ISO 27001 Certificate
SOC 1 Type I Certificate
SOC 2 Type II Certificate
PCI DSS
HIPAA
RGPD
Internal validation & live display
Multiple badges & continuous verification
Faster underwriting decisions
ISOSOC2 Type 1SOC2 Type 2PCI DSSHIPAAGDPR

Hyatt is guided by its purpose: to care for people so they can be their best. Hyatt’s portfolio includes 1,000+ hotel and all-inclusive properties in over 75 countries across 6 continents. Hyatt’s offerings include brands in the Timeless Collection, including Park Hyatt®, Grand Hyatt®, Hyatt Regency®, Hyatt®, Hyatt Residence Club®, Hyatt Place®, Hyatt House®, Hyatt Studios, and UrCove; the Boundless Collection, including Miraval®, Alila®, Andaz®, Thompson Hotels®, Dream® Hotels, Hyatt Centric®, and Caption by Hyatt®, the Independent Collection, including The Unbound Collection by Hyatt®, Destination by Hyatt®, and JdV by Hyatt®, and the Inclusive Collection, including Impression by Secrets, Hyatt Ziva®, Hyatt Zilara®, Zoëtry® Wellness & Spa Resorts, Secrets® Resorts & Spas, Breathless Resorts & Spas®, Dreams® Resorts & Spas, Hyatt Vivid Hotels & Resorts, Alua Hotels & Resorts®, and Sunscape® Resorts & Spas. Subsidiaries of Hyatt operate the World of Hyatt® loyalty program, ALG Vacations®, Unlimited Vacation Club®, Amstar DMC destination management services, and Trisept Solutions® technology services. Visit www.hyatt.com for more. This account provides information about Hyatt Hotels Corporation, its subsidiaries or affiliates and/or hotels operating under a Hyatt-affiliated brand. Terms like “Hyatt,” “we,” “our,” “us,” and similar terms are used for convenience and should not be understood as precise designations of any particular entity. The account name and certain terms like “employees” are used by this site but may not be accurate. Individuals may identify themselves as working or having worked at Hyatt or a Hyatt hotel, but please note that self-identification should not be treated as confirmation of employment, past or present, by Hyatt or any particular entity or hotel. In some cases, an individual may have been employed by an affiliate of Hyatt Hotels Corporation or by an owner or franchisee of a Hyatt-branded hotel.

Hyatt A.I CyberSecurity Scoring

Hyatt

Company Details

Linkedin ID:

hyatt

Employees number:

85,240

Number of followers:

1,537,391

NAICS:

7211

Industry Type:

Hospitality

Homepage:

hyatt.com

IP Addresses:

0

Company ID:

HYA_2728151

Scan Status:

In-progress

AI scoreHyatt Risk Score (AI oriented)

Between 750 and 799

https://images.rankiteo.com/companyimages/hyatt.jpeg
Hyatt Hospitality
Updated:
  • Powered by our proprietary A.I cyber incident model
  • Insurance preferes TPRM score to calculate premium
globalscoreHyatt Global Score (TPRM)

XXXX

https://images.rankiteo.com/companyimages/hyatt.jpeg
Hyatt Hospitality
  • Instant access to detailed risk factors
  • Benchmark vs. industry & size peers
  • Vulnerabilities
  • Findings

Hyatt Company CyberSecurity News & History

Past Incidents
3
Attack Types
2
EntityTypeSeverityImpactSeenBlog DetailsIncident DetailsView
Hyatt Hotels CorporationBreach5023/2017
Rankiteo Explanation :
Attack limited on finance or reputation

Description: The Washington State Office of the Attorney General reported a data breach involving Hyatt Hotels Corporation on October 12, 2017. The breach occurred between March 18, 2017 and July 2, 2017, potentially affecting 640 Washington residents with unauthorized access to payment card information, including cardholder names, card numbers, expiration dates, and internal verification codes.

Hyatt Hotels CorporationBreach6028/2015
Rankiteo Explanation :
Attack limited on finance or reputation

Description: The Washington Office of the Attorney General reported a data breach involving Hyatt Hotels Corporation on January 14, 2016. The breach, which involved unauthorized access to payment card data, occurred between August 13, 2015, and December 8, 2015, affecting 15 individuals. The breach was due to malware specifically designed to target payment card data.

