HEC Lausanne - The Faculty of Business and Economics of the University of Lausanne Company CyberSecurity Posture
unil.ch
Since 1911, HEC Lausanne has been training future executives and business leaders to become active players in the world of business and economics. HEC Lausanne also prepares students who wish to pursue an academic career. Recognized as one of the top management and economics schools, HEC Lausanne distinguishes itself through its top-class education and excellent research. At the heart of its mission, this synergy between teaching and research has ensured the School’s success for more than 100 years. HEC Lausanne uses research to train competent and responsible executives and entrepreneurs, and also to advise organizations, businesses and policy makers. The place the School and its programs occupy in international rankings and scientific journal publications attests to the quality of its training and research, as do the accreditations it has been awarded by the prestigious EQUIS and AMBA organizations.
Company Details
hec-lausanne---the-faculty-of-business-and-economics-of-the-university-of-lausanne
414
35,040
None
unil.ch
0
HEC_2839112
In-progress
HLFBEUL Risk Score (AI oriented)Between 750 and 799
HLFBEUL Global Score (TPRM)XXXX
No incidents recorded for HEC Lausanne - The Faculty of Business and Economics of the University of Lausanne in 2025.
No incidents recorded for HEC Lausanne - The Faculty of Business and Economics of the University of Lausanne in 2025.
No incidents recorded for HEC Lausanne - The Faculty of Business and Economics of the University of Lausanne in 2025.
HLFBEUL cyber incidents detection timeline including parent company and subsidiaries
Since 1911, HEC Lausanne has been training future executives and business leaders to become active players in the world of business and economics. HEC Lausanne also prepares students who wish to pursue an academic career. Recognized as one of the top management and economics schools, HEC Lausanne distinguishes itself through its top-class education and excellent research. At the heart of its mission, this synergy between teaching and research has ensured the School’s success for more than 100 years. HEC Lausanne uses research to train competent and responsible executives and entrepreneurs, and also to advise organizations, businesses and policy makers. The place the School and its programs occupy in international rankings and scientific journal publications attests to the quality of its training and research, as do the accreditations it has been awarded by the prestigious EQUIS and AMBA organizations.
Mission of TU Graz • As a university located in the heart of Europe, TU Graz is committed to academic freedom and European core values as well as to a culture of acting in an ethical and responsible manner. • The university distinguishes itself through its internationally visible, forward-looking
Are you ready to be part of something Greator? 🧑🏾💻👩🏻💻 → https://greator.jobs.personio.de/ Bei Greator helfen wir Menschen dabei, ein glückliches, erfolgreiches und erfülltes Leben, zu führen, indem wir ihre persönliche Entwicklung unterstützen – und das ein Leben lang. 🤩 🚩 Unsere Vision ist es,
Dies ist der stillgelegte EUFH Management Account der nun durch den gemeinsamen CBS International Business Account ersetzt wurde. CBS: https://www.linkedin.com/school/cbs-international-business-school/ Hier geht's zum EUFH - Gesundheit, Soziales und Pädagogik LinkedIn Account: https://www.linkedi
Impressum: http://www.uibk.ac.at/impressum/ Die Leopold-Franzens-Universität Innsbruck blickt auf eine über 350-jährige Geschichte zurück und bietet heute ein sehr breitgefächertes Angebot an Studien sowie erfolgreiche Forschung in vielen zukunftsweisenden Fachbereichen. Die Universität Innsbruck
A university in the heart of Berlin - international and globally connected Berlin International University of Applied Sciences is a state-recognized and non-profit German university of applied sciences located in the center of Berlin. We are determined to offer a challenging, innovative and practic
Die Hochschule für Life Sciences FHNW mit Sitz in Muttenz gehört zur Fachhochschule Nordwestschweiz (FHNW). Sie ist Teil des grössten Life Sciences-Standorts Europas. In diesem Zentrum von Pharma- und Medizintechnik, der chemischen Industrie sowie Umwelt- und Biotechnologie werden kompetente Fachkrä
.png)
Solange Ghernaouti is a professor at HEC Lausanne (UNIL) and an international expert in cybersecurity. She is coming to the end of her...
