Comparison Overview

Q: Between Condé Nast company and PRISA company, which one has the best AI Cybersecurity Score ?

Condé Nast company demonstrates a stronger AI Cybersecurity Score compared to PRISA company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Q: Between Condé Nast company and PRISA company, which one has experienced more cyber incidents in the past ?

Condé Nast company has historically faced a number of disclosed cyber incidents, whereas PRISA company has not reported any.

Q: Between Condé Nast company and PRISA company, which one has experienced more cyber incidents this year ?

In the current year, PRISA company and Condé Nast company have not reported any cyber incidents.

Q: Between Condé Nast company and PRISA company, which one has experienced at least one ransomware attack ?

Neither PRISA company nor Condé Nast company has reported experiencing a ransomware attack publicly.

Q: Between Condé Nast company and PRISA company, which one has experienced at least one data breach ?

Condé Nast company has disclosed at least one data breach, while the other PRISA company has not reported such incidents publicly.

Q: Between Condé Nast company and PRISA company, which one has experienced at least one targeted cyberattack ?

Neither PRISA company nor Condé Nast company has reported experiencing targeted cyberattacks publicly.

Q: Between Condé Nast company and PRISA company, which one has experienced at least one vulnerability ?

Neither Condé Nast company nor PRISA company has reported experiencing or disclosing vulnerabilities publicly.

Q: Between Condé Nast company and PRISA company, which one holds the most compliance certifications ?

Neither Condé Nast nor PRISA holds any compliance certifications.

Q: Between Condé Nast company and PRISA company, which one has the most subsidiaries ?

Condé Nast company has more subsidiaries worldwide compared to PRISA company.

Condé Nast

1 World Trade Center, New York, NY, 10007, US

Last Update: 2025-11-23

View Profile

Between 750 and 799

http://www.condenast.com

Condé Nast is a global media company producing the highest quality content with a footprint of more than 1 billion consumers in 32 territories through print, digital, video and social platforms. The company’s portfolio includes many of the world’s most respected and influential media properties including Vogue, Vanity Fair, Glamour, Self, GQ, The New Yorker, Condé Nast Traveler/Traveller, Allure, AD, Bon Appétit and Wired, among others. Condé Nast Entertainment was launched in 2011 to develop film, television and premium digital video programming. At Condé Nast we value diversity of background, views and cultures. We celebrate people for their personal qualities, their skills and contributions. And we recognize the power our brands have to influence and shape culture, catalyze action and help make our world a better place for all.

NAICS: 51211

NAICS Definition: Motion Picture and Video Production

Employees: 7,256

Subsidiaries: 74

12-month incidents

0

Known data breaches

1

Attack type number

1

View Profile

PRISA

Calle Gran V√≠a, 32 Madrid, Comunidad de Madrid 28013, ES

Last Update: 2025-11-22

Between 750 and 799

http://www.prisa.com

PRISA es la compa√±√≠a l√≠der en la creaci√≥n y distribuci√≥n de contenidos culturales, educativos, de informaci√≥n y entretenimiento en los mercados de habla espa√±ola y portuguesa. Presente en 24 pa√≠ses, PRISA llega a millones de personas a trav√©s de sus marcas globales El Pa√≠s, LOS40, Santillana, W Radio o As. Como l√≠der en prensa, televisi√≥n, radio hablada, musical y educaci√≥n es uno de los principales grupos medi√°ticos del mundo hispano por la gran calidad de sus contenidos y por su voluntad de participar en la econom√≠a digital a trav√©s de la conectividad y la innovaci√≥n de productos y servicios. Su presencia en Brasil y Portugal, y en el creciente mercado hispano de Estados Unidos, le abre un mercado global de m√°s de 700 millones de personas. PRISA es uno de los principales grupos medi√°ticos del mundo hispano, situado a la vanguardia de las empresas de comunicaci√≥n y educaci√≥n. Con 152 millones de navegadores √∫nicos* en todo el mundo, PRISA se sit√∫a a la vanguardia de las empresas de comunicaci√≥n y educaci√≥n con una s√≥lida estrategia de distribuci√≥n de contenidos, ofreciendo innovadoras propuestas a trav√©s de distintos formatos, canales y plataformas. * (Fuente: Adobe Omniture + Netscope, promedio anual enero-diciembre 2018) Redes Sociales: https://www.facebook.com/PRISA https://twitter.com/PRISA https://cadenaser.com/politica-de-rrss/

NAICS: 51211

NAICS Definition: Motion Picture and Video Production

Employees: 10,001

Subsidiaries: 0

12-month incidents

0

Known data breaches

0

Attack type number

0

https://images.rankiteo.com/companyimages/conde-nast.jpeg

Condé Nast

—

ISO 27001

Not verified

—

SOC2 Type 1

Not verified

—

SOC2 Type 2

Not verified

—

GDPR

Not verified

—

PCI DSS

Not verified

—

HIPAA

Not verified

PRISA

—

ISO 27001

Not verified

—

SOC2 Type 1

Not verified

—

SOC2 Type 2

Not verified

—

GDPR

Not verified

—

PCI DSS

Not verified

—

HIPAA

Not verified

Incidents vs Media Production Industry Average (This Year)

No incidents recorded for Condé Nast in 2025.

Incidents vs Media Production Industry Average (This Year)

No incidents recorded for PRISA in 2025.

Incident History — Condé Nast (X = Date, Y = Severity)

Condé Nast cyber incidents detection timeline including parent company and subsidiaries

Incident History — PRISA (X = Date, Y = Severity)

PRISA cyber incidents detection timeline including parent company and subsidiaries

Condé Nast

Incidents

Date Detected: 05/2019

Type:Breach

Attack Vector: Unauthorized Access

Motivation: Data Theft

Blog: Blog

PRISA

Incidents

No Incident

Condé Nast company demonstrates a stronger AI Cybersecurity Score compared to PRISA company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Condé Nast company has historically faced a number of disclosed cyber incidents, whereas PRISA company has not reported any.

In the current year, PRISA company and Condé Nast company have not reported any cyber incidents.

Neither PRISA company nor Condé Nast company has reported experiencing a ransomware attack publicly.

Condé Nast company has disclosed at least one data breach, while the other PRISA company has not reported such incidents publicly.

Neither PRISA company nor Condé Nast company has reported experiencing targeted cyberattacks publicly.

Neither Condé Nast company nor PRISA company has reported experiencing or disclosing vulnerabilities publicly.

Neither Condé Nast nor PRISA holds any compliance certifications.

Neither company holds any compliance certifications.

Condé Nast company has more subsidiaries worldwide compared to PRISA company.

PRISA company employs more people globally than Condé Nast company, reflecting its scale as a Media Production.

Neither Condé Nast nor PRISA holds SOC 2 Type 1 certification.

Neither Condé Nast nor PRISA holds SOC 2 Type 2 certification.

Neither Condé Nast nor PRISA holds ISO 27001 certification.

Neither Condé Nast nor PRISA holds PCI DSS certification.

Neither Condé Nast nor PRISA holds HIPAA certification.

Neither Condé Nast nor PRISA holds GDPR certification.

Description

ThingsBoard in versions prior to v4.2.1 allows an authenticated user to upload malicious SVG images via the "Image Gallery", leading to a Stored Cross-Site Scripting (XSS) vulnerability. The exploit can be triggered when any user accesses the public API endpoint of the malicious SVG images, or if the malicious images are embedded in an `iframe` element, during a widget creation, deployed to any page of the platform (e.g., dashboards), and accessed during normal operations. The vulnerability resides in the `ImageController`, which fails to restrict the execution of JavaScript code when an image is loaded by the user's browser. This vulnerability can lead to the execution of malicious code in the context of other users' sessions, potentially compromising their accounts and allowing unauthorized actions.

Published

Date

2025-11-27

Updated

Date

2025-11-27

Risk Information

cvss4

Base: 6.2

Severity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

References

Description

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to to verify that the token used during the code exchange originates from the same authentication flow, which allows an authenticated user to perform account takeover via a specially crafted email address used when switching authentication methods and sending a request to the /users/login/sso/code-exchange endpoint. The vulnerability requires ExperimentalEnableAuthenticationTransfer to be enabled (default: enabled) and RequireEmailVerification to be disabled (default: disabled).

