ISO 27001 Certificate
SOC 1 Type I Certificate
SOC 2 Type II Certificate
PCI DSS
HIPAA
RGPD
Internal validation & live display
Multiple badges & continuous verification
Faster underwriting decisions
ISOSOC2 Type 1SOC2 Type 2PCI DSSHIPAAGDPR

Forbes Media is a global media, branding and technology company, with a focus on news and information about business, investing, technology, entrepreneurship, leadership and affluent lifestyles. The company publishes Forbes, Forbes Asia, and Forbes Europe magazines as well as Forbes.com. The Forbes brand today reaches more than 94 million people worldwide with its business message each month through its magazines and 37 licensed local editions around the globe, Forbes.com, TV, conferences, research, social and mobile platforms. Forbes Media’s brand extensions include conferences, real estate, education, financial services, and technology license agreements. Forbes is an equal opportunity employer.

Forbes A.I CyberSecurity Scoring

Forbes

Company Details

Linkedin ID:

forbes-magazine

Employees number:

9,035

Number of followers:

18,075,444

NAICS:

511

Industry Type:

Book and Periodical Publishing

Homepage:

forbes.com

IP Addresses:

0

Company ID:

FOR_1255175

Scan Status:

In-progress

AI scoreForbes Risk Score (AI oriented)

Between 750 and 799

https://images.rankiteo.com/companyimages/forbes-magazine.jpeg
Forbes Book and Periodical Publishing
Updated:
  • Powered by our proprietary A.I cyber incident model
  • Insurance preferes TPRM score to calculate premium
globalscoreForbes Global Score (TPRM)

XXXX

https://images.rankiteo.com/companyimages/forbes-magazine.jpeg
Forbes Book and Periodical Publishing
  • Instant access to detailed risk factors
  • Benchmark vs. industry & size peers
  • Vulnerabilities
  • Findings

Forbes Company CyberSecurity News & History

Past Incidents
6
Attack Types
1
EntityTypeSeverityImpactSeenBlog DetailsIncident DetailsView
ForbesCyber Attack6025/2025
Rankiteo Explanation :
Attack limited on finance or reputation

Description: The article indicates a **403 Access Denied** error on **next-hop.forbes.com**, suggesting a potential **cybersecurity incident** where unauthorized access was attempted or blocked, possibly due to a **DDoS attack, web application firewall (WAF) trigger, or malicious traffic detection**. The error message, combined with the **session termination notice**, implies that Forbes’ systems detected and mitigated a suspicious connection (IP: **86.183.224.145**), likely part of a broader **cyber attack campaign**.While no explicit data breach or ransomware is confirmed, the incident aligns with **disruptive cyber activity** targeting high-profile media platforms. Such attacks often aim to **degrade service availability, steal credentials, or exploit vulnerabilities** in content delivery networks (CDNs). If the attack was part of a **coordinated effort (e.g., hacktivism, state-sponsored probing)**, it could escalate to more severe consequences, including **reputational damage or financial loss** due to downtime. The reference ID (**1759170640**) may correlate with a logged security event, but no public details confirm data exfiltration or systemic compromise.

ForbesCyber Attack6022/2025
Rankiteo Explanation :
Attack limited on finance or reputation

Description: Forbes, a globally recognized media and publishing company, experienced a **403 Access Denied** error on its platform (`next-hop.forbes.com`), indicating a potential **cybersecurity incident**—likely a **DDoS attack, unauthorized access attempt, or misconfigured security controls**. The error message suggests the session was forcibly terminated, which may imply an active defensive measure against a breach or attack. While no explicit data leak or ransomware was confirmed, the disruption aligns with **service outages** that could harm reputation, user trust, or operational continuity. If the incident stemmed from a **cyber attack targeting infrastructure**, it might have temporarily blocked legitimate users, impacting ad revenue, subscriber access, or content delivery. The reference to an IP (`159.180.120.250`) and session ID hints at a **targeted or automated intrusion attempt**, though the lack of further details prevents confirming data exfiltration or systemic damage. Given Forbes’ high-profile status, even short-lived disruptions can trigger **financial losses (advertising, subscriptions)** and **reputational erosion**, especially if users perceive the platform as vulnerable. No evidence suggests **physical harm, war-level threats, or existential risks**, but the incident underscores the **growing targeting of media outlets** by threat actors for disruption or espionage.

