Company Details
forbes-magazine
9,035
18,075,444
511
forbes.com
0
FOR_1255175
In-progress

Forbes Company CyberSecurity Posture
forbes.comForbes Media is a global media, branding and technology company, with a focus on news and information about business, investing, technology, entrepreneurship, leadership and affluent lifestyles. The company publishes Forbes, Forbes Asia, and Forbes Europe magazines as well as Forbes.com. The Forbes brand today reaches more than 94 million people worldwide with its business message each month through its magazines and 37 licensed local editions around the globe, Forbes.com, TV, conferences, research, social and mobile platforms. Forbes Media’s brand extensions include conferences, real estate, education, financial services, and technology license agreements. Forbes is an equal opportunity employer.
Company Details
forbes-magazine
9,035
18,075,444
511
forbes.com
0
FOR_1255175
In-progress
Between 750 and 799

Forbes Global Score (TPRM)XXXX

Description: The article indicates a **403 Access Denied** error on **next-hop.forbes.com**, suggesting a potential **cybersecurity incident** where unauthorized access was attempted or blocked, possibly due to a **DDoS attack, web application firewall (WAF) trigger, or malicious traffic detection**. The error message, combined with the **session termination notice**, implies that Forbes’ systems detected and mitigated a suspicious connection (IP: **86.183.224.145**), likely part of a broader **cyber attack campaign**.While no explicit data breach or ransomware is confirmed, the incident aligns with **disruptive cyber activity** targeting high-profile media platforms. Such attacks often aim to **degrade service availability, steal credentials, or exploit vulnerabilities** in content delivery networks (CDNs). If the attack was part of a **coordinated effort (e.g., hacktivism, state-sponsored probing)**, it could escalate to more severe consequences, including **reputational damage or financial loss** due to downtime. The reference ID (**1759170640**) may correlate with a logged security event, but no public details confirm data exfiltration or systemic compromise.
Description: Forbes, a globally recognized media and publishing company, experienced a **403 Access Denied** error on its platform (`next-hop.forbes.com`), indicating a potential **cybersecurity incident**—likely a **DDoS attack, unauthorized access attempt, or misconfigured security controls**. The error message suggests the session was forcibly terminated, which may imply an active defensive measure against a breach or attack. While no explicit data leak or ransomware was confirmed, the disruption aligns with **service outages** that could harm reputation, user trust, or operational continuity. If the incident stemmed from a **cyber attack targeting infrastructure**, it might have temporarily blocked legitimate users, impacting ad revenue, subscriber access, or content delivery. The reference to an IP (`159.180.120.250`) and session ID hints at a **targeted or automated intrusion attempt**, though the lack of further details prevents confirming data exfiltration or systemic damage. Given Forbes’ high-profile status, even short-lived disruptions can trigger **financial losses (advertising, subscriptions)** and **reputational erosion**, especially if users perceive the platform as vulnerable. No evidence suggests **physical harm, war-level threats, or existential risks**, but the incident underscores the **growing targeting of media outlets** by threat actors for disruption or espionage.
Description: The article from **next-hop.forbes.com** indicates an **access denial (HTTP 403 error)**, suggesting a potential **cybersecurity incident** where unauthorized access was blocked, possibly due to a **DDoS attack, web application firewall (WAF) trigger, or malicious traffic detection**. While no explicit breach or data leak is confirmed, the termination of the session implies an **active defensive measure** against a suspected threat.The incident may have disrupted user access to Forbes’ digital platform, raising concerns about **reputation damage** if attackers targeted high-profile media infrastructure. If the 403 error resulted from a **cyber attack (e.g., credential stuffing, scraping, or probing for vulnerabilities)**, it could signal an attempt to exploit Forbes’ systems—though no immediate financial or data compromise is evident. The reference to an IP (`92.236.242.131`) and session ID hints at **suspicious traffic patterns**, possibly linked to automated bots or adversarial reconnaissance.Without further details, the impact remains **limited to operational disruption and reputational risk**, assuming no successful intrusion or data exfiltration occurred. However, if the attack was part of a broader campaign (e.g., ransomware precursor or APT activity), the severity could escalate.
Description: Forbes experienced a **403 Access Denied** error, indicating a potential **cybersecurity incident** where unauthorized access was blocked, possibly due to a **DDoS attack, credential stuffing, or web application firewall (WAF) triggering a security rule**. The termination of the user session (`Ref: 51.190.202.144`) suggests an automated or malicious attempt to exploit vulnerabilities or disrupt services. While no explicit data breach or ransomware was confirmed, the incident could imply **reputational harm** if users perceive Forbes’ platform as insecure. If the attack was part of a broader campaign (e.g., targeting media outlets), it might have aimed to **degrade trust in digital content delivery** or probe for weaknesses. The lack of stolen data or operational outage limits the impact, but repeated such incidents could escalate to financial losses (e.g., ad revenue decline) or regulatory scrutiny if tied to inadequate protections.
Description: Forbes experienced a **403 Access Denied** error, indicating a potential **cybersecurity incident** where unauthorized access was blocked, possibly due to a **DDoS attack, web application firewall (WAF) trigger, or malicious traffic detection**. The error message suggests a **session termination**, which may imply an attempted breach or exploitation of vulnerabilities in their web infrastructure. While no explicit data leak or ransomware involvement was confirmed, the incident could have disrupted user access, damaged reputation, or signaled an underlying security flaw. If the attack was part of a broader campaign (e.g., credential stuffing, API abuse, or probing for weaknesses), it might escalate into more severe consequences like data exposure or service outages. The lack of public details on compromised data or financial loss suggests the impact was contained, but the incident highlights vulnerabilities in high-profile media platforms targeted by cyber threats.
Description: Forbes experienced a **403 Access Denied** error, indicating a potential **cybersecurity incident** where unauthorized access was blocked, possibly due to a **DDoS attack, credential stuffing, or web application firewall (WAF) triggering security protocols**. The termination of the user session suggests an active defensive measure against a suspected breach or malicious traffic.While no explicit data leak or ransomware was confirmed, the incident disrupted access to **next-hop.forbes.com**, impacting user experience and potentially damaging reputation. If the attack was part of a broader campaign (e.g., targeting media outlets), it could signal an attempt to **degrade trust in digital news platforms** or exploit vulnerabilities in content delivery networks (CDNs). The lack of further details prevents confirming whether financial data, user credentials, or internal systems were compromised, but the incident aligns with **service disruption risks** common in cyber attacks on high-profile publishers.


