What is the official website of CB&I ?

The official website of CB&I is http://www.cbi.com/.

What is CB&I's cybersecurity risk score?

CB&I has an AI-generated cybersecurity risk score of 772 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has CB&I experienced?

According to Rankiteo, CB&I currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has CB&I been affected by any supply chain cyber incidents ?

According to Rankiteo, CB&I has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does CB&I have SOC 2 Type 1 certification ?

According to Rankiteo, CB&I is not certified under SOC 2 Type 1.

Does CB&I have SOC 2 Type 2 certification ?

According to Rankiteo, CB&I does not hold a SOC 2 Type 2 certification.

Does CB&I comply with GDPR ?

According to Rankiteo, CB&I is not listed as GDPR compliant.

Does CB&I have PCI DSS certification ?

According to Rankiteo, CB&I does not currently maintain PCI DSS compliance.

Does CB&I comply with HIPAA ?

According to Rankiteo, CB&I is not compliant with HIPAA regulations.

Does CB&I have ISO 27001 certification ?

According to Rankiteo,CB&I is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does CB&I operate in ?

CB&I operates primarily in the Oil and Gas industry.

How many employees does CB&I have ?

CB&I employs approximately 11,368 people worldwide.

Does CB&I own any subsidiaries ?

CB&I presently has no subsidiaries across any sectors.

How many LinkedIn followers does CB&I have ?

CB&I's official LinkedIn profile has approximately 299,857 followers.

What is the NAICS classification code for CB&I ?

CB&I is classified under the NAICS code 211, which corresponds to Oil and Gas Extraction.

Does CB&I have a Crunchbase profile ?

Yes, CB&I has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/cb-i.

Does CB&I have a LinkedIn profile ?

Yes, CB&I maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/cb&i.

How many cybersecurity incidents has CB&I experienced ?

As of June 6, 2026, Rankiteo reports that CB&I has not experienced any cybersecurity incidents.

How many peer or competitor companies does CB&I have ?

CB&I has an estimated 10,929 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

CB&I

Boost Score +25 with badge (5 left)

772

/1000

Fair

797

/1000

Fair

CB&I Vendor Cyber Rating & Cyber Score

cbi.com

cb in

Add Your Compliance Badge

CB&I is the world’s leading designer and builder of storage facilities, tanks, and terminals. With more than 60,000 structures completed throughout its 135+ year history, CB&I has the global expertise and strategically located operations to provide its customers world-class storage solutions for even the most complex energy infrastructure projects. CB&I is owned by a consortium of financial investors led by Mason Capital Management LLC. To learn more, visit www.cbi.com.

CB&I A.I CyberSecurity Scoring

Scoring History

CB&I

CB&I CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

CB&I Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for CB&I

Incidents vs Oil and Gas Industry Avg (This Year)

No incidents recorded for CB&I in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for CB&I in 2026.

Incident Types CB&I vs Oil and Gas Industry Avg (This Year)

No incidents recorded for CB&I in 2026.

Incident History - CB&I (X = Date, Y = Severity)

Loading…

SUBSIDIARY

CB&I Subsidiaries

CB&I

Oil and Gas

Website: http://www.cbi.com/

Company Size: 1,001-5,000 employees

McDermott International, LtdOil and Gas

LutechResourcesStaffing and Recruiting

Lummus ConsultantsBusiness Consulting and Services

Loading…

CB&I Similar Companies

Equinor

equinor.com

We're Equinor, an international energy company with a proud history. Formerly Statoil, we are 20,000 committed colleagues developing oil, gas, wind and solar energy in more than 30 countries worldwide. We’re the largest operator in Norway, among the world’s largest offshore operators, and a growing force in renewables. Driven by our Nordic urge to explore beyond the horizon, and our dedication to safety, equality and sustainability, we’re building a global business on our values and the energy needs of the future. We're the leading operator on the Norwegian continental shelf and have substantial international activities. We are engaged in exploration, development and production of oil and gas, as well as wind and solar power. We sell crude oil and are a major supplier of natural gas, with activities in processing, refining, and trading. Our activities are managed through eight business areas, staffs and support divisions, and we have operations in North and South America, Africa, Asia, Europe and Oceania, and Norway. ______ On this page we encourage you to share your views on energy, sustainability, technology and innovation. We appreciate all feedback, but encourage politeness and a respectful tone. See our full privacy policy here: https://www.equinor.com/about-us/privacy-policy-and-data-protection See our policy for social media here: En: https://www.equinor.com/about-us/social-media#social-media-guidelines