ForbesCyber Attack6025/2025
Rankiteo Explanation :
Attack limited on finance or reputation

Description: The article from **next-hop.forbes.com** indicates an **access denial (HTTP 403 error)**, suggesting a potential **cybersecurity incident** where unauthorized access was blocked, possibly due to a **DDoS attack, web application firewall (WAF) trigger, or malicious traffic detection**. While no explicit breach or data leak is confirmed, the termination of the session implies an **active defensive measure** against a suspected threat.The incident may have disrupted user access to Forbes’ digital platform, raising concerns about **reputation damage** if attackers targeted high-profile media infrastructure. If the 403 error resulted from a **cyber attack (e.g., credential stuffing, scraping, or probing for vulnerabilities)**, it could signal an attempt to exploit Forbes’ systems—though no immediate financial or data compromise is evident. The reference to an IP (`92.236.242.131`) and session ID hints at **suspicious traffic patterns**, possibly linked to automated bots or adversarial reconnaissance.Without further details, the impact remains **limited to operational disruption and reputational risk**, assuming no successful intrusion or data exfiltration occurred. However, if the attack was part of a broader campaign (e.g., ransomware precursor or APT activity), the severity could escalate.

ForbesCyber Attack6029/2025
Rankiteo Explanation :
Attack limited on finance or reputation

Description: Forbes experienced a **403 Access Denied** error, indicating a potential **cybersecurity incident** where unauthorized access was blocked, possibly due to a **DDoS attack, credential stuffing, or web application firewall (WAF) triggering a security rule**. The termination of the user session (`Ref: 51.190.202.144`) suggests an automated or malicious attempt to exploit vulnerabilities or disrupt services. While no explicit data breach or ransomware was confirmed, the incident could imply **reputational harm** if users perceive Forbes’ platform as insecure. If the attack was part of a broader campaign (e.g., targeting media outlets), it might have aimed to **degrade trust in digital content delivery** or probe for weaknesses. The lack of stolen data or operational outage limits the impact, but repeated such incidents could escalate to financial losses (e.g., ad revenue decline) or regulatory scrutiny if tied to inadequate protections.

ForbesCyber Attack6025/2025
Rankiteo Explanation :
Attack limited on finance or reputation

Description: Forbes experienced a **403 Access Denied** error, indicating a potential **cybersecurity incident** where unauthorized access was blocked, possibly due to a **DDoS attack, web application firewall (WAF) trigger, or malicious traffic detection**. The error message suggests a **session termination**, which may imply an attempted breach or exploitation of vulnerabilities in their web infrastructure. While no explicit data leak or ransomware involvement was confirmed, the incident could have disrupted user access, damaged reputation, or signaled an underlying security flaw. If the attack was part of a broader campaign (e.g., credential stuffing, API abuse, or probing for weaknesses), it might escalate into more severe consequences like data exposure or service outages. The lack of public details on compromised data or financial loss suggests the impact was contained, but the incident highlights vulnerabilities in high-profile media platforms targeted by cyber threats.

ForbesCyber Attack60211/2025
Rankiteo Explanation :
Attack limited on finance or reputation

Description: Forbes experienced a **403 Access Denied** error, indicating a potential **cybersecurity incident** where unauthorized access was blocked, possibly due to a **DDoS attack, credential stuffing, or web application firewall (WAF) triggering security protocols**. The termination of the user session suggests an active defensive measure against a suspected breach or malicious traffic.While no explicit data leak or ransomware was confirmed, the incident disrupted access to **next-hop.forbes.com**, impacting user experience and potentially damaging reputation. If the attack was part of a broader campaign (e.g., targeting media outlets), it could signal an attempt to **degrade trust in digital news platforms** or exploit vulnerabilities in content delivery networks (CDNs). The lack of further details prevents confirming whether financial data, user credentials, or internal systems were compromised, but the incident aligns with **service disruption risks** common in cyber attacks on high-profile publishers.

