What is the official website of GitHub ?

The official website of GitHub is https://github.com.

What is GitHub's cybersecurity risk score?

GitHub has an AI-generated cybersecurity risk score of 100 out of 1000, indicating a Critical security posture according to Rankiteo's assessment.

How many security incidents has GitHub experienced?

According to Rankiteo, GitHub currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has GitHub been affected by any supply chain cyber incidents ?

According to Rankiteo, GitHub has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: MLflow (Incident ID: MLF1787063064) Resecurity (Incident ID: CISRESMICAMASERSALGIT1786868753) Microsoft (Incident ID: HCLTAT1786448292) Microsoft Power Platform (Incident ID: MICATL1786962683) Microsoft Dynamics 365 (Incident ID: ALL1785522998) Microsoft Security Response Center (Incident ID: POL1785356870) Microsoft (Incident ID: KIE1787783299) OpenAI (Incident ID: CHE1784787889) AsyncAPI Initiative (Incident ID: CISSONMICORAASYKNX1784341544) AsyncAPI Initiative (Incident ID: ASYMIC1785327908) Packagist Conductors (Incident ID: WHMPACGITCPA1784816835) ShapedPlugin LLC (Incident ID: FORSHATANMICJAMIRHTEX1782147825) PRODAFT (Incident ID: MICSENKASESECRO1782073479) GitHub (Incident ID: SNOGIT1787203094) npm, Inc. (Incident ID: GITEXONPM1780604646) GitHub (Incident ID: GIT1780453444) npm, Inc. (Incident ID: ELAGITAMAOPENPM1780050263) npm, Inc. (Incident ID: NPMGIT1779963893) ANTV INC (Incident ID: ANTGIT1779395279) Google (Incident ID: OPEMICBRAGOOVIVBRO1779395125) NXP Semiconductors (Incident ID: NPMGITNXPMIC1779193496) GitHub (Incident ID: GIT1779459975) Microsoft Security (Incident ID: PUTWEBANYMIC1779215753) TanStack (Incident ID: GRA1779006227) GitHub (Incident ID: GIT1779251025)

Does GitHub have SOC 2 Type 1 certification ?

According to Rankiteo, GitHub is not certified under SOC 2 Type 1.

Does GitHub have SOC 2 Type 2 certification ?

According to Rankiteo, GitHub does not hold a SOC 2 Type 2 certification.

Does GitHub comply with GDPR ?

According to Rankiteo, GitHub is not listed as GDPR compliant.

Does GitHub have PCI DSS certification ?

According to Rankiteo, GitHub does not currently maintain PCI DSS compliance.

Does GitHub comply with HIPAA ?

According to Rankiteo, GitHub is not compliant with HIPAA regulations.

Does GitHub have ISO 27001 certification ?

According to Rankiteo,GitHub is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does GitHub operate in ?

GitHub operates primarily in the Software Development industry.

How many employees does GitHub have ?

GitHub employs approximately 6,548 people worldwide.

Does GitHub own any subsidiaries ?

GitHub presently has no subsidiaries across any sectors.

How many LinkedIn followers does GitHub have ?

GitHub's official LinkedIn profile has approximately 6,337,093 followers.

What is the NAICS classification code for GitHub ?

GitHub is classified under the NAICS code 5112, which corresponds to Software Publishers.

Does GitHub have a Crunchbase profile ?

Yes, GitHub has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/github.

Does GitHub have a LinkedIn profile ?

Yes, GitHub maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/github.

How many cybersecurity incidents has GitHub experienced ?

As of August 28, 2026, Rankiteo reports that GitHub has experienced 100 cybersecurity incidents.

How many peer or competitor companies does GitHub have ?

GitHub has an estimated 30,744 peer or competitor companies worldwide.

What types of cybersecurity incidents has GitHub faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack, Breach, Ransomware and Vulnerability.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

GitHub

Boost Score +25 with badge (5 left)

100

/1000

Critical

125

/1000

Critical

GitHub Vendor Cyber Rating & Cyber Score

github.com

cb in

Add Your Compliance Badge

As the global home for all developers, GitHub is the complete AI-powered developer platform to build, scale, and deliver secure software. Over 100 million people, including developers from 90 of the Fortune 100 companies, use GitHub to build amazing things together across 330+ million repositories. With all the collaborative features of GitHub, it has never been easier for individuals and teams to write faster, better code.

GitHub A.I CyberSecurity Scoring

Scoring History

GitHub

GitHub CyberSecurity News & History

Past Incidents

100

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Microsoft Security

Vulnerability

8/2026

MIC1787898427

Microsoft Security ...