Forbes has 1263.64% more incidents than the average of same-industry companies with at least one recorded incident.
Forbes has 837.5% more incidents than the average of all companies with at least one recorded incident.
Forbes reported 6 incidents this year: 6 cyber attacks, 0 ransomware, 0 vulnerabilities, 0 data breaches, compared to industry peers with at least 1 incident.
Forbes cyber incidents detection timeline including parent company and subsidiaries

Forbes Media is a global media, branding and technology company, with a focus on news and information about business, investing, technology, entrepreneurship, leadership and affluent lifestyles. The company publishes Forbes, Forbes Asia, and Forbes Europe magazines as well as Forbes.com. The Forbes brand today reaches more than 94 million people worldwide with its business message each month through its magazines and 37 licensed local editions around the globe, Forbes.com, TV, conferences, research, social and mobile platforms. Forbes Media’s brand extensions include conferences, real estate, education, financial services, and technology license agreements. Forbes is an equal opportunity employer.


Dallas Innovates brings you news about the people, companies, and brands that make Dallas-Fort Worth a hub of innovation, every day. Find what's new and next in business from startup to enterprise, education to social, and creative to invention at DallasInnovates.com. Dallas Innovates, published b
Greenleaf Book Group is a publisher and distributor that specializes in the development of independent authors and the growth of small presses. Our publishing model was designed to support the independent author and to make it possible for writers to retain the rights to their work and still compete

Maria B. Campbell Associates, Inc. is a literary scouting company that advises clients about American and international books for translation and publication in their markets, and for adaptation into television and film. The company was founded in 1987 by Maria B. Campbell and is located in New York

Golf Digest is the leading brand in golf, boasting the largest digital audience and print circulation in the game. Our mission is to help people enjoy every aspect of golf, from advice on how to play, what to play, and where to play; to news and analysis on the game’s competitive circuit. Golf Diges

Our readers turn to The Independent for news about their community and to stay informed and abreast of the myriad of balls, galas and non-profit events that happen in Our Town every year. Its pages are filled with photos of the people who participate in our community through their support of the ar

Forum Publishing Company was established in 1981 to assist independent retailers in running their businesses. We connect wholesalers of merchandise with retail store owners throughout the United States. In addition to publishing two monthly trade magazines, Retailers Forum and Swap Meet Magazine,
.png)
Explore the forefront of AI-Powered Cybersecurity news with Forbes' comprehensive coverage tailored to keep you ahead of emerging trends and...
As spyware attacks continue, America's Cyber Defense Agency has urged iPhone and Android users to secure their smartphones now.
A security researcher discovered a major flaw in the coding product, the latest example of companies rushing out AI tools vulnerable to...
How private and secure are your end-to-end encrypted instant messages? Not so much when Sturnus attacks.
Your encrypted messages are now under threat. Not only does new commercial spyware put your private content at risk, it can also compromise...
Learn the top agentic AI cybersecurity risks and how leaders can protect data, reduce shadow AI, and deploy AI agents safely across the...
Amazon account hackers want them, Netflix and PayPal account hackers want them, and yet we still don't take them seriously enough as...
It has been a week of 'not what they seem' hack attacks. First there was the news of how cybercriminals are testing out a new Android...
AI and new technologies aren't only empowering business to accelerate - they're also transforming the way cybercriminals do business.