Forbes
Cyber Attack
Severity: 60
Impact: 2
Seen: 5/2025
Blog:
Rankiteo Explanation
Attack limited on finance or reputation

Description: The article indicates a **403 Access Denied** error on **next-hop.forbes.com**, suggesting a potential **cybersecurity incident** where unauthorized access was attempted or blocked, possibly due to a **DDoS attack, web application firewall (WAF) trigger, or malicious traffic detection**. The error message, combined with the **session termination notice**, implies that Forbes’ systems detected and mitigated a suspicious connection (IP: **86.183.224.145**), likely part of a broader **cyber attack campaign**.While no explicit data breach or ransomware is confirmed, the incident aligns with **disruptive cyber activity** targeting high-profile media platforms. Such attacks often aim to **degrade service availability, steal credentials, or exploit vulnerabilities** in content delivery networks (CDNs). If the attack was part of a **coordinated effort (e.g., hacktivism, state-sponsored probing)**, it could escalate to more severe consequences, including **reputational damage or financial loss** due to downtime. The reference ID (**1759170640**) may correlate with a logged security event, but no public details confirm data exfiltration or systemic compromise.

Forbes
Cyber Attack
Severity: 60
Impact: 2
Seen: 2/2025
Blog:
Rankiteo Explanation
Attack limited on finance or reputation

Description: Forbes, a globally recognized media and publishing company, experienced a **403 Access Denied** error on its platform (`next-hop.forbes.com`), indicating a potential **cybersecurity incident**—likely a **DDoS attack, unauthorized access attempt, or misconfigured security controls**. The error message suggests the session was forcibly terminated, which may imply an active defensive measure against a breach or attack. While no explicit data leak or ransomware was confirmed, the disruption aligns with **service outages** that could harm reputation, user trust, or operational continuity. If the incident stemmed from a **cyber attack targeting infrastructure**, it might have temporarily blocked legitimate users, impacting ad revenue, subscriber access, or content delivery. The reference to an IP (`159.180.120.250`) and session ID hints at a **targeted or automated intrusion attempt**, though the lack of further details prevents confirming data exfiltration or systemic damage. Given Forbes’ high-profile status, even short-lived disruptions can trigger **financial losses (advertising, subscriptions)** and **reputational erosion**, especially if users perceive the platform as vulnerable. No evidence suggests **physical harm, war-level threats, or existential risks**, but the incident underscores the **growing targeting of media outlets** by threat actors for disruption or espionage.

Forbes
Cyber Attack
Severity: 60
Impact: 2
Seen: 5/2025
Blog:
Rankiteo Explanation
Attack limited on finance or reputation

Description: The article from **next-hop.forbes.com** indicates an **access denial (HTTP 403 error)**, suggesting a potential **cybersecurity incident** where unauthorized access was blocked, possibly due to a **DDoS attack, web application firewall (WAF) trigger, or malicious traffic detection**. While no explicit breach or data leak is confirmed, the termination of the session implies an **active defensive measure** against a suspected threat.The incident may have disrupted user access to Forbes’ digital platform, raising concerns about **reputation damage** if attackers targeted high-profile media infrastructure. If the 403 error resulted from a **cyber attack (e.g., credential stuffing, scraping, or probing for vulnerabilities)**, it could signal an attempt to exploit Forbes’ systems—though no immediate financial or data compromise is evident. The reference to an IP (`92.236.242.131`) and session ID hints at **suspicious traffic patterns**, possibly linked to automated bots or adversarial reconnaissance.Without further details, the impact remains **limited to operational disruption and reputational risk**, assuming no successful intrusion or data exfiltration occurred. However, if the attack was part of a broader campaign (e.g., ransomware precursor or APT activity), the severity could escalate.

Forbes
Cyber Attack
Severity: 60
Impact: 2
Seen: 9/2025
Blog:
Rankiteo Explanation
Attack limited on finance or reputation

Description: Forbes experienced a **403 Access Denied** error, indicating a potential **cybersecurity incident** where unauthorized access was blocked, possibly due to a **DDoS attack, credential stuffing, or web application firewall (WAF) triggering a security rule**. The termination of the user session (`Ref: 51.190.202.144`) suggests an automated or malicious attempt to exploit vulnerabilities or disrupt services. While no explicit data breach or ransomware was confirmed, the incident could imply **reputational harm** if users perceive Forbes’ platform as insecure. If the attack was part of a broader campaign (e.g., targeting media outlets), it might have aimed to **degrade trust in digital content delivery** or probe for weaknesses. The lack of stolen data or operational outage limits the impact, but repeated such incidents could escalate to financial losses (e.g., ad revenue decline) or regulatory scrutiny if tied to inadequate protections.