Vulnerability

100

8/2026

MIC1787847949

Microsoft

Vulnerability

8/2026

MIC1787826520

GitHub

Breach

8/2026

TELGITSTROPE178...

GitHub

Cyber Attack

100

8/2026

MCDCITSHEVODVER...

Microsoft Security

Breach

8/2026

MICVODSAF178747...

Microsoft

Vulnerability

100

8/2026

MIC1787156632

Microsoft Copilot

Vulnerability

8/2026

GOOMIC178711351...

Microsoft Security ...

Vulnerability

100

8/2026

MIC1787034406

Microsoft Security

Vulnerability

8/2026

MIC1787149631

Microsoft Security ...

Vulnerability

100

8/2026

MIC1787163871

Microsoft

Vulnerability

100

8/2026

MLflow

MLF1787063064

GitHub

Cyber Attack

8/2026

GIT1786969496

GitHub

Breach

8/2026

Resecurity

CISRESMICAMASER...

Microsoft

Vulnerability

100

8/2026

MICSAP178649758...

Microsoft Threat In...

Cyber Attack

100

8/2026

MIC1786568300

Microsoft Security ...

Vulnerability

100

8/2026

MIC1787733576

Microsoft Security ...

Vulnerability

8/2026

MIC1786620445

Microsoft Security

Vulnerability

8/2026

MIC1786525732

Microsoft Security

Vulnerability

8/2026

MIC1786631229

Microsoft

Breach

8/2026

Microsoft

HCLTAT178644829...

Microsoft Power Pla...

Vulnerability

100

8/2026

Microsoft Power...

MICATL178696268...

GitHub

Cyber Attack

8/2026

GIT1785839378

Microsoft Security ...

Vulnerability

100

7/2026

MIC1785392682

Microsoft Dynamics ...

Ransomware

100

7/2026

Microsoft Dynam...

ALL1785522998

Microsoft Security ...

Breach

7/2026

Microsoft Secur...

POL1785356870

Microsoft Security

Vulnerability

7/2026

MIC1786107729

Microsoft

Breach

7/2026

Microsoft

KIE1787783299

Microsoft Security

Cyber Attack

7/2026

MIC1784881741

Microsoft Security

Vulnerability

7/2026

MIC1784744777

Microsoft Security ...

Vulnerability

100

7/2026

OpenAI

CHE1784787889

Microsoft Security

Cyber Attack

7/2026

MIC1784658331

Microsoft Threat In...

Vulnerability

7/2026

MICNOVBRU178442...

Microsoft Security

Vulnerability

7/2026

AsyncAPI Initia...

CISSONMICORAASY...

Microsoft

Vulnerability

100

7/2026

MIC1784125827

Microsoft Security

Vulnerability

7/2026

MIC1784096635

Microsoft Security

Vulnerability

7/2026

MIC1784096831

Microsoft Security ...

Vulnerability

7/2026

MIC1784298242

Microsoft

Vulnerability

7/2026

MIC1784816949

Microsoft

Vulnerability

7/2026

MIC1784089434

Microsoft Security

Vulnerability

100

7/2026

MIC1784141218

Microsoft Threat In...

Cyber Attack

100

7/2026

AsyncAPI Initia...

ASYMIC178532790...

GitHub

Cyber Attack

100

7/2026

Packagist Condu...

WHMPACGITCPA178...

Microsoft Threat In...

Cyber Attack

100

7/2026

MIC1783680524

Microsoft Security ...

Vulnerability

100

7/2026

MIC1783441514

GitHub

Vulnerability

7/2026

GIT1783441439

Microsoft Security ...

Vulnerability

7/2026

MIC1783067043

Microsoft Security

Ransomware

100

7/2026

MIC1787041566

Microsoft Security

Vulnerability

7/2026

MIC1786379301

Microsoft

Vulnerability

6/2026

MIC1782721445

Microsoft Security

Cyber Attack

6/2026

MIC1782483842

Microsoft Security

Vulnerability

6/2026

MIC1782375843

Microsoft Security

Cyber Attack

6/2026

MIC1782404840

Microsoft

Breach

6/2026

ANAMIC178542315...

Microsoft Security

Cyber Attack

6/2026

ShapedPlugin LL...

FORSHATANMICJAM...

Microsoft Security ...

Ransomware

100

6/2026

MIC1782204242

Microsoft Security

Cyber Attack

6/2026

PRODAFT

MICSENKASESECRO...

