Company Details
candles-holocaust-museum-and-education-center
16
266
712
candlesholocaustmuseum.org
0
CAN_1795971
In-progress

CANDLES Holocaust Museum and Education Center Company CyberSecurity Posture
candlesholocaustmuseum.orgCANDLES Holocaust Museum and Education Center shines a light on the story of the Holocaust and Eva Kor, to create an empowered community of critical thinkers who will illuminate the world with hope, healing, respect, and responsibility. CANDLES Holocaust Museum and Education Center is the only organization in the world dedicated to the memory of the twin victims and survivors of medical experimentation at Auschwitz. We honor and celebrate the lives of the Mengele Twins by telling their stories, to educate the world and prevent similar atrocities. Our institution is not only a witness to history, but also an active voice outside the museum walls. By working to prevent genocide on a global level and transform prejudice on a local level, we aim to create a world free from hatred and genocide.
Company Details
candles-holocaust-museum-and-education-center
16
266
712
candlesholocaustmuseum.org
0
CAN_1795971
In-progress
Between 750 and 799

CHMEC Global Score (TPRM)XXXX



No incidents recorded for CANDLES Holocaust Museum and Education Center in 2025.
No incidents recorded for CANDLES Holocaust Museum and Education Center in 2025.
No incidents recorded for CANDLES Holocaust Museum and Education Center in 2025.
CHMEC cyber incidents detection timeline including parent company and subsidiaries

CANDLES Holocaust Museum and Education Center shines a light on the story of the Holocaust and Eva Kor, to create an empowered community of critical thinkers who will illuminate the world with hope, healing, respect, and responsibility. CANDLES Holocaust Museum and Education Center is the only organization in the world dedicated to the memory of the twin victims and survivors of medical experimentation at Auschwitz. We honor and celebrate the lives of the Mengele Twins by telling their stories, to educate the world and prevent similar atrocities. Our institution is not only a witness to history, but also an active voice outside the museum walls. By working to prevent genocide on a global level and transform prejudice on a local level, we aim to create a world free from hatred and genocide.


THE MISSION The National Infantry Museum and Soldier Center opened in 2009 with one guiding mission: to honor the legacy and valor of the U.S. Army Infantryman. EDUCATION Telling the story of our nation’s past with the latest in technological innovation. Customizable tour packages available for stu

The New England Air Museum is a private, non-profit educational institution proud which restores and displays the region’s largest collection of historically significant aircraft and aviation memorabilia. The museum sees 50,000 visitors each year, and educational programs serve 5,000 students annual

Created in 1980, SFO Museum was the first cultural institution of its kind located in an international airport. An ever-changing schedule of exhibitions on a diverse range of subjects provides an educational and cultural experience for all visitors to the Airport. SFO Museum's mission is to deligh

Established in 1934 as the “Berkshire Garden Center” and revered as one of the older public display gardens in the Northeast, Berkshire Botanical Garden is a not-for-profit, membership-supported educational organization encompassing more than 15 acres of land at the intersection of Routes 102 and 18

The Tennessee State Museum is now open at the new location 1000 Rosa Parks Boulevard. The new Museum sits at the foot of Capitol Hill at the corner of Rosa Parks Boulevard and Jefferson Street and overlooks Bicentennial Mall State Park. The new 137,000-square-foot facility, is designed to bring hi

The NAS was formed to further interest in our underwater cultural heritage. We are dedicated to advancing education in nautical archaeology at all levels from the general public to professionals in the sector. To this end we: run an accredited training programme, publish a peer-reviewed journal; org
.png)
Eva Mozes Kor died peacefully in Krakow, Poland, at the age of 85, according to the CANDLES Holocaust Museum and Education Center she founded.
Eva Kor, a dauntless Holocaust survivor and co-founder of Terre Haute's CANDLES Holocaust Museum and Education Center, stood Tuesday where...

