What is the official website of GitHub Brasil ?

The official website of GitHub Brasil is http://www.github.com.

What is GitHub Brasil's cybersecurity risk score?

GitHub Brasil has an AI-generated cybersecurity risk score of 751 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has GitHub Brasil experienced?

According to Rankiteo, GitHub Brasil currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has GitHub Brasil been affected by any supply chain cyber incidents ?

According to Rankiteo, GitHub Brasil has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Fortinet (Incident ID: INT1791534337) VCG Managed Services (Incident ID: VCGBLAMIC1791267929) Microsoft Security (Incident ID: NIKGOOMIC1791189711) Anthropic (Incident ID: ANTMIC1790691866) OpenAI (Incident ID: OPEGIT1790641614) Oracle (Incident ID: FLOREL1788971139) Google LLC (Incident ID: MICINTFEDGOO1788783925) GitHub (Incident ID: GIT1791448157) Microsoft Security Response Center (Incident ID: GOOMICTREMET1788168069) GitHub (Incident ID: AIK1787999043) MLflow (Incident ID: MLF1787063064) Resecurity (Incident ID: CISRESMICAMASERSALGIT1786868753) Microsoft (Incident ID: HCLTAT1786448292) Microsoft Power Platform (Incident ID: MICATL1786962683) Microsoft Threat Intelligence (Incident ID: MICSWIREG1790951735) Microsoft Dynamics 365 (Incident ID: ALL1785522998) Microsoft Security Response Center (Incident ID: POL1785356870) GitHub (Incident ID: NPMMONPERGIT1790850671) Microsoft (Incident ID: KIE1787783299) OpenAI (Incident ID: CHE1784787889) AsyncAPI Initiative (Incident ID: CISSONMICORAASYKNX1784341544) AsyncAPI Initiative (Incident ID: ASYMIC1785327908) Packagist Conductors (Incident ID: WHMPACGITCPA1784816835) Microsoft Security (Incident ID: APOLEVNEU1787336860)

Does GitHub Brasil have SOC 2 Type 1 certification ?

According to Rankiteo, GitHub Brasil is not certified under SOC 2 Type 1.

Does GitHub Brasil have SOC 2 Type 2 certification ?

According to Rankiteo, GitHub Brasil does not hold a SOC 2 Type 2 certification.

Does GitHub Brasil comply with GDPR ?

According to Rankiteo, GitHub Brasil is not listed as GDPR compliant.

Does GitHub Brasil have PCI DSS certification ?

According to Rankiteo, GitHub Brasil does not currently maintain PCI DSS compliance.

Does GitHub Brasil comply with HIPAA ?

According to Rankiteo, GitHub Brasil is not compliant with HIPAA regulations.

Does GitHub Brasil have ISO 27001 certification ?

According to Rankiteo,GitHub Brasil is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does GitHub Brasil operate in ?

GitHub Brasil operates primarily in the Software Development industry.

How many employees does GitHub Brasil have ?

GitHub Brasil employs approximately 12 people worldwide.

Does GitHub Brasil own any subsidiaries ?

GitHub Brasil presently has no subsidiaries across any sectors.

How many LinkedIn followers does GitHub Brasil have ?

GitHub Brasil's official LinkedIn profile has approximately 206,451 followers.

What is the NAICS classification code for GitHub Brasil ?

GitHub Brasil is classified under the NAICS code 5112, which corresponds to Software Publishers.

Does GitHub Brasil have a Crunchbase profile ?

No, GitHub Brasil does not have a profile on Crunchbase.

Does GitHub Brasil have a LinkedIn profile ?

Yes, GitHub Brasil maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/github-brazil.

How many cybersecurity incidents has GitHub Brasil experienced ?

As of October 10, 2026, Rankiteo reports that GitHub Brasil has experienced 100 cybersecurity incidents.

How many peer or competitor companies does GitHub Brasil have ?

