Comparison Overview

Broadcom

VS

GlobalFoundries

Broadcom

3401 Hillview Ave, Palo Alto, California, US, 94304
Last Update: 2025-12-11
Between 750 and 799

A global infrastructure technology leader built on more than 60 years of innovation, collaboration and engineering excellence.

NAICS: 3344
NAICS Definition: Semiconductor and Other Electronic Component Manufacturing
Employees: 53,946
Subsidiaries: 15
12-month incidents
2
Known data breaches
1
Attack type number
3

GlobalFoundries

400 Stone Break Road Extension, Malta, 12020, US
Last Update: 2025-12-10
Between 750 and 799

GlobalFoundries (GF) is one of the world’s leading semiconductor manufacturers. GF is redefining innovation and semiconductor manufacturing by developing and delivering feature-rich process technology solutions that provide leadership performance in pervasive high growth markets. GF offers a unique mix of design, development, and fabrication services. With a talented and diverse workforce and an at-scale manufacturing footprint spanning the U.S., Europe and Asia, GF is a trusted technology source to its worldwide customers. For more information, visit www.gf.com. GlobalFoundries is an Equal Employment Opportunity/Affirmative Action (EEO/AA) employer.

NAICS: 3344
NAICS Definition: Semiconductor and Other Electronic Component Manufacturing
Employees: 13,638
Subsidiaries: 1
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/broadcom.jpeg
Broadcom
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/globalfoundries.jpeg
GlobalFoundries
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Broadcom
100%
Compliance Rate
0/4 Standards Verified
GlobalFoundries
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Semiconductor Manufacturing Industry Average (This Year)

Broadcom has 150.0% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs Semiconductor Manufacturing Industry Average (This Year)

No incidents recorded for GlobalFoundries in 2025.

Incident History — Broadcom (X = Date, Y = Severity)

Broadcom cyber incidents detection timeline including parent company and subsidiaries

Incident History — GlobalFoundries (X = Date, Y = Severity)

GlobalFoundries cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/broadcom.jpeg
Broadcom
Incidents

Date Detected: 6/2025
Type:Ransomware
Attack Vector: Zero-Day Exploit (CVE-2025-61882, CVE-2025-21884), Unauthenticated HTTP Requests, Data Exfiltration
Motivation: Financial Gain (Ransomware Extortion)
Blog: Blog

Date Detected: 5/2025
Type:Ransomware
Attack Vector: zero-day vulnerability in Oracle E-Business Suite, arbitrary code execution, lateral movement, credential theft, data exfiltration
Motivation: financial gain (ransomware), data theft for extortion, disruption of high-value enterprise targets
Blog: Blog

Date Detected: 9/2024
Type:Ransomware
Attack Vector: third-party vendor (BSH, a regional partner of ADP)
Motivation: financial gain, data theft
Blog: Blog
https://images.rankiteo.com/companyimages/globalfoundries.jpeg
GlobalFoundries
Incidents

No Incident

FAQ

GlobalFoundries company demonstrates a stronger AI Cybersecurity Score compared to Broadcom company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Broadcom company has historically faced a number of disclosed cyber incidents, whereas GlobalFoundries company has not reported any.

In the current year, Broadcom company has reported more cyber incidents than GlobalFoundries company.

Broadcom company has confirmed experiencing a ransomware attack, while GlobalFoundries company has not reported such incidents publicly.

Broadcom company has disclosed at least one data breach, while the other GlobalFoundries company has not reported such incidents publicly.

Neither GlobalFoundries company nor Broadcom company has reported experiencing targeted cyberattacks publicly.

Broadcom company has disclosed at least one vulnerability, while GlobalFoundries company has not reported such incidents publicly.

Neither Broadcom nor GlobalFoundries holds any compliance certifications.

Neither company holds any compliance certifications.

Broadcom company has more subsidiaries worldwide compared to GlobalFoundries company.

Broadcom company employs more people globally than GlobalFoundries company, reflecting its scale as a Semiconductor Manufacturing.

Neither Broadcom nor GlobalFoundries holds SOC 2 Type 1 certification.

Neither Broadcom nor GlobalFoundries holds SOC 2 Type 2 certification.

Neither Broadcom nor GlobalFoundries holds ISO 27001 certification.

Neither Broadcom nor GlobalFoundries holds PCI DSS certification.

Neither Broadcom nor GlobalFoundries holds HIPAA certification.

Neither Broadcom nor GlobalFoundries holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Hitachi Vantara Pentaho Data Integration and Analytics Community Dashboard Framework prior to versions 10.2.0.4, including 9.3.0.x and 8.3.x display the full server stack trace when encountering an error within the GetCdfResource servlet.

Risk Information
cvss3
Base: 5.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Description

Pentaho Data Integration and Analytics Community Dashboard Editor plugin versions before 10.2.0.4, including 9.3.0.x and 8.3.x, deserialize untrusted JSON data without constraining the parser to approved classes and methods.

Risk Information
cvss3
Base: 8.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description

A security flaw has been discovered in CTCMS Content Management System up to 2.1.2. The impacted element is an unknown function in the library /ctcms/libs/Ct_Config.php of the component Backend System Configuration Module. The manipulation of the argument Cj_Add/Cj_Edit results in code injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.

Risk Information
cvss2
Base: 5.8
Severity: LOW
AV:N/AC:L/Au:M/C:P/I:P/A:P
cvss3
Base: 4.7
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A vulnerability was identified in CTCMS Content Management System up to 2.1.2. The affected element is the function Save of the file /ctcms/libs/Ct_App.php of the component Backend App Configuration Module. The manipulation of the argument CT_App_Paytype leads to code injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Risk Information
cvss2
Base: 5.8
Severity: LOW
AV:N/AC:L/Au:M/C:P/I:P/A:P
cvss3
Base: 4.7
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Weblate is a web based localization tool. In versions prior to 5.15, it was possible to accept an invitation opened by a different user. Version 5.15. contains a patch. As a workaround, avoid leaving one's Weblate sessions with an invitation opened unattended.

Risk Information
cvss4
Base: 1.0
Severity: HIGH
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X