What is the official website of Con Edison ?

The official website of Con Edison is http://www.coned.com.

What is Con Edison's cybersecurity risk score?

Con Edison has an AI-generated cybersecurity risk score of 809 out of 1000, indicating a Good security posture according to Rankiteo's assessment.

How many security incidents has Con Edison experienced?

According to Rankiteo, Con Edison currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Con Edison been affected by any supply chain cyber incidents ?

According to Rankiteo, Con Edison has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Con Edison have SOC 2 Type 1 certification ?

According to Rankiteo, Con Edison is not certified under SOC 2 Type 1.

Does Con Edison have SOC 2 Type 2 certification ?

According to Rankiteo, Con Edison does not hold a SOC 2 Type 2 certification.

Does Con Edison comply with GDPR ?

According to Rankiteo, Con Edison is not listed as GDPR compliant.

Does Con Edison have PCI DSS certification ?

According to Rankiteo, Con Edison does not currently maintain PCI DSS compliance.

Does Con Edison comply with HIPAA ?

According to Rankiteo, Con Edison is not compliant with HIPAA regulations.

Does Con Edison have ISO 27001 certification ?

According to Rankiteo,Con Edison is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Con Edison operate in ?

Con Edison operates primarily in the Utilities industry.

How many employees does Con Edison have ?

Con Edison employs approximately 9,206 people worldwide.

Does Con Edison own any subsidiaries ?

Con Edison presently has no subsidiaries across any sectors.

How many LinkedIn followers does Con Edison have ?

Con Edison's official LinkedIn profile has approximately 74,986 followers.

What is the NAICS classification code for Con Edison ?

Con Edison is classified under the NAICS code 22, which corresponds to Utilities.

Does Con Edison have a Crunchbase profile ?

No, Con Edison does not have a profile on Crunchbase.

Does Con Edison have a LinkedIn profile ?

Yes, Con Edison maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/con-edison.

How many cybersecurity incidents has Con Edison experienced ?

As of August 2, 2026, Rankiteo reports that Con Edison has not experienced any cybersecurity incidents.

How many peer or competitor companies does Con Edison have ?

Con Edison has an estimated 4,442 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Con Edison

Boost Score +25 with badge (5 left)

809

/1000

Good

834

/1000

Good

Con Edison Vendor Cyber Rating & Cyber Score

coned.com

Add Your Compliance Badge

We provide power to more than 10 million people and businesses across NYC and Westchester. Reliability and accessibility are central to what we do and how we provide energy service. Leading the industry to power tomorrow is our other focus- we are committed to aggressively transitioning away from fossil fuels to a net-zero economy by 2050. To help achieve this we collaborate with customers, regulators, policymakers, engineers, and other stakeholders to ensure our clean energy future is informed by principles of affordability, equity, and environmental justice. We’re also heavily investing in new technologies and the infrastructure that can get us there. What are a few things we have achieved so far? • Since 2009, our energy efficiency

Con Edison A.I CyberSecurity Scoring

Scoring History

Con Edison

Con Edison CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

Con Edison Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Con Edison

Incidents vs Utilities Industry Avg (This Year)

No incidents recorded for Con Edison in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Con Edison in 2026.

Incident Types Con Edison vs Utilities Industry Avg (This Year)

No incidents recorded for Con Edison in 2026.

Incident History - Con Edison (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Con Edison Subsidiaries

Parent Company

Con Edison

Utilities

Website: http://www.coned.com

Company Size: 9,206

No subsidiary data available for this company.

Loading…

Con Edison Similar Companies

Xunta de Galicia

xunta.gal

A Xunta aparece definida no Estatuto de Autonomía, aprobado en 1981, como órgano colexiado do Goberno de Galicia. Na actualidade, a Xunta está composta polo presidente e dez conselleiros. A comunidade exerce as súas funcións administrativas a través da Xunta e dos seus entes e órganos dependentes. Correspóndelle á Xunta aprobar os regulamentos xerais dos seus propios tributos e elaborar as normas regulamentarias precisas para xestionar os impostos estatais cedidos de acordo cos termos desta cesión e a elaboración e aplicación do orzamento da Comunidade Autónoma de Galicia, que deben ser examinados polo Parlamento. A Xunta tamén se encarga de coordinar a actividade das Deputacións Provinciais do seu territorio naquelo que afecte dun xeito directo ao interese xeral de Galicia, e para iso unirá os orzamentos que elas elaboren de seu. Así mesmo, poderá encomendar a execución dos seus acordos ás devanditas deputacións, que serán as encargadas de levar a cabo as funcións transferidas polo Executivo autonómico.

