Hexion Malveux
Last Update: 2026-02-20
Between 700 and 749
Solid minerals, mining, and energy
NAICS: 211
NAICS Definition: Oil and Gas Extraction
Employees: 4
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0
Comparison Overview
Hexion Malveux
VS
PETRONAS
PETRONAS
Last Update: 2026-04-03
Between 800 and 849
Petroliam Nasional Berhad (PETRONAS) is a leading global energy company committed to powering society’s progress in a responsible and sustainable manner. With close to 50,000 employees and a global reach spanning over 100 countries, we are ranked among the world’s largest corporations by revenue in the Fortune Media IP Ltd’s 2022 Fortune Global 500® list. As Malaysia’s national oil and gas company, we safeguard and manage the nation’s hydrocarbon resources to ensure national energy security and maximise value. We explore, develop and produce hydrocarbons as well as cleaner energy solutions. We have three core businesses, namely Upstream, Gas and Downstream, supported by Project Delivery and Technology division, which acts as an enabler. We recently launched Gentari, our new entity providing customers with cleaner energy and lower carbon solutions in three core offerings – renewables, hydrogen and green mobility alongside our core portfolio. We remain committed to produce oil and gas in a differentiated manner, with focus on reducing carbon emissions and at competitive cost. Our hydrocarbon portfolio today is two-thirds gas, which puts us in an advantageous position as gas and Liquefied Natural Gas (LNG) will continue to play a vital role even as the energy system evolves. As one of the leading LNG players in the world, PETRONAS will continue to serve the global LNG demand. As a responsible and conscientious global energy player, sustainability is at the heart of our business and how we operate. Our commitment to responsible business growth and positive contributions to society and the environment remains unwavering. Fuelled by our passion to be a partner for our customers in the journey towards a lower carbon energy future, every step we take brings us closer towards achieving our aspiration of Net Zero Carbon Emissions by 2050 (NZCE 2050).
NAICS: 211
NAICS Definition: Oil and Gas Extraction
Employees: 39,979
Subsidiaries: 6
12-month incidents
0
Known data breaches
0
Attack type number
0
Compliance Badges Comparison
Security & Compliance Standards Overview
Hexion Malveux
ISO 27001
Not verified
SOC2 Type 1
Not verified
SOC2 Type 2
Not verified
GDPR
Not verified
PCI DSS
Not verified
HIPAA
Not verified
PETRONAS
ISO 27001
Not verified
SOC2 Type 1
Not verified
SOC2 Type 2
Not verified
GDPR
Not verified
PCI DSS
Not verified
HIPAA
Not verified
Compliance Summary
Hexion Malveux
100%
Compliance Rate
0/4 Standards Verified
PETRONAS
0%
Compliance Rate
0/4 Standards Verified
Benchmark & Cyber Underwriting Signals
Incidents vs Oil and Gas Industry Average (This Year)
No incidents recorded for Hexion Malveux in 2026.
Incidents vs Oil and Gas Industry Average (This Year)
No incidents recorded for PETRONAS in 2026.
Incident History — Hexion Malveux (X = Date, Y = Severity)
Hexion Malveux cyber incidents detection timeline including parent company and subsidiaries
Incident History — PETRONAS (X = Date, Y = Severity)
PETRONAS cyber incidents detection timeline including parent company and subsidiaries
Notable Incidents
Last 3 Security & Risk Events by Company
Hexion Malveux
Incidents
No Incident
PETRONAS
Incidents
No Incident
FAQ
PETRONAS company demonstrates a stronger AI Cybersecurity Score compared to Hexion Malveux company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.
Historically, PETRONAS company has disclosed a higher number of cyber incidents compared to Hexion Malveux company.
In the current year, PETRONAS company and Hexion Malveux company have not reported any cyber incidents.
Neither PETRONAS company nor Hexion Malveux company has reported experiencing a ransomware attack publicly.
Neither PETRONAS company nor Hexion Malveux company has reported experiencing a data breach publicly.
Neither PETRONAS company nor Hexion Malveux company has reported experiencing targeted cyberattacks publicly.
Neither Hexion Malveux company nor PETRONAS company has reported experiencing or disclosing vulnerabilities publicly.
Neither Hexion Malveux nor PETRONAS holds any compliance certifications.
Neither company holds any compliance certifications.
PETRONAS company has more subsidiaries worldwide compared to Hexion Malveux company.
PETRONAS company employs more people globally than Hexion Malveux company, reflecting its scale as a Oil and Gas.
Neither Hexion Malveux nor PETRONAS holds SOC 2 Type 1 certification.
Neither Hexion Malveux nor PETRONAS holds SOC 2 Type 2 certification.
Neither Hexion Malveux nor PETRONAS holds ISO 27001 certification.
Neither Hexion Malveux nor PETRONAS holds PCI DSS certification.
Neither Hexion Malveux nor PETRONAS holds HIPAA certification.
Neither Hexion Malveux nor PETRONAS holds GDPR certification.
Latest Global CVEs (Not Company-Specific)
Description
nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.3.0, two peer-facing consensus request handlers assume that the history index is always available and call blockchain.history_store.history_index().unwrap() directly. That assumption is false by construction. HistoryStoreProxy::history_index() explicitly returns None for the valid HistoryStoreProxy::WithoutIndex state. when a full node is syncing or otherwise running without the history index, a remote peer can send RequestTransactionsProof or RequestTransactionReceiptsByAddress and trigger an Option::unwrap() panic on the request path. This issue has been patched in version 1.3.0.
Risk Information
cvss3
Base: 5.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Description
PraisonAI is a multi-agent teams system. Prior to version 1.5.95, FileTools.download_file() in praisonaiagents validates the destination path but performs no validation on the url parameter, passing it directly to httpx.stream() with follow_redirects=True. An attacker who controls the URL can reach any host accessible from the server including cloud metadata services and internal network services. This issue has been patched in version 1.5.95.
Risk Information
cvss3
Base: 8.6
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Description
PraisonAI is a multi-agent teams system. Prior to version 4.5.97, OAuthManager.validate_token() returns True for any token not found in its internal store, which is empty by default. Any HTTP request to the MCP server with an arbitrary Bearer token is treated as authenticated, granting full access to all registered tools and agent capabilities. This issue has been patched in version 4.5.97.
Risk Information
cvss3
Base: 9.1
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Description
PraisonAI is a multi-agent teams system. Prior to version 4.5.97, the PraisonAI Gateway server accepts WebSocket connections at /ws and serves agent topology at /info with no authentication. Any network client can connect, enumerate registered agents, and send arbitrary messages to agents and their tool sets. This issue has been patched in version 4.5.97.
Risk Information
cvss3
Base: 9.1
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Description
PraisonAI is a multi-agent teams system. Prior to version 4.5.90, MCPToolIndex.search_tools() compiles a caller-supplied string directly as a Python regular expression with no validation, sanitization, or timeout. A crafted regex causes catastrophic backtracking in the re engine, blocking the Python thread for hundreds of seconds and causing a complete service outage. This issue has been patched in version 4.5.90.
Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
