity History Information
Official Website of Baker Hughes
The official website of Baker Hughes is http://www.bakerhughes.com.
Baker Hughes’s AI-Generated Cybersecurity Score
According to Rankiteo, Baker Hughes’s AI-generated cybersecurity score is 811, reflecting their Good security posture.
How many security badges does Baker Hughes’ have ?
According to Rankiteo, Baker Hughes currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
Does Baker Hughes have SOC 2 Type 1 certification ?
According to Rankiteo, Baker Hughes is not certified under SOC 2 Type 1.
Does Baker Hughes have SOC 2 Type 2 certification ?
According to Rankiteo, Baker Hughes does not hold a SOC 2 Type 2 certification.
Does Baker Hughes comply with GDPR ?
According to Rankiteo, Baker Hughes is not listed as GDPR compliant.
Does Baker Hughes have PCI DSS certification ?
According to Rankiteo, Baker Hughes does not currently maintain PCI DSS compliance.
Does Baker Hughes comply with HIPAA ?
According to Rankiteo, Baker Hughes is not compliant with HIPAA regulations.
Does Baker Hughes have ISO 27001 certification ?
According to Rankiteo,Baker Hughes is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Industry Classification of Baker Hughes
Baker Hughes operates primarily in the Oil and Gas industry.
Number of Employees at Baker Hughes
Baker Hughes employs approximately 65,278 people worldwide.
Subsidiaries Owned by Baker Hughes
Baker Hughes presently has no subsidiaries across any sectors.
Baker Hughes’s LinkedIn Followers
Baker Hughes’s official LinkedIn profile has approximately 2,598,060 followers.
NAICS Classification of Baker Hughes
Baker Hughes is classified under the NAICS code 211, which corresponds to Oil and Gas Extraction.
Baker Hughes’s Presence on Crunchbase
Yes, Baker Hughes has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/baker-hughes.
Baker Hughes’s Presence on LinkedIn
Yes, Baker Hughes maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/bhge.
Cybersecurity Incidents Involving Baker Hughes
As of December 06, 2025, Rankiteo reports that Baker Hughes has not experienced any cybersecurity incidents.
Number of Peer and Competitor Companies
Baker Hughes has an estimated 10,499 peer or competitor companies worldwide.
Baker Hughes CyberSecurity History Information
How many cyber incidents has Baker Hughes faced ?
Total Incidents: According to Rankiteo, Baker Hughes has faced 0 incidents in the past.
What types of cybersecurity incidents have occurred at Baker Hughes ?
Incident Types: The types of cybersecurity incidents that have occurred include .
Incident Details
What are the most common types of attacks the company has faced ?
Additional Questions
.png)
Latest Global CVEs (Not Company-Specific)
Description
HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to 1.10.4, some of HedgeDoc's OAuth2 endpoints for social login providers such as Google, GitHub, GitLab, Facebook or Dropbox lack CSRF protection, since they don't send a state parameter and verify the response using this parameter. This vulnerability is fixed in 1.10.4.
Risk Information
cvss3
Base: 3.7
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N
Description
Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote code execution. An overly permissive CORS configuration (allow_origins='*' with allow_credentials=True) combined with a refresh token cookie configured as SameSite=None allows a malicious webpage to perform cross-origin requests that include credentials and successfully call the refresh endpoint. An attacker-controlled origin can therefore obtain fresh access_token / refresh_token pairs for a victim session. Obtained tokens permit access to authenticated endpoints — including built-in code-execution functionality — allowing the attacker to execute arbitrary code and achieve full system compromise.
Risk Information
cvss4
Base: 9.4
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
A vulnerability was detected in xerrors Yuxi-Know up to 0.4.0. This vulnerability affects the function OtherEmbedding.aencode of the file /src/models/embed.py. Performing manipulation of the argument health_url results in server-side request forgery. The attack can be initiated remotely. The exploit is now public and may be used. The patch is named 0ff771dc1933d5a6b78f804115e78a7d8625c3f3. To fix this issue, it is recommended to deploy a patch. The vendor responded with a vulnerability confirmation and a list of security measures they have established already (e.g. disabled URL parsing, disabled URL upload mode, removed URL-to-markdown conversion).
Risk Information
cvss2
Base: 5.8
Severity: LOW
AV:N/AC:L/Au:M/C:P/I:P/A:P
cvss3
Base: 4.7
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
A security vulnerability has been detected in Rarlab RAR App up to 7.11 Build 127 on Android. This affects an unknown part of the component com.rarlab.rar. Such manipulation leads to path traversal. It is possible to launch the attack remotely. Attacks of this nature are highly complex. It is indicated that the exploitability is difficult. The exploit has been disclosed publicly and may be used. Upgrading to version 7.20 build 128 is able to mitigate this issue. You should upgrade the affected component. The vendor responded very professional: "This is the real vulnerability affecting RAR for Android only. WinRAR and Unix RAR versions are not affected. We already fixed it in RAR for Android 7.20 build 128 and we publicly mentioned it in that version changelog. (...) To avoid confusion among users, it would be useful if such disclosure emphasizes that it is RAR for Android only issue and WinRAR isn't affected."
Risk Information
cvss2
Base: 5.1
Severity: HIGH
AV:N/AC:H/Au:N/C:P/I:P/A:P
cvss3
Base: 5.0
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
cvss4
Base: 2.3
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
A weakness has been identified in ZSPACE Q2C NAS up to 1.1.0210050. Affected by this issue is the function zfilev2_api.OpenSafe of the file /v2/file/safe/open of the component HTTP POST Request Handler. This manipulation of the argument safe_dir causes command injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
Risk Information
cvss2
Base: 9.0
Severity: LOW
AV:N/AC:L/Au:S/C:C/I:C/A:C
cvss3
Base: 8.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
cvss4
Base: 7.4
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Access Data Using Our API
Get company history
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=bhge' -H 'apikey: YOUR_API_KEY_HERE'
RapidWhat Do We Measure ?
Incident
Finding
Grade
Digital Assets
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
These are some of the factors we use to calculate the overall score:
Network Security
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
SBOM (Software Bill of Materials)
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
CMDB (Configuration Management Database)
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Threat Intelligence
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