GitHub Brasil has an estimated 31,086 peer or competitor companies worldwide.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

GitHub Brasil

Boost Score +25 with badge (5 left)

751

/1000

Fair

776

/1000

Fair

GitHub Brasil Vendor Cyber Rating & Cyber Score

github.com

Add Your Compliance Badge

O GitHub é a maior e mais avançada plataforma de desenvolvimento de softwares do mundo. Mais de 94 milhões de pessoas usam nossa plataforma para criar coisas incríveis junto dos amigos, colegas de trabalho, de faculdade e até com completos desconhecidos de todos os cantos do mundo. Nunca foi tão fácil criar mais rápido, códigos ainda melhores! Precisa de ajuda? É só enviar uma mensagem por aqui: /git.io/c

GitHub Brasil

GitHub Brasil CyberSecurity News & History

Past Incidents

100

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Microsoft Threat In...

Cyber Attack

100

10/2026

Fortinet

INT1791534337

Microsoft Security

Cyber Attack

10/2026

MIC1791448086

Microsoft Security

Cyber Attack

10/2026

VCG Managed Ser...

VCGBLAMIC179126...

Microsoft Security

Vulnerability

10/2026

MICGIT179139752...

Microsoft

Vulnerability

10/2026

MIC1791303903

Microsoft Security

Vulnerability

10/2026

Microsoft Secur...

NIKGOOMIC179118...

Microsoft Security ...

Vulnerability

100

10/2026

MIC1791196658

Microsoft Threat In...

Cyber Attack

100

9/2026

MIC1790757162

Microsoft Threat In...

Vulnerability

100

9/2026

MIC1790952269

Microsoft Security

Vulnerability

9/2026

Anthropic

ANTMIC179069186...

Microsoft Security

Cyber Attack

9/2026

DRAMICCALKASRAZ...

Microsoft Security ...

Vulnerability

9/2026

MIC1790699153

GitHub

Cyber Attack

9/2026

OpenAI

OPEGIT179064161...

GitHub

Breach

9/2026

GITGOOAMA179059...

Microsoft Threat In...

Cyber Attack

9/2026

MIC1790663487

Microsoft Security

Ransomware

100

9/2026

OPEMICPERORAUBU...

Microsoft Security

Vulnerability

9/2026

SNOVERMICATTDLI...

Microsoft Security

Ransomware

100

9/2026

MICWHI179039692...

Microsoft Security

Cyber Attack

100

9/2026

MIC1790065443

Microsoft Security

Vulnerability

100

9/2026

MIC1790001640

Microsoft Security

Vulnerability

9/2026

MIC1789986463

Microsoft Security

Vulnerability

100

9/2026

MIC1789871027

Microsoft AI

Vulnerability

100

9/2026

MIC1789743686

Microsoft Security

Cyber Attack

9/2026

MICOPE178992165...

Microsoft Security ...

Ransomware

100

9/2026

MIC1789461009

Microsoft Security

Ransomware

100

9/2026

BLABLARYUCONMIC...

Microsoft Security

Cyber Attack

9/2026

MIC1789410611

Microsoft Security

Cyber Attack

9/2026

Oracle

FLOREL178897113...

GitHub

Cyber Attack

9/2026

GITFIR178905113...

Microsoft Security

Vulnerability

9/2026

TENFLOFLOMICTRE...

Microsoft Security

Cyber Attack

100

9/2026

FORCHEMIKPALMIC...

Microsoft Security

Vulnerability

9/2026

MIC1788949665

Microsoft Security

Cyber Attack

9/2026

MIC1788776702

Microsoft Security

Cyber Attack

9/2026

Google LLC

MICINTFEDGOO178...

Microsoft

Vulnerability

9/2026

MIC1790396628

Microsoft

Breach

9/2026

PT-MICWAT179069...

GitHub

Cyber Attack

100

8/2026

GitHub

GIT1791448157

Microsoft Security

Cyber Attack

8/2026

WETBJ'MIC178957...

Microsoft Security ...

Cyber Attack

8/2026

Microsoft Secur...

GOOMICTREMET178...

Microsoft Security ...