Forbes
Cyber Attack
Severity: 60
Impact: 2
Seen: 5/2025
Blog:
Rankiteo Explanation
Attack limited on finance or reputation

Description: Forbes experienced a **403 Access Denied** error, indicating a potential **cybersecurity incident** where unauthorized access was blocked, possibly due to a **DDoS attack, web application firewall (WAF) trigger, or malicious traffic detection**. The error message suggests a **session termination**, which may imply an attempted breach or exploitation of vulnerabilities in their web infrastructure. While no explicit data leak or ransomware involvement was confirmed, the incident could have disrupted user access, damaged reputation, or signaled an underlying security flaw. If the attack was part of a broader campaign (e.g., credential stuffing, API abuse, or probing for weaknesses), it might escalate into more severe consequences like data exposure or service outages. The lack of public details on compromised data or financial loss suggests the impact was contained, but the incident highlights vulnerabilities in high-profile media platforms targeted by cyber threats.

Forbes
Cyber Attack
Severity: 60
Impact: 2
Seen: 11/2025
Blog:
Rankiteo Explanation
Attack limited on finance or reputation

Description: Forbes experienced a **403 Access Denied** error, indicating a potential **cybersecurity incident** where unauthorized access was blocked, possibly due to a **DDoS attack, credential stuffing, or web application firewall (WAF) triggering security protocols**. The termination of the user session suggests an active defensive measure against a suspected breach or malicious traffic.While no explicit data leak or ransomware was confirmed, the incident disrupted access to **next-hop.forbes.com**, impacting user experience and potentially damaging reputation. If the attack was part of a broader campaign (e.g., targeting media outlets), it could signal an attempt to **degrade trust in digital news platforms** or exploit vulnerabilities in content delivery networks (CDNs). The lack of further details prevents confirming whether financial data, user credentials, or internal systems were compromised, but the incident aligns with **service disruption risks** common in cyber attacks on high-profile publishers.

Ailogo

Forbes Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

🔒
Incident Predictions locked
Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

🔒
A.I. Risk Score Predictions locked
Access Monitoring Plan
statics

Underwriter Stats for Forbes

Incidents vs Book and Periodical Publishing Industry Average (This Year)

Forbes has 1263.64% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

Forbes has 837.5% more incidents than the average of all companies with at least one recorded incident.

Incident Types Forbes vs Book and Periodical Publishing Industry Avg (This Year)

Forbes reported 6 incidents this year: 6 cyber attacks, 0 ransomware, 0 vulnerabilities, 0 data breaches, compared to industry peers with at least 1 incident.

Incident History — Forbes (X = Date, Y = Severity)

Forbes cyber incidents detection timeline including parent company and subsidiaries

Forbes Company Subsidiaries

SubsidiaryImage

Forbes Media is a global media, branding and technology company, with a focus on news and information about business, investing, technology, entrepreneurship, leadership and affluent lifestyles. The company publishes Forbes, Forbes Asia, and Forbes Europe magazines as well as Forbes.com. The Forbes brand today reaches more than 94 million people worldwide with its business message each month through its magazines and 37 licensed local editions around the globe, Forbes.com, TV, conferences, research, social and mobile platforms. Forbes Media’s brand extensions include conferences, real estate, education, financial services, and technology license agreements. Forbes is an equal opportunity employer.

Loading...
similarCompanies

Forbes Similar Companies

Dallas Innovates

Dallas Innovates brings you news about the people, companies, and brands that make Dallas-Fort Worth a hub of innovation, every day. Find what's new and next in business from startup to enterprise, education to social, and creative to invention at DallasInnovates.com. Dallas Innovates, published b

Greenleaf Book Group

Greenleaf Book Group is a publisher and distributor that specializes in the development of independent authors and the growth of small presses. Our publishing model was designed to support the independent author and to make it possible for writers to retain the rights to their work and still compete

Maria B. Campbell Associates, Inc.