GitHub

Cyber Attack

6/2026

GIT1781778547

Microsoft Security

Vulnerability

6/2026

MIC1781785861

GitHub

Vulnerability

6/2026

GitHub

SNOGIT178720309...

Microsoft Threat In...

Cyber Attack

6/2026

MIC1781713463

Microsoft Security ...

Vulnerability

6/2026

MIC1781238231

Microsoft Security

Cyber Attack

6/2026

SPOMICADO178120...

Microsoft Security

Vulnerability

6/2026

MIC1782296659

Microsoft Security ...

Vulnerability

6/2026

MIC1781101475

Microsoft Security ...

Vulnerability

6/2026

MIC1781072633

Microsoft Security ...

Vulnerability

6/2026

MIC1781785666

Microsoft Security ...

Breach

6/2026

MIC1780986305

Microsoft

Cyber Attack

6/2026

MIC1780900177

Microsoft Security ...

Vulnerability

6/2026

MIC1780640667

Microsoft 365

Vulnerability

6/2026

LINMIC178053984...

GitHub Security Lab

Cyber Attack

6/2026

npm, Inc.

GITEXONPM178060...

Microsoft Threat In...

Cyber Attack

6/2026

MICISR178456517...

GitHub

Vulnerability

100

6/2026

GitHub

GIT1780453444

Microsoft Security ...

Vulnerability

100

6/2026

MIC1780287882

Microsoft Security

Vulnerability

6/2026

MIC1781591215

Microsoft Security ...

Vulnerability

100

6/2026

MIC1784910234

Microsoft

Vulnerability

6/2026

MIC1781541072

Microsoft Visual St...

Vulnerability

6/2026

MIC1782398423

Microsoft Security ...

Vulnerability

6/2026

MIC1781540872

Microsoft Security

Cyber Attack

100

5/2026

OKTMICATTNVI178...

GitHub

Cyber Attack

5/2026

npm, Inc.

ELAGITAMAOPENPM...

GitHub

Cyber Attack

5/2026

npm, Inc.

NPMGIT177996389...

Microsoft Threat In...

Cyber Attack

5/2026

MIC1784291489

Microsoft Threat In...

Cyber Attack

100

5/2026

MIC1779704661

Microsoft Security

Vulnerability

100

5/2026

MIC1786969594

GitHub

Cyber Attack

100

5/2026

ANTV INC

ANTGIT177939527...

Microsoft Security

Cyber Attack

5/2026

MIC1779258738

Microsoft Security

Vulnerability

5/2026

MIC1779272687

Microsoft Security ...

Vulnerability

5/2026

Google

OPEMICBRAGOOVIV...

GitHub

Cyber Attack

5/2026

GIT1779179198

GitHub

Cyber Attack

5/2026

NXP Semiconduct...

NPMGITNXPMIC177...

GitHub

Cyber Attack

100

5/2026

GitHub

GIT1779459975

Microsoft Threat In...

Cyber Attack

100

5/2026

MIC1779164698

Microsoft Security

Cyber Attack

5/2026

Microsoft Secur...

PUTWEBANYMIC177...

GitHub

Breach

5/2026

TanStack

GRA1779006227

Microsoft Security ...

Vulnerability

5/2026

MIC1778833438

Microsoft Security ...

Vulnerability

100

5/2026

MIC1778732772

GitHub

Breach

5/2026

GitHub

GIT1779251025

Microsoft Security

Vulnerability

5/2026

MIC1778682772

Loading…

A.I.

GitHub Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for GitHub

Incidents vs Software Development Industry Avg (This Year)

GitHub has 4900.0% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

GitHub has 4996.15% more incidents than the average of all companies with at least one recorded incident.

Incident Types GitHub vs Software Development Industry Avg (This Year)

GitHub reported 53 incidents this year: 30 cyber attacks, 0 ransomware, 16 vulnerabilities, 7 data breaches, compared to industry peers with at least 1 incident.