Vulnerability

8/2026

MIC1788267525

GitHub

Cyber Attack

100

8/2026

GitHub

AIK1787999043

Microsoft Security

Vulnerability

8/2026

MIC1787898427

Microsoft Security ...

Vulnerability

100

8/2026

MIC1787847949

Microsoft

Vulnerability

8/2026

MIC1787826520

GitHub

Breach

8/2026

TELGITSTROPE178...

GitHub

Cyber Attack

100

8/2026

MCDCITSHEVODVER...

Microsoft Security

Breach

8/2026

MICVODSAF178747...

Microsoft Security

Vulnerability

8/2026

MIC1787149631

Microsoft Security ...

Vulnerability

100

8/2026

MIC1787163871

Microsoft

Vulnerability

100

8/2026

MIC1787156632

Microsoft Copilot

Vulnerability

8/2026

GOOMIC178711351...

Microsoft Security ...

Vulnerability

100

8/2026

MIC1787034406

Microsoft

Vulnerability

100

8/2026

MLflow

MLF1787063064

GitHub

Cyber Attack

8/2026

GIT1786969496

Microsoft Security

Breach

8/2026

Resecurity

CISRESMICAMASER...

Microsoft

Vulnerability

100

8/2026

MICSAP178649758...

Microsoft Security ...

Vulnerability

8/2026

MIC1786620445

Microsoft Security

Vulnerability

8/2026

MIC1786525732

Microsoft Security ...

Vulnerability

100

8/2026

MIC1787733576

Microsoft Security

Vulnerability

8/2026

MIC1786631229

Microsoft Threat In...

Cyber Attack

100

8/2026

MIC1786568300

Microsoft

Breach

8/2026

Microsoft

HCLTAT178644829...

Microsoft Power Pla...

Vulnerability

100

8/2026

Microsoft Power...

MICATL178696268...

GitHub

Cyber Attack

8/2026

GIT1785839378

Microsoft Threat In...

Vulnerability

100

8/2026

Microsoft Threa...

MICSWIREG179095...

Microsoft Security

Vulnerability

100

8/2026

MIC1788265560

Microsoft Security ...

Vulnerability

100

7/2026

MIC1785392682

Microsoft Dynamics ...

Ransomware

100

7/2026

Microsoft Dynam...

ALL1785522998

Microsoft Security ...

Breach

7/2026

Microsoft Secur...

POL1785356870

Microsoft Security

Vulnerability

7/2026

MIC1786107729

GitHub

Breach

7/2026

GitHub

NPMMONPERGIT179...

Microsoft Security

Cyber Attack

7/2026

MIC1784881741

Microsoft

Breach

7/2026

Microsoft

KIE1787783299

Microsoft Security

Vulnerability

7/2026

MIC1784744777

Microsoft Security ...

Vulnerability

100

7/2026

OpenAI

CHE1784787889

Microsoft Security

Cyber Attack

7/2026

MIC1784658331

Microsoft Threat In...

Vulnerability

7/2026

MICNOVBRU178442...

Microsoft Security

Vulnerability

7/2026

MIC1784096635

Microsoft Security

Vulnerability

7/2026

AsyncAPI Initia...

CISSONMICORAASY...

Microsoft

Vulnerability

100

7/2026

MIC1784125827

Microsoft Security

Vulnerability

7/2026

MIC1784096831

Microsoft Security ...

Vulnerability

7/2026

MIC1784298242

Microsoft

Vulnerability

7/2026

MIC1784816949

Microsoft Threat In...

Cyber Attack

100

7/2026

AsyncAPI Initia...

ASYMIC178532790...

Microsoft

Vulnerability

7/2026

MIC1784089434

Microsoft Security

Vulnerability

100

7/2026

MIC1784141218

GitHub

Cyber Attack

100

7/2026

Packagist Condu...

WHMPACGITCPA178...

Microsoft Threat In...

Cyber Attack

100

7/2026

MIC1783680524

GitHub

Vulnerability

7/2026

GIT1783441439

Microsoft Security ...