Maria B. Campbell Associates, Inc. is a literary scouting company that advises clients about American and international books for translation and publication in their markets, and for adaptation into television and film. The company was founded in 1987 by Maria B. Campbell and is located in New York

Golf Digest

Golf Digest is the leading brand in golf, boasting the largest digital audience and print circulation in the game. Our mission is to help people enjoy every aspect of golf, from advice on how to play, what to play, and where to play; to news and analysis on the game’s competitive circuit. Golf Diges

The Independent Magazine

Our readers turn to The Independent for news about their community and to stay informed and abreast of the myriad of balls, galas and non-profit events that happen in Our Town every year. Its pages are filled with photos of the people who participate in our community through their support of the ar

Forum Publishing Company

Forum Publishing Company was established in 1981 to assist independent retailers in running their businesses. We connect wholesalers of merchandise with retail store owners throughout the United States. In addition to publishing two monthly trade magazines, Retailers Forum and Swap Meet Magazine,

newsone

Forbes CyberSecurity News

November 26, 2025 09:57 PM
Latest AI-Powered Cybersecurity News Today | Trends, Predictions, & Analysis

Explore the forefront of AI-Powered Cybersecurity news with Forbes' comprehensive coverage tailored to keep you ahead of emerging trends and...

November 26, 2025 03:00 PM
CISA Warns iPhone And Android Users — Secure Your Smartphone Now

As spyware attacks continue, America's Cyber Defense Agency has urged iPhone and Android users to secure their smartphones now.

November 26, 2025 11:30 AM
Google’s Hot New AI Coding Tool Was Hacked A Day After Launch

A security researcher discovered a major flaw in the coding product, the latest example of companies rushing out AI tools vulnerable to...

November 25, 2025 03:50 PM
Hackers Bypass Signal, Telegram And WhatsApp Encryption To Read Messages

How private and secure are your end-to-end encrypted instant messages? Not so much when Sturnus attacks.

November 25, 2025 09:09 AM
Feds Warn iPhone Users—Stop Sending Texts From iMessage

Your encrypted messages are now under threat. Not only does new commercial spyware put your private content at risk, it can also compromise...

November 24, 2025 03:14 PM
Agentic AI Is Coming—But Is Your Cybersecurity Really Ready For It?

Learn the top agentic AI cybersecurity risks and how leaders can protect data, reduce shadow AI, and deploy AI agents safely across the...

November 24, 2025 01:52 PM
These Are The Worst Passwords In America — Check Yours Now

Amazon account hackers want them, Netflix and PayPal account hackers want them, and yet we still don't take them seriously enough as...

November 23, 2025 03:38 PM
Netflix And PayPal Users Warned As Matrix Hackers Attack

It has been a week of 'not what they seem' hack attacks. First there was the news of how cybercriminals are testing out a new Android...

November 20, 2025 07:39 PM
2025 Forbes CIO Summit | Cybersecurity: Staying Ahead Of Intelligent Threats

AI and new technologies aren't only empowering business to accelerate - they're also transforming the way cybercriminals do business.

faq

Frequently Asked Questions

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.

Forbes CyberSecurity History Information

Official Website of Forbes

The official website of Forbes is http://www.forbes.com.

Forbes’s AI-Generated Cybersecurity Score

According to Rankiteo, Forbes’s AI-generated cybersecurity score is 781, reflecting their Fair security posture.

How many security badges does Forbes’ have ?

According to Rankiteo, Forbes currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Does Forbes have SOC 2 Type 1 certification ?

According to Rankiteo, Forbes is not certified under SOC 2 Type 1.

Does Forbes have SOC 2 Type 2 certification ?

According to Rankiteo, Forbes does not hold a SOC 2 Type 2 certification.

Does Forbes comply with GDPR ?

According to Rankiteo, Forbes is not listed as GDPR compliant.

Does Forbes have PCI DSS certification ?

According to Rankiteo, Forbes does not currently maintain PCI DSS compliance.

Does Forbes comply with HIPAA ?

According to Rankiteo, Forbes is not compliant with HIPAA regulations.

Does Forbes have ISO 27001 certification ?