Published

Date

2025-11-27

Updated

Date

2025-11-27

Risk Information

cvss3

Base: 9.9

Severity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

References

https://mattermost.com/security-updates

Description

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to sanitize team email addresses to be visible only to Team Admins, which allows any authenticated user to view team email addresses via the GET /api/v4/channels/{channel_id}/common_teams endpoint

Published

Date

2025-11-27

Updated

Date

2025-11-27

Risk Information

cvss3

Base: 4.3

Severity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

References

https://mattermost.com/security-updates

Description

Exposure of email service credentials to users without administrative rights in Devolutions Server.This issue affects Devolutions Server: before 2025.2.21, before 2025.3.9.

Published

Date

2025-11-27

Updated

Date

2025-11-27

References

https://devolutions.net/security/advisories/DEVO-2025-0018/

Description

Exposure of credentials in unintended requests in Devolutions Server.This issue affects Server: through 2025.2.20, through 2025.3.8.

Published

Date

2025-11-27

Updated

Date

2025-11-27

References

https://devolutions.net/security/advisories/DEVO-2025-0018/

Badge your company to reduce your risk score and your cyber insurance costs!

Comparison Overview

Condé Nast

VS

PRISA

Condé Nast

PRISA

Compliance Badges Comparison

Benchmark & Cyber Underwriting Signals

Incidents vs Media Production Industry Average (This Year)

Incidents vs Media Production Industry Average (This Year)

Incident History — Condé Nast (X = Date, Y = Severity)

Incident History — PRISA (X = Date, Y = Severity)

Notable Incidents

No Incident

FAQ

Latest Global CVEs (Not Company-Specific)

CVE-2025-3261

Risk Information

CVE-2025-12421

Risk Information

CVE-2025-12559

Risk Information

CVE-2025-13765

CVE-2025-13758

Badge your company to reduce your risk score and your cyber insurance costs!

Comparison Overview

Condé Nast

VS

PRISA

Condé Nast

PRISA

Compliance Badges Comparison

Benchmark & Cyber Underwriting Signals

Incidents vs Media Production Industry Average (This Year)

Incidents vs Media Production Industry Average (This Year)

Incident History — Condé Nast (X = Date, Y = Severity)

Incident History — PRISA (X = Date, Y = Severity)

Notable Incidents

🔒 Incident : Breach CON202224323

No Incident

FAQ

Between Condé Nast company and PRISA company, which one has the best AI Cybersecurity Score ?

Between Condé Nast company and PRISA company, which one has experienced more cyber incidents in the past ?

Between Condé Nast company and PRISA company, which one has experienced more cyber incidents this year ?

Between Condé Nast company and PRISA company, which one has experienced at least one ransomware attack ?

Between Condé Nast company and PRISA company, which one has experienced at least one data breach ?

Between Condé Nast company and PRISA company, which one has experienced at least one targeted cyberattack ?

Between Condé Nast company and PRISA company, which one has experienced at least one vulnerability ?

Between Condé Nast company and PRISA company, which one holds the most compliance certifications ?

Between Condé Nast company and PRISA company, which one holds the fewest compliance certifications ?

Between Condé Nast company and PRISA company, which one has the most subsidiaries ?

Between Condé Nast company and PRISA company, which one has the largest number of employees ?

Between Condé Nast and PRISA, which company holds both SOC 2 Type 1 certifications ?

Between Condé Nast and PRISA, which company holds both SOC 2 Type 2 certifications ?

Which company is ISO 27001 certified — Condé Nast or PRISA ?

Which company is PCI DSS compliant — Condé Nast or PRISA ?

Between Condé Nast and PRISA, which company complies with HIPAA regulations for healthcare data ?

Between Condé Nast and PRISA, which company complies with GDPR requirements ?

Latest Global CVEs (Not Company-Specific)

CVE-2025-3261

Risk Information

CVE-2025-12421

Risk Information

CVE-2025-12559

Risk Information

CVE-2025-13765

CVE-2025-13758