Vulnerability

100

7/2026

MIC1783441514

Microsoft Security

Breach

7/2026

Microsoft Secur...

APOLEVNEU178733...

Microsoft Security ...

Vulnerability

7/2026

MIC1783067043

Microsoft Security

Vulnerability

7/2026

MIC1786379301

Microsoft Security

Ransomware

100

7/2026

MIC1787041566

Microsoft

Vulnerability

6/2026

MIC1782721445

Microsoft Security

Cyber Attack

6/2026

MIC1782483842

Microsoft Security

Vulnerability

6/2026

MIC1782375843

Microsoft Security

Cyber Attack

6/2026

MIC1782404840

Microsoft

Breach

6/2026

ANAMIC178542315...

Microsoft Security ...

Ransomware

100

6/2026

MIC1782204242

Loading…

A.I.

GitHub Brasil Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for GitHub Brasil

Incidents vs Software Development Industry Avg (This Year)

No incidents recorded for GitHub Brasil in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for GitHub Brasil in 2026.

Incident Types GitHub Brasil vs Software Development Industry Avg (This Year)

No incidents recorded for GitHub Brasil in 2026.

Incident History - GitHub Brasil (X = Date, Y = Severity)

Loading…

SUBSIDIARY

GitHub Brasil Subsidiaries

GitHub Brasil

Software Development

Website: http://www.github.com

Company Size: 12

GitHubSoftware Development

MicrosoftSoftware Development

Microsoft CloudSoftware Development

Microsoft LearnIT Services and IT Consulting

Microsoft 365IT Services and IT Consulting

Microsoft SecurityIT Services and IT Consulting

Microsoft AzureTechnology, Information and Internet

Microsoft ResearchThink Tanks

Microsoft DeveloperSoftware Development

Microsoft Visual StudioSoftware Development

Microsoft Dynamics 365Software Development

Microsoft Power PlatformSoftware Development

Microsoft AI Cloud Partner ProgramInformation Technology & Services

Microsoft FabricData Infrastructure and Analytics

Microsoft On the IssuesTechnology, Information and Internet

Microsoft SQL ServerSoftware Development

Microsoft SurfaceComputer Hardware

Microsoft AdvertisingAdvertising Services

Microsoft in GovernmentSoftware Development

343 IndustriesComputer Games

Microsoft for HealthcareSoftware Development

M12, Microsoft's Venture FundVenture Capital and Private Equity Principals

Microsoft VivaSoftware Development

Microsoft ReactorTechnology, Information and Internet

Microsoft Threat IntelligenceComputer and Network Security

FlipE-Learning Providers

VidkuIT Services and IT Consulting

Microsoft Military AffairsInformation Technology & Services

Metaswitch NetworksTelecommunications

Microsoft 365 Insider ProgramSoftware Development

MSoftware Development

Halo StudiosComputer Games

Microsoft Most Valuable ProfessionalsTechnology, Information and Internet

Microsoft AIDesarrollo de software

Microsoft CopilotSoftware Development

Microsoft Security Response CenterComputer and Network Security

Microsoft WindowsSoftware Development

Microsoft for NonprofitsSoftware Development

XboxEntertainment Providers

Microsoft News and StoriesTechnology, Information and Internet

Microsoft 365 DeveloperTechnology, Information and Internet

Studios Quality - Xbox Game StudiosComputer Games

Microsoft's Entrepreneurship for Positive ImpactSoftware Development

Go China ConnectionIT 服务与咨询

Visual Studio CodeSoftware Development

Microsoft EventsTechnology, Information and Internet

Microsoft Most Valued ProfessionalSoftware Development

GitHub LATAMSoftware Development

GitHub EducationSoftware Development

Loading…

GitHub Brasil Similar Companies

Instacart

cb instacart.com

Instacart, the leading grocery technology company in North America, works with grocers and retailers to transform how people shop. The company partners with more than 1,500 national, regional, and local retail banners to facilitate online shopping, delivery and pickup services from more than 85,000 stores across North America on the Instacart Marketplace. Instacart makes it possible for millions of people to get the groceries they need from the retailers they love, and for approximately 600,000 Instacart shoppers to earn by picking, packing and delivering orders on their own flexible schedule. The Instacart Platform offers retailers a suite of enterprise-grade technology products and services to power their e-commerce experiences, fulfill orders, digitize brick-and-mortar stores, provide advertising services, and glean insights. With Instacart Ads, thousands of CPG brands – from category leaders to emerging brands – partner with the company to connect directly with consumers online, right at the point of purchase. With Instacart Health, the company is providing tools to increase nutrition security, make healthy choices easier for consumers, and expand the role that food can play in improving health outcomes. For more information, visit www.instacart.com/company.