According to Rankiteo,Forbes is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Industry Classification of Forbes

Forbes operates primarily in the Book and Periodical Publishing industry.

Number of Employees at Forbes

Forbes employs approximately 9,035 people worldwide.

Subsidiaries Owned by Forbes

Forbes presently has no subsidiaries across any sectors.

Forbes’s LinkedIn Followers

Forbes’s official LinkedIn profile has approximately 18,075,444 followers.

NAICS Classification of Forbes

Forbes is classified under the NAICS code 511, which corresponds to Publishing Industries (except Internet).

Forbes’s Presence on Crunchbase

Yes, Forbes has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/forbes-magazine.

Forbes’s Presence on LinkedIn

Yes, Forbes maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/forbes-magazine.

Cybersecurity Incidents Involving Forbes

As of November 28, 2025, Rankiteo reports that Forbes has experienced 6 cybersecurity incidents.

Number of Peer and Competitor Companies

Forbes has an estimated 4,881 peer or competitor companies worldwide.

What types of cybersecurity incidents have occurred at Forbes ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack.

How does Forbes detect and respond to cybersecurity incidents ?

Detection and Response: The company detects and responds to cybersecurity incidents through an communication strategy with users directed to contact support for further information, and communication strategy with users advised to contact support for further information., and communication strategy with users advised to contact support for further information (ref: 81.110.255.22 1758867654)., and communication strategy with users advised to contact support for further information., and communication strategy with users advised to contact support for further information., and communication strategy with users advised to contact support for further information (generic message)...

Incident Details

Can you provide details on each incident ?

Incident : Access Denial / Session Termination

Title: None

Description: Access denied (403) error encountered on next-hop.forbes.com. Current session terminated abruptly. Reference ID: 159.180.120.250 1756801083. Users advised to contact support for further information.

Type: Access Denial / Session Termination

Incident : Cyber Attack

Title: None

Description: Access denied (403) error on next-hop.forbes.com. Current session was terminated abruptly. Reference ID provided: 51.190.202.144 1758133748.

Type: Cyber Attack

Incident : Access Denial (HTTP 403)

Title: None

Description: Access denied (403) error on next-hop.forbes.com. Current session was terminated. Reference ID: 81.110.255.22 1758867654.

Type: Access Denial (HTTP 403)

Incident : Cyber Attack

Title: None

Description: Access denied (403) error encountered on next-hop.forbes.com. Current session was terminated abruptly. Reference ID: 92.236.242.131 1758933193.

Type: Cyber Attack

Incident : Access Denial / Session Termination

Title: None

Description: Access denied (403) error encountered on next-hop.forbes.com. Current session terminated abruptly. Reference ID provided: 86.183.224.145 1759170640.

Type: Access Denial / Session Termination

Incident : Cyber Attack

Title: None

Description: Access to next-hop.forbes.com was denied with a 403 error. The current session was terminated abruptly. Reference ID provided: 2.121.75.150 1762345349.

Type: Cyber Attack

What are the most common types of attacks the company has faced ?

Common Attack Types: The most common types of attacks the company has faced is Cyber Attack.

Impact of the Incidents

What was the impact of each incident ?

Incident : Access Denial / Session Termination FOR819090225

Systems Affected: next-hop.forbes.com

Operational Impact: Session termination for users attempting to access the service

Brand Reputation Impact: Potential negative perception due to service disruption

Incident : Cyber Attack FOR2592925091725

Systems Affected: next-hop.forbes.com

Operational Impact: Session termination for users attempting to access the service.

Incident : Access Denial (HTTP 403) FOR2862128092625

Systems Affected: next-hop.forbes.com

Operational Impact: Session termination for users attempting to access the service

Incident : Cyber Attack FOR4903349092725

Systems Affected: next-hop.forbes.com

Operational Impact: Session termination for users attempting to access the service.

Incident : Access Denial / Session Termination FOR0700107093025

Systems Affected: next-hop.forbes.com

Operational Impact: Session termination for users attempting to access the service

Incident : Cyber Attack FOR1632316110525

Systems Affected: next-hop.forbes.com

Operational Impact: Session termination for users attempting to access the service

Which entities were affected by each incident ?

