Comparison Overview

EF

VS

Cambridge University Press & Assessment

EF

Selnaustrasse 30, Zurich, Zurich, CH, 8001
Last Update: 2025-12-25

Founded in 1965 in Sweden, EF (Education First) is a global association of education companies that shares a common mission of opening the world through education, offering language, academic, cultural exchange and education travel programs. Some companies are in the business of technology. Others are in the business of finance, sports, or soft drinks. At EF, we’re in a different kind of business. One that’s a little less tangible, and a lot more important. We’re in the business of understanding. For 60 years we’ve been the leader in international educational programs and culturally rich travel experiences with the power to change how people think, feel and act. The programs we deliver open the world to students and travelers in ways that challenge biases, overcome barriers, and pave the way for a more understanding world. You’ll find us working across more than 50 countries, with offices in some of the world’s greatest cities—each one filled with smart, driven people who push each other to be better every day. And yes, we have technology, we have finance, we even have sports with our own professional cycling team. But it’s what we do with it—building greater understanding, breaking down barriers, and creating a better world that makes all the difference. A notice on recruitment scams Education First (EF) accepts job applicant applications, reviews resumes and will contact you directly if there is an interest in your resume. Only submit your resume through our official website, careers.ef.com. We never ask our applicants to pay a fee for any service whatsoever.

NAICS: 61
NAICS Definition: Educational Services
Employees: 18,786
Subsidiaries: 15
12-month incidents
0
Known data breaches
0
Attack type number
0

Cambridge University Press & Assessment

Shaftesbury Road, None, Cambridge, England, GB, CB2 8
Last Update: 2025-12-25
Between 700 and 749

We are Cambridge University Press & Assessment. We are a world-leading academic publisher and assessment organisation, and part of the University of Cambridge. We’re driven by a simple mission – to contribute to society through the pursuit of education, learning, and research at the highest international levels of excellence. Our team is one connected, global community, pursuing potential and moving forward, together. We will keep exploring, collaborating, and innovating to find bold new ways to spread knowledge, spark enquiry, and aid understanding.

NAICS: 61
NAICS Definition: Educational Services
Employees: 11,184
Subsidiaries: 19
12-month incidents
0
Known data breaches
1
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/ef-education-first.jpeg
EF
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/cambridge-university-press-and-assessment.jpeg
Cambridge University Press & Assessment
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
EF
100%
Compliance Rate
0/4 Standards Verified
Cambridge University Press & Assessment
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Education Industry Average (This Year)

No incidents recorded for EF in 2025.

Incidents vs Education Industry Average (This Year)

No incidents recorded for Cambridge University Press & Assessment in 2025.

Incident History — EF (X = Date, Y = Severity)

EF cyber incidents detection timeline including parent company and subsidiaries

Incident History — Cambridge University Press & Assessment (X = Date, Y = Severity)

Cambridge University Press & Assessment cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/ef-education-first.jpeg
EF
Incidents

No Incident

https://images.rankiteo.com/companyimages/cambridge-university-press-and-assessment.jpeg
Cambridge University Press & Assessment
Incidents

Date Detected: 6/2024
Type:Breach
Blog: Blog

FAQ

EF company demonstrates a stronger AI Cybersecurity Score compared to Cambridge University Press & Assessment company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Cambridge University Press & Assessment company has historically faced a number of disclosed cyber incidents, whereas EF company has not reported any.

In the current year, Cambridge University Press & Assessment company and EF company have not reported any cyber incidents.

Neither Cambridge University Press & Assessment company nor EF company has reported experiencing a ransomware attack publicly.

Cambridge University Press & Assessment company has disclosed at least one data breach, while EF company has not reported such incidents publicly.

Neither Cambridge University Press & Assessment company nor EF company has reported experiencing targeted cyberattacks publicly.

Neither EF company nor Cambridge University Press & Assessment company has reported experiencing or disclosing vulnerabilities publicly.

Neither EF nor Cambridge University Press & Assessment holds any compliance certifications.