VMware

broadcom.com

Broadcom's VMware software manages cloud complexity so customers can modernize infrastructure, accelerate app development, and protect workloads, wherever these reside. Our flagship cloud solutions provide the security and performance of private cloud combined with the scale and agility of public cloud. Modern app, edge infrastructure, and private AI products extend these capabilities, while security and disaster recovery help ensure that customers’ operations continue uninterrupted. From the data center to the cloud and apps to the edge, we help enterprises around the globe become more innovative, connected, resilient and secure.

Groupon

cb greenhouse.io

Groupon is an experiences marketplace that brings people more ways to get the most out of their city or wherever they may be. By enabling real-time mobile commerce across local businesses, live events and travel destinations, Groupon helps people find and discover experiences––big and small, new and familiar––that make for a full, fun and rewarding life. Groupon helps local businesses grow and strengthen customer relationships––resulting in strong, vibrant communities. E-commerce never stands still, our transformation strategy, combined with our strong brand, customer base, and marketplace expertise, ensures we are constantly adapting to the evolving market landscape while delivering value for our customers and merchant partners. Groupon is on a radical journey to transform our business. To meet our aggressive goals we are in the process of building a culture that prioritises fast decisions, open communication, and relentless pursuit of results. In the spirit of transparency, things aren't perfect, there are still processes to change and bureaucracy to break so we need people who want to be on this journey with us. Check out our current opportunities with #TeamGroupon and join us on our exciting mission to become The Ultimate Destination For Local Experiences and Services.

[24]7.ai

cb 247.ai

[24]7.ai™ customer engagement solutions use conversational artificial intelligence to understand customer intent, enabling companies to create personalized, predictive, and effortless customer experiences across all channels; attract and retain customers; boost agent productivity and satisfaction; and drive revenues while lowering costs. The world’s largest and most recognizable brands use [24]7.ai intent-driven technologies to serve several hundred million visitors through billions of conversations annually, most of which are automated. The result is an order of magnitude improvement in digital adoption, customer satisfaction, and revenue growth. For more information, visit: www.247.ai. [24]7.ai is based in Campbell, California. [24]7.ai is a registered trademark of 24/7 Customer, Inc.

Zoho

zoho.com

Zoho offers beautifully smart software to help you grow your business. With over 100 million users worldwide, Zoho's 55+ products aid your sales and marketing, support and collaboration, finance, and recruitment needs—letting you focus only on your business. Zoho respects user privacy and does not have an ad-revenue model in any part of its business, including its free products. Zoho Corporation is privately held and profitable, with its headquarters in Chennai, India, and offices across the globe.

Google

cb goo.gle

A problem isn't truly solved until it's solved for all. Googlers build products that help create opportunities for everyone, whether down the street or across the globe. Bring your insight, imagination and a healthy disregard for the impossible. Bring everything that makes you unique. Together, we can build for everyone. Check out our career opportunities at goo.gle/3DLEokh