Incident : Access Denial / Session Termination FOR819090225

Entity Name: Forbes

Entity Type: Media Organization

Industry: Digital Publishing / Business News

Incident : Cyber Attack FOR2592925091725

Entity Name: Forbes

Entity Type: Media Organization

Industry: Publishing/Digital Media

Incident : Access Denial (HTTP 403) FOR2862128092625

Entity Name: Forbes

Entity Type: Media/Publishing

Industry: Digital Media

Incident : Cyber Attack FOR4903349092725

Entity Name: Forbes

Entity Type: Media Organization

Industry: Publishing/Digital Media

Incident : Access Denial / Session Termination FOR0700107093025

Entity Name: Forbes

Entity Type: Media Organization

Industry: Publishing / Digital Media

Incident : Cyber Attack FOR1632316110525

Entity Name: Forbes

Entity Type: Media/Publishing

Industry: Digital Media

Response to the Incidents

What measures were taken in response to each incident ?

Incident : Access Denial / Session Termination FOR819090225

Communication Strategy: Users directed to contact support for further information

Incident : Cyber Attack FOR2592925091725

Communication Strategy: Users advised to contact support for further information.

Incident : Access Denial (HTTP 403) FOR2862128092625

Communication Strategy: Users advised to contact support for further information (Ref: 81.110.255.22 1758867654).

Incident : Cyber Attack FOR4903349092725

Communication Strategy: Users advised to contact support for further information.

Incident : Access Denial / Session Termination FOR0700107093025

Communication Strategy: Users advised to contact support for further information.

Incident : Cyber Attack FOR1632316110525

Communication Strategy: Users advised to contact support for further information (generic message).

References

Where can I find more information about each incident ?

Incident : Access Denial / Session Termination FOR819090225

Source: Forbes Access Denial Error Page

URL: http://next-hop.forbes.com

Incident : Cyber Attack FOR2592925091725

Source: Forbes Access Denied Error Page

URL: http://next-hop.forbes.com

Incident : Access Denial (HTTP 403) FOR2862128092625

Source: Forbes Access Denial Error Page

URL: https://next-hop.forbes.com

Incident : Cyber Attack FOR4903349092725

Source: next-hop.forbes.com error page

URL: http://next-hop.forbes.com

Incident : Access Denial / Session Termination FOR0700107093025

Source: Forbes Access Denial Error Page

URL: http://next-hop.forbes.com

Incident : Cyber Attack FOR1632316110525

Source: Forbes Access Denied Error Page

URL: https://next-hop.forbes.com

Where can stakeholders find additional resources on cybersecurity best practices ?

Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: Forbes Access Denial Error PageUrl: http://next-hop.forbes.com, and Source: Forbes Access Denied Error PageUrl: http://next-hop.forbes.com, and Source: Forbes Access Denial Error PageUrl: https://next-hop.forbes.com, and Source: next-hop.forbes.com error pageUrl: http://next-hop.forbes.com, and Source: Forbes Access Denial Error PageUrl: http://next-hop.forbes.com, and Source: Forbes Access Denied Error PageUrl: https://next-hop.forbes.com.

Investigation Status

What is the current status of the investigation for each incident ?

Incident : Access Denial / Session Termination FOR819090225

Investigation Status: Unclear; users advised to contact support

How does the company communicate the status of incident investigations to stakeholders ?

Communication of Investigation Status: The company communicates the status of incident investigations to stakeholders through Users directed to contact support for further information, Users advised to contact support for further information., Users advised to contact support for further information (Ref: 81.110.255.22 1758867654)., Users advised to contact support for further information., Users advised to contact support for further information. and Users advised to contact support for further information (generic message)..

Stakeholder and Customer Advisories

Were there any advisories issued to stakeholders or customers for each incident ?

Incident : Access Denial / Session Termination FOR819090225

Customer Advisories: Contact support for further information (as per error message).

Incident : Cyber Attack FOR2592925091725

Customer Advisories: Users redirected to contact support for further details.

Incident : Access Denial (HTTP 403) FOR2862128092625

Customer Advisories: Users redirected to contact support for further information.

Incident : Cyber Attack FOR4903349092725

Customer Advisories: Users redirected to contact support for further details.