Incident History - GitHub (X = Date, Y = Severity)

Loading…

SUBSIDIARY

GitHub Subsidiaries

GitHub

Software Development

Website: https://github.com

Company Size: 501-1,000 employees

MicrosoftSoftware Development

Microsoft 365IT Services and IT Consulting

Microsoft AzureTechnology, Information and Internet

Microsoft LearnIT Services and IT Consulting

Microsoft ResearchThink Tanks

Microsoft DeveloperSoftware Development

Metaswitch NetworksTelecommunications

Halo StudiosComputer Games

Visual Studio CodeSoftware Development

Microsoft EventsTechnology, Information and Internet

Microsoft AISoftware Development

Microsoft Security Response CenterComputer and Network Security

Microsoft AdvertisingAdvertising Services

Microsoft for HealthcareSoftware Development

Microsoft in GovernmentSoftware Development

Microsoft VivaSoftware Development

Microsoft News and StoriesTechnology, Information and Internet

Microsoft ReactorTechnology, Information and Internet

Microsoft Learn Student AmbassadorsTechnology, Information and Internet

Microsoft Military AffairsInformation Technology & Services

FlipE-Learning Providers

VidkuIT Services and IT Consulting

Microsoft WindowsSoftware Development

Microsoft for NonprofitsSoftware Development

MSoftware Development

Microsoft's Entrepreneurship for Positive ImpactSoftware Development

Microsoft SecurityComputer and Network Security

Microsoft DesignTechnology, Information and Internet

Microsoft 365 DeveloperTechnology, Information and Internet

Microsoft CloudSoftware Development

Microsoft in BusinessTechnology, Information and Media

Microsoft AccessibilityTechnology, Information and Internet

Studios Quality - Xbox Game StudiosComputer Games

Microsoft SurfaceComputer Hardware

Microsoft Dynamics 365Software Development

Go China ConnectionIT Services and IT Consulting

Microsoft CopilotSoftware Development

Halo StudiosComputer Games

XboxEntertainment Providers

M12, Microsoft's Venture FundVenture Capital and Private Equity Principals

Microsoft 365 Insider ProgramSoftware Development

Microsoft FabricData Infrastructure and Analytics

Microsoft SQL ServerSoftware Development

Microsoft On the IssuesTechnology, Information and Internet

Microsoft Power PlatformSoftware Development

Microsoft Visual StudioSoftware Development

Microsoft Threat IntelligenceComputer and Network Security

Microsoft AI Cloud Partner ProgramInformation Technology & Services

GitHub EducationSoftware Development

GitHub Security LabSoftware Development

GitHub LATAMSoftware Development

GitHub BrasilSoftware Development

Loading…

GitHub Similar Companies

PayPal

paypal.com

We're championing possibilities for all by making money fast, easy, and more enjoyable. Our hope is to unlock opportunities for people in their everyday lives and empower the millions of people and businesses around the world who trust, rely, and use PayPal every day. For support, visit the PayPal Help Center. https://payp.al/help For employment opportunities, check out our job openings in the 'Jobs' tab. We're an equal opportunity employer that welcomes diversity, and offer generous benefits to help you thrive at work and in your free time. NMLS#910457: https://nmlsconsumeraccess.org/

Workday

workday.com

By unifying HR and Finance on an open, trusted platform powered by AI, Workday delivers high-impact outcomes our customers can count on. At the heart of our platform is Sana from Workday—the superintelligence that puts AI agents to work for you and your people. Welcome to a new work day.

Expedia Group

expediagroup.com

At Expedia Group (NASDAQ: EXPE), we believe travel is a force for good – it opens minds, builds connections, and bridges divides. We create transformative tech that enables unforgettable experiences for all travelers, everywhere. Our trusted family of brands are known and loved by millions, and we power more trips than anyone else. To learn more about our vision of a more open world through travel, visit www.expediagroup.com. We’re committed to providing an inclusive and accessible recruiting experience for candidates with disabilities, or other physical or mental health conditions. If you require an accommodation or adjustment for any part of the application or recruitment process, please let us know by completing our Accommodation Request Form or contacting your recruiter. Employment opportunities and job offers at Expedia Group will always come from Expedia Group’s Talent Acquisition and hiring teams. Never provide sensitive, personal information to someone unless you’re confident about who they are. We do not send job offers via email, or any other messaging tools, to individuals we have not had prior contact with. Our email domain is @expediagroup.com. Our official careers website, where you can to find and apply for job openings, is careers.expediagroup.com/jobs. If you require customer service support to cancel, change or ask about a refund for your trip, you can connect with our 24/7 Virtual Agent through the following links: Expedia: https://www.expedia.com/helpcenter Hotels.com: https://service.hotels.com/en-us/ Vrbo: https://help.vrbo.com/ For additional assistance, direct message us on Twitter @ExpediaHelp with your itinerary number and email address: https://twitter.com/ExpediaHelp