Just Eat Takeaway.com

justeattakeaway.com

Just Eat Takeaway.com is a leading global online delivery marketplace, connecting consumers and restaurants through our platform in 16 countries. Like a dinner table, working at JET brings our office employees and couriers together. From coding to customer service to couriers, JET is a fun, fast-paced and supportive place where you can be yourself. No day is the same. Our days are filled with new experiences. We see every challenge that comes our way as a chance to grow, both the business, and ourselves. We’re connected to millions of food-lovers, hundreds of thousands of connected partners and some of the best-known brands of the planet. When you take your seat here, you’ll find that a simple scribble on a napkin can turn into something seen by millions. Together we transform, create, reinvent and empower every food moment. As a leading online food tech company, JET brings together the stability of a global business, with the agility of a start-up. We got here by always staying one step ahead of the competition. So load up your plate with ideas that get you excited, because at JET everything is on the table. https://careers.justeattakeaway.com

DoorDash

careersatdoordash.com

At DoorDash, our mission to empower local economies shapes how our team members move quickly and always learn and reiterate to support merchants, Dashers and the communities we serve. We are a technology and logistics company that started with door-to-door delivery, and we are looking for team members who can help us go from a company that is known for delivering food to a company that people turn to for any and all goods. DoorDash is growing rapidly and changing constantly, which gives our team members the opportunity to share their unique perspectives, solve new challenges, and own their careers. Our leaders seek the truth and welcome big, hairy, audacious questions. We are grounded in our company values, and we make intentional decisions that are both logical and display empathy for our range of users—from Dashers to Merchants to Customers.

PayPal

paypal.com

We're championing possibilities for all by making money fast, easy, and more enjoyable. Our hope is to unlock opportunities for people in their everyday lives and empower the millions of people and businesses around the world who trust, rely, and use PayPal every day. For support, visit the PayPal Help Center. https://payp.al/help For employment opportunities, check out our job openings in the 'Jobs' tab. We're an equal opportunity employer that welcomes diversity, and offer generous benefits to help you thrive at work and in your free time. NMLS#910457: https://nmlsconsumeraccess.org/

Loading…

NEWS

GitHub Brasil CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

September 16, 2025 07:00 AM

Responding to npm package compromise by the Shai-Hulud worm.

How to recognize a Shai-Hulud worm attack on npm packages. Detection and response measures.

Read Article

August 28, 2025 07:00 AM

NX build compromise detection and response

The attackers used a compromised token issued for one of the Nx package maintainers to publish multiple malicious versions of the Nx package...

Read Article

February 04, 2025 08:00 AM

The biggest supply chain attacks in 2024

The first major supply-chain attack in 2024 involved malicious npm packages uploaded to GitHub in early January.

Read Article

February 20, 2022 08:00 AM

The 10 Best Cooking Podcasts For Chefs of Any Level | PS Food

From Recipe Club to The Sporkful, these 10 cooking podcasts offer tips, how-tos, reviews, and more for beginner cooks and seasoned chefs.

Read Article

April 01, 2021 07:00 AM

PHP language source code compromise attempt

Unknown attackers recently attempted to carry out a large-scale supply-chain attack by introducing malicious code to the official PHP GIT repository.

Read Article

March 15, 2006 12:51 PM

VMware by Broadcom - Cloud Computing for the Enterprise

Optimize cloud infrastructure with VMware for app platforms, private cloud, edge, networking, and security.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-22061

SUMMARY

Trident versions v25.02.1 through v26.06.1 are susceptible to a vulnerability that could allow an authenticated attacker with access to debug logs to view LUKS passphrases or SMB Active Directory credentials.

Published

Date2026-10-09

Updated

Date2026-10-09

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://security.netapp.com/advisory/NTAP-20261009-0026

CVE-2026-108269

SUMMARY

Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.5.0, the Rust and Go RA-TLS challenge verifiers accepted quote ReportData that was bound to the certificate public key and client nonce but not to the active TLS session before permitting application traffic. An attacker who obtained an enclave TLS private key could relay a genuine quote onto another connection, causing the clients to accept an attacker-terminated connection as the attested enclave. This issue is fixed in 0.5.0.