Neither company holds any compliance certifications.

Cambridge University Press & Assessment company has more subsidiaries worldwide compared to EF company.

EF company employs more people globally than Cambridge University Press & Assessment company, reflecting its scale as a Education.

Neither EF nor Cambridge University Press & Assessment holds SOC 2 Type 1 certification.

Neither EF nor Cambridge University Press & Assessment holds SOC 2 Type 2 certification.

Neither EF nor Cambridge University Press & Assessment holds ISO 27001 certification.

Neither EF nor Cambridge University Press & Assessment holds PCI DSS certification.

Neither EF nor Cambridge University Press & Assessment holds HIPAA certification.

Neither EF nor Cambridge University Press & Assessment holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

n8n is an open source workflow automation platform. Prior to version 2.0.0, in self-hosted n8n instances where the Code node runs in legacy (non-task-runner) JavaScript execution mode, authenticated users with workflow editing access can invoke internal helper functions from within the Code node. This allows a workflow editor to perform actions on the n8n host with the same privileges as the n8n process, including: reading files from the host filesystem (subject to any file-access restrictions configured on the instance and OS/container permissions), and writing files to the host filesystem (subject to the same restrictions). This issue has been patched in version 2.0.0. Workarounds for this issue involve limiting file operations by setting N8N_RESTRICT_FILE_ACCESS_TO to a dedicated directory (e.g., ~/.n8n-files) and ensure it contains no sensitive data, keeping N8N_BLOCK_FILE_ACCESS_TO_N8N_FILES=true (default) to block access to .n8n and user-defined config files, and disabling high-risk nodes (including the Code node) using NODES_EXCLUDE if workflow editors are not fully trusted.

Risk Information
cvss3
Base: 7.1
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
Description

n8n is an open source workflow automation platform. From version 1.0.0 to before 2.0.0, a sandbox bypass vulnerability exists in the Python Code Node that uses Pyodide. An authenticated user with permission to create or modify workflows can exploit this vulnerability to execute arbitrary commands on the host system running n8n, using the same privileges as the n8n process. This issue has been patched in version 2.0.0. Workarounds for this issue involve disabling the Code Node by setting the environment variable NODES_EXCLUDE: "[\"n8n-nodes-base.code\"]", disabling Python support in the Code node by setting the environment variable N8N_PYTHON_ENABLED=false, which was introduced in n8n version 1.104.0, and configuring n8n to use the task runner based Python sandbox via the N8N_RUNNERS_ENABLED and N8N_NATIVE_PYTHON_RUNNER environment variables.

Risk Information
cvss3
Base: 9.9
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L
Description

LMDeploy is a toolkit for compressing, deploying, and serving LLMs. Prior to version 0.11.1, an insecure deserialization vulnerability exists in lmdeploy where torch.load() is called without the weights_only=True parameter when loading model checkpoint files. This allows an attacker to execute arbitrary code on the victim's machine when they load a malicious .bin or .pt model file. This issue has been patched in version 0.11.1.

Risk Information
cvss3
Base: 8.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description

n8n is an open source workflow automation platform. Prior to version 1.114.0, a stored Cross-Site Scripting (XSS) vulnerability may occur in n8n when using the “Respond to Webhook” node. When this node responds with HTML content containing executable scripts, the payload may execute directly in the top-level window, rather than within the expected sandbox introduced in version 1.103.0. This behavior can enable a malicious actor with workflow creation permissions to execute arbitrary JavaScript in the context of the n8n editor interface. This issue has been patched in version 1.114.0. Workarounds for this issue involve restricting workflow creation and modification privileges to trusted users only, avoiding use of untrusted HTML responses in the “Respond to Webhook” node, and using an external reverse proxy or HTML sanitizer to filter responses that include executable scripts.

Risk Information
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
Description

Yealink T21P_E2 Phone 52.84.0.15 is vulnerable to Directory Traversal. A remote normal privileged attacker can read arbitrary files via a crafted request result read function of the diagnostic component.

Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N