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of Forbes is http://www.forbes.com.
According to Rankiteo, Forbes’s AI-generated cybersecurity score is 781, reflecting their Fair security posture.
According to Rankiteo, Forbes currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, Forbes is not certified under SOC 2 Type 1.
According to Rankiteo, Forbes does not hold a SOC 2 Type 2 certification.
According to Rankiteo, Forbes is not listed as GDPR compliant.
According to Rankiteo, Forbes does not currently maintain PCI DSS compliance.
According to Rankiteo, Forbes is not compliant with HIPAA regulations.
According to Rankiteo,Forbes is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Forbes operates primarily in the Book and Periodical Publishing industry.
Forbes employs approximately 9,035 people worldwide.
Forbes presently has no subsidiaries across any sectors.
Forbes’s official LinkedIn profile has approximately 18,075,444 followers.
Forbes is classified under the NAICS code 511, which corresponds to Publishing Industries (except Internet).
Yes, Forbes has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/forbes-magazine.
Yes, Forbes maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/forbes-magazine.
As of November 28, 2025, Rankiteo reports that Forbes has experienced 6 cybersecurity incidents.
Forbes has an estimated 4,881 peer or competitor companies worldwide.
Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack.
Detection and Response: The company detects and responds to cybersecurity incidents through an communication strategy with users directed to contact support for further information, and communication strategy with users advised to contact support for further information., and communication strategy with users advised to contact support for further information (ref: 81.110.255.22 1758867654)., and communication strategy with users advised to contact support for further information., and communication strategy with users advised to contact support for further information., and communication strategy with users advised to contact support for further information (generic message)...
Title: None
Description: Access denied (403) error encountered on next-hop.forbes.com. Current session terminated abruptly. Reference ID: 159.180.120.250 1756801083. Users advised to contact support for further information.
Type: Access Denial / Session Termination
Title: None
Description: Access denied (403) error on next-hop.forbes.com. Current session was terminated abruptly. Reference ID provided: 51.190.202.144 1758133748.
Type: Cyber Attack
Title: None
Description: Access denied (403) error on next-hop.forbes.com. Current session was terminated. Reference ID: 81.110.255.22 1758867654.
Type: Access Denial (HTTP 403)
Title: None
Description: Access denied (403) error encountered on next-hop.forbes.com. Current session was terminated abruptly. Reference ID: 92.236.242.131 1758933193.
Type: Cyber Attack
Title: None
Description: Access denied (403) error encountered on next-hop.forbes.com. Current session terminated abruptly. Reference ID provided: 86.183.224.145 1759170640.
Type: Access Denial / Session Termination
Common Attack Types: The most common types of attacks the company has faced is Cyber Attack.

Systems Affected: next-hop.forbes.com
Operational Impact: Session termination for users attempting to access the service
Brand Reputation Impact: Potential negative perception due to service disruption

Systems Affected: next-hop.forbes.com
Operational Impact: Session termination for users attempting to access the service.

Systems Affected: next-hop.forbes.com
Operational Impact: Session termination for users attempting to access the service

Systems Affected: next-hop.forbes.com
Operational Impact: Session termination for users attempting to access the service.

Systems Affected: next-hop.forbes.com
Operational Impact: Session termination for users attempting to access the service

Systems Affected: next-hop.forbes.com
Operational Impact: Session termination for users attempting to access the service

Entity Name: Forbes
Entity Type: Media Organization
Industry: Digital Publishing / Business News

Entity Name: Forbes
Entity Type: Media Organization
Industry: Publishing/Digital Media

Entity Name: Forbes
Entity Type: Media/Publishing
Industry: Digital Media

Entity Name: Forbes
Entity Type: Media Organization
Industry: Publishing/Digital Media

Entity Name: Forbes
Entity Type: Media Organization
Industry: Publishing / Digital Media

Entity Name: Forbes
Entity Type: Media/Publishing
Industry: Digital Media

Communication Strategy: Users directed to contact support for further information

Communication Strategy: Users advised to contact support for further information.