1. It's increasingly common to see businesses delegate decisions to AI. However, this approach runs the risk of humans losing key skills or...
Digital technologies offer strong potential for Switzerland, but it is crucial to understand which opportunities and risks, as well as which...
London Business School again places second; INSEAD's slide continues, as the Fontainebleau school slips to 18th.
There has been an increased focus of public interest on generative artificial intelligence (AI) since the start of this year.
Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of HEC Lausanne - The Faculty of Business and Economics of the University of Lausanne is https://www.unil.ch/hec.
According to Rankiteo, HEC Lausanne - The Faculty of Business and Economics of the University of Lausanne’s AI-generated cybersecurity score is 758, reflecting their Fair security posture.
According to Rankiteo, HEC Lausanne - The Faculty of Business and Economics of the University of Lausanne currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, HEC Lausanne - The Faculty of Business and Economics of the University of Lausanne is not certified under SOC 2 Type 1.
According to Rankiteo, HEC Lausanne - The Faculty of Business and Economics of the University of Lausanne does not hold a SOC 2 Type 2 certification.
According to Rankiteo, HEC Lausanne - The Faculty of Business and Economics of the University of Lausanne is not listed as GDPR compliant.
According to Rankiteo, HEC Lausanne - The Faculty of Business and Economics of the University of Lausanne does not currently maintain PCI DSS compliance.
According to Rankiteo, HEC Lausanne - The Faculty of Business and Economics of the University of Lausanne is not compliant with HIPAA regulations.
According to Rankiteo,HEC Lausanne - The Faculty of Business and Economics of the University of Lausanne is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
HEC Lausanne - The Faculty of Business and Economics of the University of Lausanne operates primarily in the Hochschulen und Universitäten industry.
HEC Lausanne - The Faculty of Business and Economics of the University of Lausanne employs approximately 414 people worldwide.
HEC Lausanne - The Faculty of Business and Economics of the University of Lausanne presently has no subsidiaries across any sectors.
HEC Lausanne - The Faculty of Business and Economics of the University of Lausanne’s official LinkedIn profile has approximately 35,040 followers.
HEC Lausanne - The Faculty of Business and Economics of the University of Lausanne is classified under the NAICS code None, which corresponds to Others.
No, HEC Lausanne - The Faculty of Business and Economics of the University of Lausanne does not have a profile on Crunchbase.
Yes, HEC Lausanne - The Faculty of Business and Economics of the University of Lausanne maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/hec-lausanne---the-faculty-of-business-and-economics-of-the-university-of-lausanne.
As of December 18, 2025, Rankiteo reports that HEC Lausanne - The Faculty of Business and Economics of the University of Lausanne has not experienced any cybersecurity incidents.
HEC Lausanne - The Faculty of Business and Economics of the University of Lausanne has an estimated 101 peer or competitor companies worldwide.
Total Incidents: According to Rankiteo, HEC Lausanne - The Faculty of Business and Economics of the University of Lausanne has faced 0 incidents in the past.
Incident Types: The types of cybersecurity incidents that have occurred include .
.png)
Zerobyte is a backup automation tool Zerobyte versions prior to 0.18.5 and 0.19.0 contain an authentication bypass vulnerability where authentication middleware is not properly applied to API endpoints. This results in certain API endpoints being accessible without valid session credentials. This is dangerous for those who have exposed Zerobyte to be used outside of their internal network. A fix has been applied in both version 0.19.0 and 0.18.5. If immediate upgrade is not possible, restrict network access to the Zerobyte instance to trusted networks only using firewall rules or network segmentation. This is only a temporary mitigation; upgrading is strongly recommended.