Entergy

cb entergy.com

At Entergy (NYSE: ETR), we power life. More than 100 years ago, our founder Harvey Couch started this company with a handshake, some sawdust and a vision. Couch wanted to bring safe, affordable, reliable energy to the Middle South – energy that would power the lives of people and communities. Today, we own and operate one of the cleanest large-scale U.S. power generating fleets including more than five gigawatts of carbon-free nuclear capacity, a fleet of highly efficient gas resources, and a fast-growing portfolio of renewable resources. The nearly 12,000 men and women of Entergy deliver electricity and gas services to 3 million utility customers in Arkansas, Louisiana, Mississippi and Texas, generating annual GAAP revenues of $13.8 billion. Headquartered in New Orleans, we continue to play a driving role in the economic growth of the Gulf South. Our work matters. That’s been true for more than 100 years. And as we look to the next century, we remember the constant that bridges our past and future: We Power Life. Fast Facts: Entergy currently has a 90% rating on the 2022 Corporate Equality Index released by the Human Rights Campaign Foundation. This score places Entergy among the top energy and utility companies in the survey. With roots in the Gulf South region for more than a century, Entergy is a recognized leader in corporate citizenship, delivering more than $100 million in economic benefits to local communities through philanthropy and advocacy efforts annually over the last several years. With a total of 44 awards from EEI for its restoration and mutual-assistance work, Entergy remains the only utility company to have won either EEI's Recovery or Assistance Award, or both, every year since the awards began in 1998.

Enel Group

cb enel.com

We are a multinational company changing the face of energy, one of the world’s leading integrated utilities. As the largest private player in producing clean energy with renewable sources we have more than 92 GW of total capacity, including around 67 GW of renewables. Distributing electricity through a network of 1.9 million kilometers to 69 million end users, being the first private network operator globally, and proudly bringing energy to approximately 54 million homes and businesses. People are the heart of our energy: our Group is made up of more than 60,000 people operating in 28 countries and our work is based on our values of Trust, Innovation, Proactivity, Flexibility and Respect. Diversity and inclusion play a key role for us, leading to our being recognized in all three of the most prestigious indices and rankings that assess corporate performance on gender diversity at the workplace and beyond: the Refinitiv Diversity Inclusion Index, the Bloomberg Gender Equality Index, and the Equileap Gender Equality Global Report & Ranking. Let’s shape the energy of the future together.

Xcel Energy

cb xcelenergy.com

A leading energy provider, dedicated to excellence. We make energy work better for our customers, helping them thrive every day. That means always raising the bar - delivering better service and providing more reliable, resilient and sustainable energy to the eight states we serve: Minnesota, Colorado, Wisconsin, Michigan, North Dakota, South Dakota, New Mexico and Texas. At Xcel Energy, we provide work that makes a difference, a team you can count on, opportunities to grow and rewards that help you thrive. Ready to help power the future of energy? Visit jobs.xcelenergy.com to learn more.

ACCIONA

cb acciona.com

ACCIONA champions a different way of doing business: Business as Unusual, delivering benefits far beyond the corporate realm. Driven by the ambition to leave a positive legacy for society and design a better planet, we lead in developing solutions in renewable energy, sustainable water management, and sustainable infrastructure. We cover the entire value chain, from design and construction to operation and maintenance. With a presence in over 40 countries, we conduct our business with a commitment to positively contribute to the economic and social development of the communities where we operate. #ACCIONAteam #BusinessAsUnusual

Pacific Gas and Electric Company

pge.com

Pacific Gas and Electric Company, incorporated in California in 1905, is one of the largest combination natural gas and electric utilities in the United States. Based in San Francisco, the company is a subsidiary of PG&E Corporation. There are approximately 20,000 employees who carry out Pacific Gas and Electric Company's primary business—the transmission and delivery of energy. The company provides natural gas and electric service to approximately 15 million people throughout a 70,000-square-mile service area in northern and central California. Fast Facts * Service area stretches from Eureka in the north to Bakersfield in the south, and from the Pacific Ocean in the west to the Sierra Nevada in the east * 141,215 circuit miles of electric distribution lines and 18,616 circuit miles of interconnected transmission lines * 42,141 miles of natural gas distribution pipelines and 6,438 miles of transportation pipelines * 5.1 million electric customer accounts * 4.3 million natural gas customer accounts

Centrica

cb centrica.com

Centrica is an international energy services and solutions company, founded on a 200-year heritage of serving customers in homes and businesses. We supply energy and services to over 10 million customers, mainly in the UK and Ireland, through brands such as British Gas, Bord Gáis Energy and Centrica Business Solutions. Through our trusted brands, we deliver innovative energy and services solutions to help solve customers’ needs, supported by thousands of engineers and technicians. We are committed to energising a greener, fairer future. 