Bolt

bolt.eu

At Bolt, we're building a future where people don’t need to own personal cars to move around safely and conveniently. A future where people have the freedom to use transport on demand, choosing whatever vehicle's best for each occasion — be it a car, scooter, or e-bike. We're helping over 200 million customers move around in more than 600 cities globally while also supporting more than 4.5 million drivers and couriers to earn a living. The best bit? We're only just getting started. Read more at bolt.eu

KPIT

kpit.com

About KPIT KPIT is reimagining the future of mobility, forging ahead with group companies and partners to shape a world that is cleaner, smarter, and safer. With over 25 years of specialized expertise in Mobility, KPIT is accelerating the transformation towards Software and AI-Defined Vehicles through its advanced solutions, platforms, and products—propelled by mobility-infused AI frameworks, software craftsmanship, and systems integration mastery. Vision in Motion Fueled by 2000+ vehicle production programs and powering 20+ million vehicles on the road with KPIT software, our experience in unmatched. At the same time, we push boundaries, developing solutions that enable Mobility OEMs to innovate at speed and scale. For more details, visit www.kpit.com

Facebook

meta.com

The Facebook company is now Meta. Meta builds technologies that help people connect, find communities, and grow businesses. When Facebook launched in 2004, it changed the way people connect. Apps like Messenger, Instagram and WhatsApp further empowered billions around the world. Now, Meta is moving beyond 2D screens toward immersive experiences like augmented and virtual reality to help build the next evolution in social technology. We want to give people the power to build community and bring the world closer together. To do that, we ask that you help create a safe and respectful online space. These community values encourage constructive conversations on this page: • Start with an open mind. Whether you agree or disagree, engage with empathy. • Comments violating our Community Standards will be removed or hidden. So please treat everybody with respect. • Keep it constructive. Use your interactions here to learn about and grow your understanding of others. • Our moderators are here to uphold these guidelines for the benefit of everyone, every day. • If you are seeking support for issues related to your Facebook account, please reference our Help Center (https://www.facebook.com/help) or Help Community (https://www.facebook.com/help/community). For a full listing of our jobs, visit http://www.facebookcareers.com

Amazon Fulfillment Technologies & Robotics

amazon.jobs

On the Fulfillment Technologies & Robotics Team, we build dynamic partnerships between people and intelligent machines. This intricate collaboration helps Amazon fulfill orders with unmatched accuracy. Since we began working with robotics, we've added over a million new jobs worldwide. Working in symphony with our robotic technology, employees have the opportunity to extend their technical capabilities by working alongside some of the industry’s most advanced technologies. This includes our fleet of autonomous mobile robots, sophisticated control software, and technologies like language perception, machine learning, object recognition, and semantic understanding of commands. These technologies help employees deliver an ever-improving customer and employee experience, as well as improve the safety of our facilities. Explore opportunities across the entire Fulfillment Technologies & Robotics team to find the right fit for you.

VMware

broadcom.com

Broadcom's VMware software manages cloud complexity so customers can modernize infrastructure, accelerate app development, and protect workloads, wherever these reside. Our flagship cloud solutions provide the security and performance of private cloud combined with the scale and agility of public cloud. Modern app, edge infrastructure, and private AI products extend these capabilities, while security and disaster recovery help ensure that customers’ operations continue uninterrupted. From the data center to the cloud and apps to the edge, we help enterprises around the globe become more innovative, connected, resilient and secure.

Rakuten

cb rakuten.com

Rakuten Group, Inc. (TSE: 4755) is a global technology leader in services that empower individuals, communities, businesses and society. Founded in Tokyo in 1997 as an online marketplace, Rakuten has expanded to offer services in e-commerce, fintech, digital content and communications to 2 billion members around the world. The Rakuten Group has more than 30,000 employees, and operations in 30 countries and regions. For more information visit https://global.rakuten.com/corp/.

Loading…

NEWS

GitHub CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 26, 2026 10:00 AM

Cybersecurity News: Torg Grabber targets crypto, TeamPCP backdoors LiteLLM, GitHub AI bug detection

Torg Grabber targets crypto wallets, TeamPCP backdoors LiteLLM, GitHub adds AI-powered security bug detection, LeakBase admin arrested.

Read Article

March 26, 2026 07:00 AM

Fake VS Code Security Alerts on GitHub Used to Push Malware in Widespread Phishing Campaign

Fake VS Code alerts on GitHub trick devs into downloading malware via phishing posts posing as critical security updates.

Read Article

March 25, 2026 06:15 PM

DarkSword iOS Exploit Leaks on GitHub, Threatens Millions

A government-grade iOS exploit kit called DarkSword has been leaked on GitHub, putting hundreds of millions of iPhones running iOS 18 or...