Oil and Natural Gas Corporation Ltd

ongcindia.com

Maharatna ONGC is the largest producer of crude oil and natural gas in India, contributing around 70 per cent of Indian domestic production. The crude oil is the raw material used by downstream companies like IOC, BPCL, HPCL to produce petroleum products like Petrol, Diesel, Kerosene, Naphtha, Cooking Gas-LPG. ONGC is India’s Top Energy Company and ranks 14th among global energy majors (Platts). It is the only Indian company to figure in Fortune’s ‘Most Admired Energy Companies’ list. ONGC ranks 226th overall in Forbes Global 2000. Acclaimed for its Corporate Governance practices, Transparency International has ranked ONGC 26th among the biggest publicly traded global giants. It is most valued public enterprise in India, and one of the highest profit-making and dividend-paying. ONGC has a unique distinction of being a company with in-house service capabilities in all areas of Exploration and Production of oil & gas and related oil-field services. Winner of the Best Employer award, a dedicated team of over 25,000 professionals toil round the clock in challenging locations. ONGC is an integrated energy company with interests in upstream, midstream and downstream sector of the hydrocarbon value chain, renewables, LNG, Power generation, petrochemicals and Value Added Products. ONGC's wholly-owned subsidiary Navratna ONGC Videsh Limited (OVL) is the biggest Indian multinational in the energy space, participating in 32 oil and gas properties in 15 countries. ONGC's subsidiary Mangalore Refinery and Petrochemicals Limited (MRPL) is a Schedule ‘A’ Miniratna, with a single-location refining capacity of 15 million tons per annum. ONGC subsidiary HPCL is a Maharatna CPSE, and has the second largest share of product pipelines in India with a pipeline network of more than 3370 kms for transportation of petroleum products and a vast marketing network consisting of 14 Zonal offices and 133 Regional Offices.

Oxy

cb oxy.com

Oxy is an international energy company with assets primarily in the United States, the Middle East and North Africa. We are one of the largest oil producers in the U.S., including a leading producer in the Permian and DJ basins, and offshore Gulf of Mexico. Our midstream and marketing segment provides flow assurance and maximizes the value of our oil and gas. Our Oxy Low Carbon Ventures subsidiary is advancing leading-edge technologies and business solutions that economically grow our business while reducing emissions. We are committed to using our global leadership in carbon management to advance a lower-carbon world. Visit oxy.com for more information.

McDermott International, Ltd

mcdermott.com

McDermott is a premier provider of engineering and construction solutions to the energy industry. Our customers trust our technology-driven approach—engineered to responsibly harness and transform global energy resources into the products the world needs for now and what’s next. From concept to commissioning, we are creating and delivering the building blocks of the energy transition. Our innovative expertise and capabilities advance the next generation of global energy infrastructure—empowering a brighter, more sustainable future for us all. Operating in over 54 countries, our locally focused and globally integrated resources include more than 30,000 employees, a diversified fleet of specialty marine construction vessels and fabrication facilities around the world. To learn more, visit www.mcdermott.com.

Sonatrach

sonatrach.com

Sonatrach (Société Nationale pour la Recherche, la Production, le Transport, la Transformation, et la Commercialisation des Hydrocarbures s.p.a.) is an Algerian government-owned company formed to exploit the hydrocarbon resources of the country. Its diversified activities cover all aspects of Oil & Gas industry chain. Upstream (E&P), Midstream (Transport) and Downstream (Marketing, Refining and Petchems).

YPF

cb ypf.com

Somos el mayor productor de Oil & Gas de la Argentina, con sólidos resultados y capacidad para llevar adelante los proyectos que convertirán al país en un exportador de energía a nivel mundial. Nuestro objetivo es convertirnos en una empresa no convencional de clase mundial y que Argentina pueda exportar USD 30.000 millones en petróleo y gas para el 2031. Hoy, estamos al frente de los proyectos industriales más ambiciosos del país. Lideramos el Vaca Muerta Oil Sur (VMOS), que potenciará la producción de crudo, y el Argentina LNG, un proyecto de escala global que permitirá exportar gas al mundo. Buscamos constantemente innovación y nuevas tecnologías. Con nuestros Real Time Intelligence Centers, tomamos decisiones más eficientes basadas en datos en tiempo real, aumentando la rentabilidad. Trabajamos por los combustibles del futuro y de calidad internacional. Si te digo un compañía de clase mundial con el corazón que no tiene ninguna otra, decís YPF. Una empresa argentina. #YPFEnergíaArgentina #YPFClaseMundial

aramco

aramco.com

We’re a leading producer of the energy and chemicals that drive global commerce and enhance the daily lives of people around the globe by continuing delivering an uninterrupted supply of energy to the world. Our resilience and agility has built one of the world’s largest integrated energy and chemicals companies. And we are part of the global effort toward building a low carbon economy. Our horizon has never been clearer.

Chevron

chevron.com

Our greatest resource is our people. Their ingenuity, creativity and collaboration have met the complex challenges of energy’s past. Together, we’ll take on the future. We support the LinkedIn Terms of Use (User Agreement), and we expect visitors to our page to do the same. We encourage open, lively conversation with a few simple rules: --We reserve the right to correct factual errors. --We will reply to comments when appropriate. --If we disagree with other opinions, we will do so respectfully. --You may not post anything that is spam or that is abusive, profane, or defamatory toward a person, entity, belief, or symbol. --We will delete any posts that contain personal information such as email addresses, phone numbers and physical addresses, and other third party intellectual property material, when that information does not belong to the author of the post. --You may not post job listings for non-Chevron positions. --While we support lively, open discussion, we reserve the right to delete comments.

PEMEX

cb pemex.com

Petróleos Mexicanos es la mayor empresa de México, el mayor contribuyente fiscal del país, así como una de las empresas más grandes de América Latina. Es de las pocas empresas petroleras del mundo que desarrolla toda la cadena productiva de la industria, desde la exploración, hasta la distribución y comercialización de productos finales, incluyendo la petroquímica. Pemex contribuye el 35% del PEF, en otras palabras aporta 1 de cada 3 pesos para la construcción de escuelas, carreteras y hospitales. La tasa de éxito en exploración en aguas profundas es del 50% siendo superior al estándar internacional. En el 2014 las inversiones fueron por más de 25 mil millones de dólares. Pemex generó más de medio millón de empleos indirectos. Anualmente Pemex invierte cerca de 140 millones de dólares en donativos

Loading…

NEWS

CB&I CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 28, 2026 03:30 AM

New 49ers CB's contract essentially guarantees him a roster spot

The San Francisco 49ers signed cornerback Nate Hobbs earlier this offseason. Let's take a look at the terms of his new contract for 2026.

Read Article

March 28, 2026 02:11 AM

Chubb Reshapes Overseas General Leadership For EMEA And APAC Growth

Chubb (NYSE:CB) has appointed Ben McGregor as Head of Commercial Property for EMEA and APAC within its Overseas General division.

Read Article

March 27, 2026 11:33 PM

Nevada CB Kamil Loud has three visits set, offer from childhood favorite could shake things up

Nevada CB Kamil Loud has three visits set, offer from childhood favorite could shake things up. Screenshot 2025-11-03 at 2.22.43 PM...

Read Article

March 27, 2026 11:14 PM

Falcons hosting Florida CB prospect on top-30 draft visit

The Falcons are hosting Florida CB Devin Moore on top-30 draft visit.

Read Article

March 27, 2026 10:30 PM

Texas Offers No. 21 2027 CB After Big Rise

Texas football has entered the race for 2027 cornerback Raheem Floyd, an explosive East St. Louis defensive back with national rankings and...

Read Article

March 27, 2026 10:26 PM

USC wins recruiting battle for elite CB Danny Lang after tug-of-war with Oregon, Ohio State

Blue-chip cornerback Danny Lang revealed his commitment to USC live on the CBS Sports College Football YouTube channel, choosing the...

Read Article

March 27, 2026 10:02 PM

Florida CB Moore confident following injury-plagued NFL Draft process: 'They know I can run'

A groin injury that required surgery impacted Florida cornerback Devin Moore's ability to train for the NFL Combine and UF's pro day.

Read Article

March 27, 2026 09:45 PM

Chubb (CB) Stock Moves -1.61%: What You Should Know

The latest trading day saw Chubb (CB) settling at $319.09, representing a -1.61% change from its previous close.

Read Article

March 27, 2026 09:23 PM

2026 Georgia 4-star CB commit Chace Calicut visiting Syracuse

Syracuse is hosting Georgia 4-star CB commit Chace Calicut, a 2026 prospect, on a visit, On3's Pete Nakos confirms.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-7654

SUMMARY

The Admin Columns plugin for WordPress is vulnerable to PHP Object Injection leading to Remote Code Execution in versions up to and including 7.0.18. This is due to the use of `unserialize()` without an `allowed_classes` restriction in the `IdsToCollection::get_ids_from_string()` function, which processes attacker-controlled post meta values without proper validation. This makes it possible for authenticated attackers with Contributor-level access and above to inject a serialized PHP object into a post's custom meta field and trigger arbitrary code execution by exploiting a bundled POP gadget chain, resulting in remote code execution as the web server user.

Published

Date2026-06-05

Updated

Date2026-06-05

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Impact Score

5.9

Exploitability

2.8

REFERENCES

CVE-2026-7523

SUMMARY

The Alba Board plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.3. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to access arbitrary private alba_card post data, including title, description, assignee, due date, tags, and comments, that is intended to be restricted to Administrators and Editors. The handler is registered via the wp_ajax_nopriv_ hook and its nonce is exposed to all site visitors through wp_localize_script on pages containing the [alba_board] shortcode, making this exploitable by unauthenticated users who can access any such page.

Published

Date2026-06-05

Updated

Date2026-06-05

RISK INFORMATION (Score: 4.3)

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Impact Score

1.4

Exploitability

2.8

REFERENCES

CVE-2026-45409

SUMMARY

Internationalized Domain Names in Applications (IDNA) for Python provides support for Internationalized Domain Names in Applications (IDNA) and Unicode IDNA Compatibility Processing. In versions prior to 3.15, payloads such as `"\u0660" * N` or `"\u30fb" * N + "\u6f22"` utilize the `valid_contexto` function prior to length rejection, and for high values of `N` will take a long time to process. This is the same issue as CVE-2024-3651, however the original remediation in 2024 was not a complete fix. A specially crafted argument to the `idna.encode()` function could consume significant resources. This may lead to a denial-of-service. Starting in version 3.14, the function rejects long inputs as soon as practicable prior to any further processing to minimize resource consumption. In version 3.15, this approach was extended to lesser used alternate functions (i.e. per-label conversions and codec support). A workaround is available. Domain names cannot exceed 253 characters in length. If this length limit is enforced prior to passing the domain to the `idna.encode()` function, it should no longer consume significant resources. This is triggered by arbitrarily large inputs that would not occur in normal usage, but may be passed to the library assuming there is no preliminary input validation by the higher-level application.

Published

Date2026-06-05

Updated

Date2026-06-05

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/kjd/idna/security/advisories/GHSA-65pc-fj4g-8rjx

CVE-2026-11431

SUMMARY

A path traversal vulnerability exists in the Projects Service download endpoint shared by Altium Enterprise Server and Altium 365. An authenticated user can supply a crafted path parameter that bypasses validation, allowing arbitrary files (including entire directories returned as archives) to be read from the server filesystem. Because the readable files include service configuration and credential material, exploitation can be used to gather information enabling further compromise. The issue can be combined with CVE-2026-11424 to reach the cloud-side endpoint. On multi-tenant Altium 365 deployments, the readable configuration could have exposed credentials shared across services. Altium Enterprise Server is fixed in 8.1.1; the issue has been remediated in Altium 365 at the service level.

Published

Date2026-06-05

Updated

Date2026-06-05

RISK INFORMATION (Score: )

cvss4

Base Score: 8.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://www.altium.com/platform/security-compliance/security-advisories

CVE-2026-11429

SUMMARY

A path traversal vulnerability exists in the Git Service component shared by Altium Enterprise Server and Altium 365. The service accepts a sequence of post-clone file-manipulation operations that use user-supplied paths without validation, allowing an authenticated user with basic git access to move arbitrary files outside the intended repository area. This file-move primitive can be used to place attacker-controlled script content into directories where it is later executed by the service, resulting in remote code execution under the Git Service account. On multi-tenant Altium 365 deployments, this could have allowed access to data belonging to other tenants on the same infrastructure node. Altium Enterprise Server is fixed in 8.1.1; the issue has been remediated in Altium 365 at the service level.

Published

Date2026-06-05

Updated

Date2026-06-05

RISK INFORMATION (Score: )

cvss4

Base Score: 9.4

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://www.altium.com/platform/security-compliance/security-advisories

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…