Open Source Point of Sale (opensourcepos) is a web based point of sale application written in PHP using CodeIgniter framework. Starting in version 3.4.0 and prior to version 3.4.2, a Cross-Site Request Forgery (CSRF) vulnerability exists in the application's filter configuration. The CSRF protection mechanism was **explicitly disabled**, allowing the application to process state-changing requests (POST) without verifying a valid CSRF token. An unauthenticated remote attacker can exploit this by hosting a malicious web page. If a logged-in administrator visits this page, their browser is forced to send unauthorized requests to the application. A successful exploit allows the attacker to silently create a new Administrator account with full privileges, leading to a complete takeover of the system and loss of confidentiality, integrity, and availability. The vulnerability has been patched in version 3.4.2. The fix re-enables the CSRF filter in `app/Config/Filters.php` and resolves associated AJAX race conditions by adjusting token regeneration settings. As a workaround, administrators can manually re-enable the CSRF filter in `app/Config/Filters.php` by uncommenting the protection line. However, this is not recommended without applying the full patch, as it may cause functionality breakage in the Sales module due to token synchronization issues.
Zed, a code editor, has an aribtrary code execution vulnerability in versions prior to 0.218.2-pre. The Zed IDE loads Model Context Protocol (MCP) configurations from the `settings.json` file located within a project’s `.zed` subdirectory. A malicious MCP configuration can contain arbitrary shell commands that run on the host system with the privileges of the user running the IDE. This can be triggered automatically without any user interaction besides opening the project in the IDE. Version 0.218.2-pre fixes the issue by implementing worktree trust mechanism. As a workaround, users should carefully review the contents of project settings files (`./zed/settings.json`) before opening new projects in Zed.
Zed, a code editor, has an aribtrary code execution vulnerability in versions prior to 0.218.2-pre. The Zed IDE loads Language Server Protocol (LSP) configurations from the `settings.json` file located within a project’s `.zed` subdirectory. A malicious LSP configuration can contain arbitrary shell commands that run on the host system with the privileges of the user running the IDE. This can be triggered when a user opens project file for which there is an LSP entry. A concerted effort by an attacker to seed a project settings file (`./zed/settings.json`) with malicious language server configurations could result in arbitrary code execution with the user's privileges if the user opens the project in Zed without reviewing the contents. Version 0.218.2-pre fixes the issue by implementing worktree trust mechanism. As a workaround, users should carefully review the contents of project settings files (`./zed/settings.json`) before opening new projects in Zed.
Storybook is a frontend workshop for building user interface components and pages in isolation. A vulnerability present starting in versions 7.0.0 and prior to versions 7.6.21, 8.6.15, 9.1.17, and 10.1.10 relates to Storybook’s handling of environment variables defined in a `.env` file, which could, in specific circumstances, lead to those variables being unexpectedly bundled into the artifacts created by the `storybook build` command. When a built Storybook is published to the web, the bundle’s source is viewable, thus potentially exposing those variables to anyone with access. For a project to potentially be vulnerable to this issue, it must build the Storybook (i.e. run `storybook build` directly or indirectly) in a directory that contains a `.env` file (including variants like `.env.local`) and publish the built Storybook to the web. Storybooks built without a `.env` file at build time are not affected, including common CI-based builds where secrets are provided via platform environment variables rather than `.env` files. Storybook runtime environments (i.e. `storybook dev`) are not affected. Deployed applications that share a repo with your Storybook are not affected. Users should upgrade their Storybook—on both their local machines and CI environment—to version .6.21, 8.6.15, 9.1.17, or 10.1.10 as soon as possible. Maintainers additionally recommend that users audit for any sensitive secrets provided via `.env` files and rotate those keys. Some projects may have been relying on the undocumented behavior at the heart of this issue and will need to change how they reference environment variables after this update. If a project can no longer read necessary environmental variable values, either prefix the variables with `STORYBOOK_` or use the `env` property in Storybook’s configuration to manually specify values. In either case, do not include sensitive secrets as they will be included in the built bundle.
Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.
Rapid