Communication Strategy: Users advised to contact support for further information (Ref: 81.110.255.22 1758867654).

Communication Strategy: Users advised to contact support for further information.

Communication Strategy: Users advised to contact support for further information.

Communication Strategy: Users advised to contact support for further information (generic message).

Source: Forbes Access Denial Error Page

Source: Forbes Access Denied Error Page

Source: Forbes Access Denial Error Page

Source: next-hop.forbes.com error page

Source: Forbes Access Denial Error Page

Source: Forbes Access Denied Error Page
Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: Forbes Access Denial Error PageUrl: http://next-hop.forbes.com, and Source: Forbes Access Denied Error PageUrl: http://next-hop.forbes.com, and Source: Forbes Access Denial Error PageUrl: https://next-hop.forbes.com, and Source: next-hop.forbes.com error pageUrl: http://next-hop.forbes.com, and Source: Forbes Access Denial Error PageUrl: http://next-hop.forbes.com, and Source: Forbes Access Denied Error PageUrl: https://next-hop.forbes.com.

Investigation Status: Unclear; users advised to contact support
Communication of Investigation Status: The company communicates the status of incident investigations to stakeholders through Users directed to contact support for further information, Users advised to contact support for further information., Users advised to contact support for further information (Ref: 81.110.255.22 1758867654)., Users advised to contact support for further information., Users advised to contact support for further information. and Users advised to contact support for further information (generic message)..

Customer Advisories: Contact support for further information (as per error message).

Customer Advisories: Users redirected to contact support for further details.

Customer Advisories: Users redirected to contact support for further information.

Customer Advisories: Users redirected to contact support for further details.

Customer Advisories: Users redirected to contact support for further information.

Customer Advisories: Generic message instructing users to contact support for further information.
Advisories Provided: The company provides the following advisories to stakeholders and customers following an incident: were Contact support for further information (as per error message)., Users redirected to contact support for further details., Users redirected to contact support for further information., Users redirected to contact support for further details., Users redirected to contact support for further information. and Generic message instructing users to contact support for further information..
Most Significant System Affected: The most significant system affected in an incident was next-hop.forbes.com and next-hop.forbes.com and next-hop.forbes.com and next-hop.forbes.com and next-hop.forbes.com and next-hop.forbes.com.
Most Recent Source: The most recent source of information about an incident are Forbes Access Denial Error Page, Forbes Access Denied Error Page and next-hop.forbes.com error page.
Most Recent URL for Additional Resources: The most recent URL for additional resources on cybersecurity best practices is http://next-hop.forbes.com, http://next-hop.forbes.com, https://next-hop.forbes.com, http://next-hop.forbes.com, http://next-hop.forbes.com, https://next-hop.forbes.com .
Current Status of Most Recent Investigation: The current status of the most recent investigation is Unclear; users advised to contact support.
Most Recent Customer Advisory: The most recent customer advisory issued were an Contact support for further information (as per error message)., Users redirected to contact support for further details., Users redirected to contact support for further information., Users redirected to contact support for further details., Users redirected to contact support for further information. and Generic message instructing users to contact support for further information.
.png)
ThingsBoard in versions prior to v4.2.1 allows an authenticated user to upload malicious SVG images via the "Image Gallery", leading to a Stored Cross-Site Scripting (XSS) vulnerability. The exploit can be triggered when any user accesses the public API endpoint of the malicious SVG images, or if the malicious images are embedded in an `iframe` element, during a widget creation, deployed to any page of the platform (e.g., dashboards), and accessed during normal operations. The vulnerability resides in the `ImageController`, which fails to restrict the execution of JavaScript code when an image is loaded by the user's browser. This vulnerability can lead to the execution of malicious code in the context of other users' sessions, potentially compromising their accounts and allowing unauthorized actions.
Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to to verify that the token used during the code exchange originates from the same authentication flow, which allows an authenticated user to perform account takeover via a specially crafted email address used when switching authentication methods and sending a request to the /users/login/sso/code-exchange endpoint. The vulnerability requires ExperimentalEnableAuthenticationTransfer to be enabled (default: enabled) and RequireEmailVerification to be disabled (default: disabled).
Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to sanitize team email addresses to be visible only to Team Admins, which allows any authenticated user to view team email addresses via the GET /api/v4/channels/{channel_id}/common_teams endpoint
Exposure of email service credentials to users without administrative rights in Devolutions Server.This issue affects Devolutions Server: before 2025.2.21, before 2025.3.9.
Exposure of credentials in unintended requests in Devolutions Server.This issue affects Server: through 2025.2.20, through 2025.3.8.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.