Published

Date2026-10-09

Updated

Date2026-10-09

RISK INFORMATION (Score: )

cvss4

Base Score: 9.1

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-108268

SUMMARY

Enclave OS Virtual runs container workloads inside confidential virtual machines with end-to-end attestation. Prior to tdx-v0.2.43 and tdx-gpu-v0.6.27, the TDX/GPU RA-TLS certificate issuer placed the certificate public-key hash and client nonce in quote ReportData but omitted a value bound to the active TLS session. An attacker who obtained an enclave TLS private key could relay a genuine quote onto another connection, causing a relying party to accept an attacker-terminated connection as the attested enclave. This issue is fixed in tdx-v0.2.43 and tdx-gpu-v0.6.27.

Published

Date2026-10-09

Updated

Date2026-10-09

RISK INFORMATION (Score: )

cvss4

Base Score: 9.1

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-108267

SUMMARY

Privasys Go is a maintained fork of the Go programming language that adds RA-TLS support to crypto/tls. Prior to privasys-v0.5.1-go1.26.5, challenge-mode RA-TLS certificates bound quote ReportData to the certificate public key and client nonce but not to the active TLS session. An attacker who obtained an enclave TLS private key could relay a genuine quote onto another connection, causing a relying party to accept a handshake terminated by the attacker as an attested enclave connection. This issue is fixed in privasys-v0.5.1-go1.26.5.

Published

Date2026-10-09

Updated

Date2026-10-09

RISK INFORMATION (Score: )

cvss4

Base Score: 9.1

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-92705

SUMMARY

Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads Automation scripts referenced by `Automation Scripts` metadata in `ASS` subtitle projects without asking whether the user trusts the scripts or their authors. An attacker can distribute a crafted `ASS` file together with a referenced malicious Automation script, and opening the `AS` file executes arbitrary code with the privileges of the Aegisub process. From 3.4.0 to 3.4.2, inconsistent handling of embedded `NUL` characters between extension validation and filesystem operations additionally allows a crafted `ASS/Lua` polyglot to reference and execute itself as a single-file variant. The vulnerability is fixed in Aegisub 3.5.0.

Published

Date2026-10-09

Updated

Date2026-10-09

RISK INFORMATION (Score: 7.8)

cvss3

Base Score: 7.8

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Impact Score

5.9

Exploitability

1.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

GitHub Brasil Vendor Cyber Rating & Cyber Score

GitHub Brasil A.I CyberSecurity Scoring

GitHub Brasil CyberSecurity News & History

GitHub Brasil Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for GitHub Brasil

Incidents vs Software Development Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types GitHub Brasil vs Software Development Industry Avg (This Year)

Incident History - GitHub Brasil (X = Date, Y = Severity)

GitHub Brasil Subsidiaries

GitHub Brasil

GitHub Brasil Similar Companies

Instacart

VMware

Groupon

[24]7.ai

Zoho

Google

Just Eat Takeaway.com

DoorDash

PayPal

GitHub Brasil CyberSecurity News

Responding to npm package compromise by the Shai-Hulud worm.

NX build compromise detection and response

The biggest supply chain attacks in 2024

The 10 Best Cooking Podcasts For Chefs of Any Level | PS Food

PHP language source code compromise attempt

VMware by Broadcom - Cloud Computing for the Enterprise

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

GitHub Brasil CyberSecurity News & History

GitHub Brasil Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for GitHub Brasil

Incidents vs Software Development Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types GitHub Brasil vs Software Development Industry Avg (This Year)

Incident History - GitHub Brasil (X = Date, Y = Severity)

GitHub Brasil Subsidiaries

GitHub Brasil

GitHub Brasil Similar Companies

Instacart

VMware

Groupon

[24]7.ai

Zoho

Google

Just Eat Takeaway.com

DoorDash

PayPal

GitHub Brasil CyberSecurity News

Responding to npm package compromise by the Shai-Hulud worm.

NX build compromise detection and response

The biggest supply chain attacks in 2024

The 10 Best Cooking Podcasts For Chefs of Any Level | PS Food

PHP language source code compromise attempt

VMware by Broadcom - Cloud Computing for the Enterprise

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo