CC
Company Details
Linkedin ID:
city-of-cologne
Employees number:
38
Number of followers:
364
NAICS:
92
Industry Type:
Homepage:
koeln.business
IP Addresses:
0
Company ID:
CIT_1708703
Scan Status:
In-progress
City of Cologne Company CyberSecurity Posture
koeln.business
Sie möchten sich neu ansiedeln, Ihren Betrieb erweitern oder Ihr Unternehmen verlagern. Sie suchen ein neues Grundstück oder eine Immobilie. Sie möchten ein gewerblich nutzbares Grundstück vermieten, verpachten oder veräußern. Sie haben ein Anliegen an die Stadtverwaltung (zum Beispiel Planungsrecht, Baugenehmigungen, Denkmalschutz, Grünausgleich etc.). Sie möchten Ihr Netzwerk erweitern und neue Kontakte in Köln knüpfen.
City of Cologne A.I CyberSecurity Scoring
CC Risk Score (AI oriented)Between 700 and 749
CC
Updated:
- Powered by our proprietary A.I cyber incident model
- Insurance preferes TPRM score to calculate premium
CC Global Score (TPRM)XXXX
CC
- Instant access to detailed risk factors
- Benchmark vs. industry & size peers
- Vulnerabilities
- Findings
CC Company CyberSecurity News & History
Past Incidents
1
Attack Types
1
City of Cologne
Cyber Attack
Rankiteo Explanation
Attack limited on finance or reputation
Description: In October 2023, cyberattacks were detected in some cities, including Dortmund and Cologne. The websites were under 10,000 requests per second. The municipal website for Dortmund is no longer available. The server was severely overwhelmed as a result of numerous queries. The IT of the city administration and public data, however, are unaffected. The hosting company is collaborating on defenses with other specialists. Additionally, Cologne's server received a deluge of malicious traffic. It was also a DDoS attack.
CC Company Scoring based on AI Models
Cyber Incidents Likelihood 3 - 6 - 9 months
A.I Risk Score Likelihood 3 - 6 - 9 months
Underwriter Stats for CC
Incidents vs Government Administration Industry Average (This Year)
No incidents recorded for City of Cologne in 2025.
Incidents vs All-Companies Average (This Year)
No incidents recorded for City of Cologne in 2025.
Incident Types CC vs Government Administration Industry Avg (This Year)
No incidents recorded for City of Cologne in 2025.
Incident History — CC (X = Date, Y = Severity)
CC cyber incidents detection timeline including parent company and subsidiaries
CC Company Subsidiaries
Sie möchten sich neu ansiedeln, Ihren Betrieb erweitern oder Ihr Unternehmen verlagern. Sie suchen ein neues Grundstück oder eine Immobilie. Sie möchten ein gewerblich nutzbares Grundstück vermieten, verpachten oder veräußern. Sie haben ein Anliegen an die Stadtverwaltung (zum Beispiel Planungsrecht, Baugenehmigungen, Denkmalschutz, Grünausgleich etc.). Sie möchten Ihr Netzwerk erweitern und neue Kontakte in Köln knüpfen.
Loading...
CC Similar Companies
Land Niedersachsen
Der Arbeitgeber Niedersachsen vereint über 2000 Dienststellen mit einem gemeinsamen Ziel: Wir gestalten das Leben in Niedersachsen verantwortungsvoll und zukunftsorientiert. Als der größte Arbeitgeber im Land Niedersachsen bieten wir sichere Arbeitsplätze, sinnstiftende Aufgaben und vielfältige Ei
U.S. Department of Education
Our mission is to promote student achievement and preparation for global competitiveness by fostering educational excellence and ensuring equal access. ED is dedicated to: • Establishing policies on federal financial aid for education, and distributing as well as monitoring those funds. • Collect
U.S. Department of the Treasury
The Treasury Department is the executive agency responsible for promoting economic prosperity and ensuring the financial security of the United States. The Department is responsible for a wide range of activities such as advising the President on economic and financial issues, encouraging sustainabl
Social Security Administration
Social Security provides financial protection for our nation’s people, supporting more than 64 million individuals and families. With retirement, disability, and survivors benefits, Social Security is one of the most successful anti-poverty programs in our nation's history. We are there throughout
CONICET
El Consejo Nacional de Investigaciones Científicas y Técnicas (CONICET) es el principal organismo dedicado a la promoción de la ciencia y la tecnología en la Argentina. Su actividad se desarrolla en cuatro grandes áreas: • Ciencias agrarias, ingeniería y de materiales • Ciencias biológicas y de la s
State of California
Californians deserve a government that works for them and with them. One that will work to ensure opportunity and justice. We are building a California not for the few, but for all — including those who have historically been left out. We are doing the work to make our state a place for every Cali
GSA
General Services Administration (GSA) is an independent agency of the United States government established in 1949 to help manage and support the basic functioning of federal agencies. Our organization includes the Public Buildings Service (PBS), Federal Acquisition Service (FAS), and a variety of S
South African Revenue Service (SARS)
Its main functions are to: collect and administer all national taxes, duties and levies; collect revenue that may be imposed under any other legislation, as agreed on between SARS and an organ of state or institution entitled to the revenue; provide protection against the illegal importation
Centers for Disease Control and Prevention
CDC works 24/7 keeping America safe from health, safety and security threats, both foreign and domestic. Whether diseases start at home or abroad, are chronic or acute, curable or preventable, human error or deliberate attack, CDC fights it and supports communities and citizens to prevent it. CDC is
.png)
CC CyberSecurity News
August 07, 2024 07:00 AM
What cyberattacks do to municipal issuers’ borrowing costs
State and local governments are frequent targets of cyberattacks. In “City Hall Has Been Hacked! The Financial Costs of Lax Cybersecurity,”...
September 18, 2020 07:00 AM
Prosecutors open homicide case after cyber-attack on German hospital
Incident in Düsseldorf could be first death caused by a cyber-attack, says UK's former head of cybersecurity.
February 01, 2013 08:00 AM
Successful pilot in Cologne helps city to predict traffic
Cologne, Germany, has successfully completed a pilot programme that predicts where traffic will go. Using predictive analytics the city believes the technology...
Frequently Asked Questions
Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
CC CyberSecurity History Information
Official Website of City of Cologne
The official website of City of Cologne is https://koeln.business/de/wirtschaft-in-koeln/.
City of Cologne’s AI-Generated Cybersecurity Score
According to Rankiteo, City of Cologne’s AI-generated cybersecurity score is 745, reflecting their Moderate security posture.
How many security badges does City of Cologne’ have ?
According to Rankiteo, City of Cologne currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
Does City of Cologne have SOC 2 Type 1 certification ?
According to Rankiteo, City of Cologne is not certified under SOC 2 Type 1.
Does City of Cologne have SOC 2 Type 2 certification ?
According to Rankiteo, City of Cologne does not hold a SOC 2 Type 2 certification.
Does City of Cologne comply with GDPR ?
According to Rankiteo, City of Cologne is not listed as GDPR compliant.
Does City of Cologne have PCI DSS certification ?
According to Rankiteo, City of Cologne does not currently maintain PCI DSS compliance.
Does City of Cologne comply with HIPAA ?
According to Rankiteo, City of Cologne is not compliant with HIPAA regulations.
Does City of Cologne have ISO 27001 certification ?
According to Rankiteo,City of Cologne is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Industry Classification of City of Cologne
City of Cologne operates primarily in the Government Administration industry.
Number of Employees at City of Cologne
City of Cologne employs approximately 38 people worldwide.
Subsidiaries Owned by City of Cologne
City of Cologne presently has no subsidiaries across any sectors.
City of Cologne’s LinkedIn Followers
City of Cologne’s official LinkedIn profile has approximately 364 followers.
NAICS Classification of City of Cologne
City of Cologne is classified under the NAICS code 92, which corresponds to Public Administration.
City of Cologne’s Presence on Crunchbase
No, City of Cologne does not have a profile on Crunchbase.
City of Cologne’s Presence on LinkedIn
Yes, City of Cologne maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/city-of-cologne.
Cybersecurity Incidents Involving City of Cologne
As of December 15, 2025, Rankiteo reports that City of Cologne has experienced 1 cybersecurity incidents.
Number of Peer and Competitor Companies
City of Cologne has an estimated 11,663 peer or competitor companies worldwide.
What types of cybersecurity incidents have occurred at City of Cologne ?
Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack.
Incident Details
Can you provide details on each incident ?
Title: DDoS Attacks on Municipal Websites in Dortmund and Cologne
Description: In October 2023, cyberattacks were detected in some cities, including Dortmund and Cologne. The websites were under 10,000 requests per second. The municipal website for Dortmund is no longer available. The server was severely overwhelmed as a result of numerous queries. The IT of the city administration and public data, however, are unaffected. The hosting company is collaborating on defenses with other specialists. Additionally, Cologne's server received a deluge of malicious traffic. It was also a DDoS attack.
Date Detected: October 2023
Type: DDoS Attack
Attack Vector: DDoS
What are the most common types of attacks the company has faced ?
Common Attack Types: The most common types of attacks the company has faced is Cyber Attack.
Impact of the Incidents
What was the impact of each incident ?
Incident : DDoS Attack CIT2328151023
Systems Affected: Municipal websites
Downtime: ['Dortmund municipal website']
Which entities were affected by each incident ?
Incident : DDoS Attack CIT2328151023
Entity Name: Municipal Administration of Dortmund
Entity Type: Government
Industry: Public Sector
Location: Dortmund
Incident : DDoS Attack CIT2328151023
Entity Name: Municipal Administration of Cologne
Entity Type: Government
Industry: Public Sector
Location: Cologne
Response to the Incidents
What measures were taken in response to each incident ?
Incident : DDoS Attack CIT2328151023
Post-Incident Analysis
Additional Questions
Incident Details
What was the most recent incident detected ?
Most Recent Incident Detected: The most recent incident detected was on October 2023.
Impact of the Incidents
What was the most significant system affected in an incident ?
Most Significant System Affected: The most significant system affected in an incident was Municipal websites.
Response to the Incidents
.png)
Latest Global CVEs (Not Company-Specific)
Description
NXLog Agent before 6.11 can load a file specified by the OPENSSL_CONF environment variable.
Risk Information
cvss3
Base: 8.1
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Description
uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas.
Risk Information
cvss3
Base: 2.9
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Description
A vulnerability was detected in Mayan EDMS up to 4.10.1. The affected element is an unknown function of the file /authentication/. The manipulation results in cross site scripting. The attack may be performed from remote. The exploit is now public and may be used. Upgrading to version 4.10.2 is sufficient to fix this issue. You should upgrade the affected component. The vendor confirms that this is "[f]ixed in version 4.10.2". Furthermore, that "[b]ackports for older versions in process and will be out as soon as their respective CI pipelines complete."
Risk Information
cvss2
Base: 5.0
Severity: LOW
AV:N/AC:L/Au:N/C:N/I:P/A:N
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
MJML through 4.18.0 allows mj-include directory traversal to test file existence and (in the type="css" case) read files. NOTE: this issue exists because of an incomplete fix for CVE-2020-12827.
Risk Information
cvss3
Base: 4.5
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L
Description
A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network (including link-local or loopback services).
Risk Information
cvss3
Base: 5.8
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N
Access Data Using Our API
Get company history
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=city-of-cologne' -H 'apikey: YOUR_API_KEY_HERE'
RapidWhat Do We Measure ?
Incident
Finding
Grade
Digital Assets
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
These are some of the factors we use to calculate the overall score:
Network Security
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
SBOM (Software Bill of Materials)
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
CMDB (Configuration Management Database)
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Threat Intelligence
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