Read Article

March 25, 2026 02:19 PM

AI-Assisted ‘OpenClaw Trap’ Campaign Uses Trojanized GitHub Repos to Target Developers and Gamers

Fake GitHub repos spread LuaJIT trojan targeting devs, gamers and crypto users, using polished projects to evade detection.

Read Article

March 25, 2026 08:34 AM

AI-Driven 'OpenClaw Trap' Campaign Targets Developers and Gamers via Trojanized GitHub Repos

A large-scale malware operation abusing GitHub to deliver a custom LuaJIT-based trojan to developers, gamers, and everyday users through...

Read Article

March 24, 2026 09:35 PM

DarkSword’s GitHub leak threatens to turn elite iPhone hacking into a tool for the masses

Cybersecurity researchers say the GitHub leak threatens to "democratize" iPhone exploits that were once reserved for nation-states,...

Read Article

March 24, 2026 04:37 PM

TeamPCP Hacks Checkmarx GitHub Actions Using Stolen CI Credentials

TeamPCP compromised 2 GitHub Actions post-March 19, 2026 breach, enabling credential theft and supply chain attacks.

Read Article

March 24, 2026 04:36 PM

iPhone exploit DarkSword has been released in the wild: How to protect yourself

DarkSword, the web-based hacker tool that can be used to steal data from millions of iPhones, has just been published on GitHub for public...

Read Article

March 24, 2026 11:45 AM

iOS hacking tool ‘DarkSword’ leaked on GitHub

DarkSword has been used by hackers to target users in Saudi Arabia, Turkey, Malaysia and Ukraine, finds Google's threat intelligence team.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-81934

SUMMARY

Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server. Fixed in Redis 8.2.9, 8.4.6, 8.6.6, 8.8.2, and 8.10.1.

Published

Date2026-08-27

Updated

Date2026-08-27

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-81931

SUMMARY

Unrestricted Upload of File with Dangerous Type in the product photo upload in Roskus Prospero Flow CRM before 5.16.0 allows an authenticated user holding the create product permission (routine Seller role) to execute arbitrary JavaScript in the application origin. The photo validation rule classifies the file only by its content (magic bytes) and rejects only a fixed list of PHP extensions, while ProductSaveController::save() names the stored file using the client-supplied extension and copies it into the public web root. A file that begins with an image header and carries an HTML extension passes validation, is stored under public/asset/upload/product/, and is served with a text/html content type, turning the upload into first-party stored script execution.

Published

Date2026-08-27

Updated

Date2026-08-27

RISK INFORMATION (Score: )

cvss4

Base Score: 4.8

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-81893

SUMMARY

A flaw was found in gdk-pixbuf. When loading a specially crafted JPEG image containing chunked ICC profile markers, an error during ICC profile parsing can leave stale size metadata after the profile buffer is freed. A subsequent allocation in the same decode can cause an out-of-bounds write, potentially crashing the application. To exploit this flaw, an application using gdk-pixbuf must process the malicious JPEG image. Affected version >= 2.26.4

Published

Date2026-08-27

Updated

Date2026-08-27

RISK INFORMATION (Score: 4.7)

cvss3

Base Score: 4.7

Complexity: HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

REFERENCES

CVE-2026-81838

SUMMARY

A relative path traversal issue in the zip extraction functionality in AWS diagram-as-code (awsdac) in versions 0.10 through 0.23 can allow a third party to write arbitrary files to the local filesystem via crafted zip entry names containing path traversal sequences. This could allow the third party to perform inappropriate actions in the diagram bundle. To remediate this issue, users should upgrade to the version 0.24 or later.

Published

Date2026-08-27

Updated

Date2026-08-27

RISK INFORMATION (Score: 7.1)

cvss3

Base Score: 7.1

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

cvss4

Base Score: 6.8

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.2

Exploitability

1.8

REFERENCES

CVE-2026-81834

SUMMARY

A weakness has been identified in RooCodeInc Roo-Code up to 3.51.1. Affected by this issue is the function ExecaTerminalProcess of the component README File Handler. Executing a manipulation can lead to code injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. Multiple isses were reported to the vendor beforehand. They explain, that "they all apply to Roo Code, a project we no longer support - the repository was archived a while ago, and we don't encourage anyone to use it." This vulnerability only affects products that are no longer supported by the maintainer.

Published

Date2026-08-27

Updated

Date2026-08-27

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…