Westinghouse Electric Company

westinghousenuclear.com

Westinghouse Electric Company is the world's leading supplier of safe and innovative nuclear technology. We provide our utility customers around the world with the most reliable, dependable nuclear power plants, nuclear fuel, plant automation and operating plant products and services. We are driven by our powerful history and experience, ground-breaking ideas and our focus on safety and sustainability. At Westinghouse, we are focused on nuclear energy technology. Our goal is simple - to provide solutions to our customers to keep their plants safe, reliable and efficient. Helping our customers support the needs of their customers is why we are committed to quality, safety and innovation at every turn.

Exelon

exeloncorp.com

Exelon Corporation (Nasdaq: EXC) is one of the nation’s largest utility companies, serving more than 10 million customers through six fully regulated utilities. We believe that reliable and affordable energy is essential to a brighter, more sustainable future. We are a FORTUNE 250 company operating across a large urban footprint, serving major metro areas in Delaware, the District of Columbia, Illinois, Maryland, New Jersey and Pennsylvania. Exelon is recognized as an industry leader with best-in-class operations, a firm commitment to maintaining energy affordability, a track record of top-quartile reliability performance, strong ESG leadership and principles, and a deep dedication to supporting and investing in the communities we serve.

Loading…

NEWS

Con Edison CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 11, 2026 07:00 AM

Con Edison Executives to Meet with Investors in March 2026

Consolidated Edison, Inc. ("Con Edison") (NYSE: ED) executives will meet with investors the week of March 16, 2026.

Read Article

March 08, 2026 08:00 AM

KeyBanc Lifts Con Edison (ED) Target to $96 on Updated Capital Plan and Guidance

Consolidated Edison, Inc. (NYSE:ED) is included among the Dividend Kings List: Top 15 Stocks. On March 4, KeyBanc raised its price...

Read Article

February 23, 2026 08:00 AM

Con Edison moves to sell 7M shares, raise cash for subsidiaries

Consolidated Edison (NYSE: ED) announced a public offering of 7,000,000 common shares tied to a forward sale agreement with J.P. Morgan...

Read Article

February 19, 2026 08:00 AM

Consolidated Edison (ED) Q4 Earnings and Revenues Top Estimates

Con Ed (ED) delivered earnings and revenue surprises of +5.59% and +8.07%, respectively, for the quarter ended December 2025.

Read Article

February 14, 2026 08:00 AM

Do Weather-Driven Rate Hikes Reveal Strengths or Strains in Con Edison’s Regulated Model (ED)?

In recent weeks, Consolidated Edison has faced extreme cold weather in New York that drove higher gas and electricity usage,...

Read Article

January 29, 2026 08:00 AM

Consolidated Edison, Inc. (NYSE:ED) is largely controlled by institutional shareholders who own 72% of the company

Key Insights Given the large stake in the stock by institutions, Consolidated Edison's stock price might be vulnerable...

Read Article

December 10, 2025 08:00 AM

Consolidated Edison (ED) Agrees to Divest Interest in Mountain Valley Pipeline

Consolidated Edison, Inc. (NYSE:ED) is included among the 11 Energy Stocks to Buy for a Retirement Portfolio. Consolidated Edison...

Read Article

November 21, 2025 08:00 AM

Trump, Mamdani say NY utility Con Edison needs to cut rates

U.S. President Donald Trump and New York City Mayor-elect Zohran Mamdani agreed on Friday that New York-based utility Con Edison needed to...

Read Article

November 20, 2025 08:00 AM

Con Edison Urges Customers to Stay Vigilant as Scammers Ramp Up Attacks

Bad actors are impersonating Con Edison employees to scam customers and phish for money and other sensitive information.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18556

SUMMARY

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://uptime.n-able.com/

CVE-2026-55735

SUMMARY

Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55734

SUMMARY

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55733

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-54894

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…