Incident : Access Denial / Session Termination FOR0700107093025

Customer Advisories: Users redirected to contact support for further information.

Incident : Cyber Attack FOR1632316110525

Customer Advisories: Generic message instructing users to contact support for further information.

What advisories does the company provide to stakeholders and customers following an incident ?

Advisories Provided: The company provides the following advisories to stakeholders and customers following an incident: were Contact support for further information (as per error message)., Users redirected to contact support for further details., Users redirected to contact support for further information., Users redirected to contact support for further details., Users redirected to contact support for further information. and Generic message instructing users to contact support for further information..

Additional Questions

Impact of the Incidents

What was the most significant system affected in an incident ?

Most Significant System Affected: The most significant system affected in an incident was next-hop.forbes.com and next-hop.forbes.com and next-hop.forbes.com and next-hop.forbes.com and next-hop.forbes.com and next-hop.forbes.com.

References

What is the most recent source of information about an incident ?

Most Recent Source: The most recent source of information about an incident are Forbes Access Denial Error Page, Forbes Access Denied Error Page and next-hop.forbes.com error page.

What is the most recent URL for additional resources on cybersecurity best practices ?

Most Recent URL for Additional Resources: The most recent URL for additional resources on cybersecurity best practices is http://next-hop.forbes.com, http://next-hop.forbes.com, https://next-hop.forbes.com, http://next-hop.forbes.com, http://next-hop.forbes.com, https://next-hop.forbes.com .

Investigation Status

What is the current status of the most recent investigation ?

Current Status of Most Recent Investigation: The current status of the most recent investigation is Unclear; users advised to contact support.

Stakeholder and Customer Advisories

What was the most recent customer advisory issued ?

Most Recent Customer Advisory: The most recent customer advisory issued were an Contact support for further information (as per error message)., Users redirected to contact support for further details., Users redirected to contact support for further information., Users redirected to contact support for further details., Users redirected to contact support for further information. and Generic message instructing users to contact support for further information.

cve

Latest Global CVEs (Not Company-Specific)

Description

ThingsBoard in versions prior to v4.2.1 allows an authenticated user to upload malicious SVG images via the "Image Gallery", leading to a Stored Cross-Site Scripting (XSS) vulnerability. The exploit can be triggered when any user accesses the public API endpoint of the malicious SVG images, or if the malicious images are embedded in an `iframe` element, during a widget creation, deployed to any page of the platform (e.g., dashboards), and accessed during normal operations. The vulnerability resides in the `ImageController`, which fails to restrict the execution of JavaScript code when an image is loaded by the user's browser. This vulnerability can lead to the execution of malicious code in the context of other users' sessions, potentially compromising their accounts and allowing unauthorized actions.

Risk Information
cvss4
Base: 6.2
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to to verify that the token used during the code exchange originates from the same authentication flow, which allows an authenticated user to perform account takeover via a specially crafted email address used when switching authentication methods and sending a request to the /users/login/sso/code-exchange endpoint. The vulnerability requires ExperimentalEnableAuthenticationTransfer to be enabled (default: enabled) and RequireEmailVerification to be disabled (default: disabled).

Risk Information
cvss3
Base: 9.9
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Description

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to sanitize team email addresses to be visible only to Team Admins, which allows any authenticated user to view team email addresses via the GET /api/v4/channels/{channel_id}/common_teams endpoint

Risk Information
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Description

Exposure of email service credentials to users without administrative rights in Devolutions Server.This issue affects Devolutions Server: before 2025.2.21, before 2025.3.9.

Description

Exposure of credentials in unintended requests in Devolutions Server.This issue affects Server: through 2025.2.20, through 2025.3.8.

Access Data Using Our API

SubsidiaryImage

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=forbes-magazine' -H 'apikey: YOUR_API_KEY_HERE'

What Do We Measure ?

revertimgrevertimgrevertimgrevertimg
Incident
revertimgrevertimgrevertimgrevertimg
Finding
revertimgrevertimgrevertimgrevertimg
Grade
revertimgrevertimgrevertimgrevertimg
Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network Security

Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)

Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)

Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat Intelligence

Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Top LeftTop RightBottom LeftBottom Right
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
Users Love Us Badge