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of CANDLES Holocaust Museum and Education Center is http://www.candlesholocaustmuseum.org/.
According to Rankiteo, CANDLES Holocaust Museum and Education Center’s AI-generated cybersecurity score is 763, reflecting their Fair security posture.
According to Rankiteo, CANDLES Holocaust Museum and Education Center currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, CANDLES Holocaust Museum and Education Center is not certified under SOC 2 Type 1.
According to Rankiteo, CANDLES Holocaust Museum and Education Center does not hold a SOC 2 Type 2 certification.
According to Rankiteo, CANDLES Holocaust Museum and Education Center is not listed as GDPR compliant.
According to Rankiteo, CANDLES Holocaust Museum and Education Center does not currently maintain PCI DSS compliance.
According to Rankiteo, CANDLES Holocaust Museum and Education Center is not compliant with HIPAA regulations.
According to Rankiteo,CANDLES Holocaust Museum and Education Center is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
CANDLES Holocaust Museum and Education Center operates primarily in the Museums, Historical Sites, and Zoos industry.
CANDLES Holocaust Museum and Education Center employs approximately 16 people worldwide.
CANDLES Holocaust Museum and Education Center presently has no subsidiaries across any sectors.
CANDLES Holocaust Museum and Education Center’s official LinkedIn profile has approximately 266 followers.
CANDLES Holocaust Museum and Education Center is classified under the NAICS code 712, which corresponds to Museums, Historical Sites, and Similar Institutions.
No, CANDLES Holocaust Museum and Education Center does not have a profile on Crunchbase.
Yes, CANDLES Holocaust Museum and Education Center maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/candles-holocaust-museum-and-education-center.
As of December 03, 2025, Rankiteo reports that CANDLES Holocaust Museum and Education Center has not experienced any cybersecurity incidents.
CANDLES Holocaust Museum and Education Center has an estimated 2,133 peer or competitor companies worldwide.
Total Incidents: According to Rankiteo, CANDLES Holocaust Museum and Education Center has faced 0 incidents in the past.
Incident Types: The types of cybersecurity incidents that have occurred include .
.png)
vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.11.1, vllm has a critical remote code execution vector in a config class named Nemotron_Nano_VL_Config. When vllm loads a model config that contains an auto_map entry, the config class resolves that mapping with get_class_from_dynamic_module(...) and immediately instantiates the returned class. This fetches and executes Python from the remote repository referenced in the auto_map string. Crucially, this happens even when the caller explicitly sets trust_remote_code=False in vllm.transformers_utils.config.get_config. In practice, an attacker can publish a benign-looking frontend repo whose config.json points via auto_map to a separate malicious backend repo; loading the frontend will silently run the backend’s code on the victim host. This vulnerability is fixed in 0.11.1.
fastify-reply-from is a Fastify plugin to forward the current HTTP request to another server. Prior to 12.5.0, by crafting a malicious URL, an attacker could access routes that are not allowed, even though the reply.from is defined for specific routes in @fastify/reply-from. This vulnerability is fixed in 12.5.0.
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 21.0.2, 20.3.15, and 19.2.17, A Stored Cross-Site Scripting (XSS) vulnerability has been identified in the Angular Template Compiler. It occurs because the compiler's internal security schema is incomplete, allowing attackers to bypass Angular's built-in security sanitization. Specifically, the schema fails to classify certain URL-holding attributes (e.g., those that could contain javascript: URLs) as requiring strict URL security, enabling the injection of malicious scripts. This vulnerability is fixed in 21.0.2, 20.3.15, and 19.2.17.
Gin-vue-admin is a backstage management system based on vue and gin. In 2.8.6 and earlier, attackers can delete any file on the server at will, causing damage or unavailability of server resources. Attackers can control the 'FileMd5' parameter to delete any file and folder.
Portkey.ai Gateway is a blazing fast AI Gateway with integrated guardrails. Prior to 1.14.0, the gateway determined the destination baseURL by prioritizing the value in the x-portkey-custom-host request header. The proxy route then appends the client-specified path to perform an external fetch. This can be maliciously used by users for SSRF attacks. This vulnerability is fixed in 1.14.0.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.