Hyatt Hotels CorporationRansomware9051/2016
Rankiteo Explanation :
Attack threatening the organization's existence

Description: Hyatt Hotels chain across the was infected by a malware attack back in January 2016. The attackers designed the malware to exfiltrated payment card information including cardholder names, card numbers, expiration dates, and internal verification code affected payment processing systems. The hotel chain offered one year’s free protection to those affected by the breach,

Hyatt Hotels Corporation
Breach
Severity: 50
Impact: 2
Seen: 3/2017
Blog:
Rankiteo Explanation
Attack limited on finance or reputation

Description: The Washington State Office of the Attorney General reported a data breach involving Hyatt Hotels Corporation on October 12, 2017. The breach occurred between March 18, 2017 and July 2, 2017, potentially affecting 640 Washington residents with unauthorized access to payment card information, including cardholder names, card numbers, expiration dates, and internal verification codes.

Hyatt Hotels Corporation
Breach
Severity: 60
Impact: 2
Seen: 8/2015
Blog:
Rankiteo Explanation
Attack limited on finance or reputation

Description: The Washington Office of the Attorney General reported a data breach involving Hyatt Hotels Corporation on January 14, 2016. The breach, which involved unauthorized access to payment card data, occurred between August 13, 2015, and December 8, 2015, affecting 15 individuals. The breach was due to malware specifically designed to target payment card data.

Hyatt Hotels Corporation
Ransomware
Severity: 90
Impact: 5
Seen: 1/2016
Blog:
Rankiteo Explanation
Attack threatening the organization's existence

Description: Hyatt Hotels chain across the was infected by a malware attack back in January 2016. The attackers designed the malware to exfiltrated payment card information including cardholder names, card numbers, expiration dates, and internal verification code affected payment processing systems. The hotel chain offered one year’s free protection to those affected by the breach,

Ailogo

Hyatt Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

🔒
Incident Predictions locked
Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

🔒
A.I. Risk Score Predictions locked
Access Monitoring Plan
statics

Underwriter Stats for Hyatt

Incidents vs Hospitality Industry Average (This Year)

No incidents recorded for Hyatt in 2025.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Hyatt in 2025.

Incident Types Hyatt vs Hospitality Industry Avg (This Year)

No incidents recorded for Hyatt in 2025.

Incident History — Hyatt (X = Date, Y = Severity)

Hyatt cyber incidents detection timeline including parent company and subsidiaries

Hyatt Company Subsidiaries

SubsidiaryImage

Hyatt is guided by its purpose: to care for people so they can be their best. Hyatt’s portfolio includes 1,000+ hotel and all-inclusive properties in over 75 countries across 6 continents. Hyatt’s offerings include brands in the Timeless Collection, including Park Hyatt®, Grand Hyatt®, Hyatt Regency®, Hyatt®, Hyatt Residence Club®, Hyatt Place®, Hyatt House®, Hyatt Studios, and UrCove; the Boundless Collection, including Miraval®, Alila®, Andaz®, Thompson Hotels®, Dream® Hotels, Hyatt Centric®, and Caption by Hyatt®, the Independent Collection, including The Unbound Collection by Hyatt®, Destination by Hyatt®, and JdV by Hyatt®, and the Inclusive Collection, including Impression by Secrets, Hyatt Ziva®, Hyatt Zilara®, Zoëtry® Wellness & Spa Resorts, Secrets® Resorts & Spas, Breathless Resorts & Spas®, Dreams® Resorts & Spas, Hyatt Vivid Hotels & Resorts, Alua Hotels & Resorts®, and Sunscape® Resorts & Spas. Subsidiaries of Hyatt operate the World of Hyatt® loyalty program, ALG Vacations®, Unlimited Vacation Club®, Amstar DMC destination management services, and Trisept Solutions® technology services. Visit www.hyatt.com for more. This account provides information about Hyatt Hotels Corporation, its subsidiaries or affiliates and/or hotels operating under a Hyatt-affiliated brand. Terms like “Hyatt,” “we,” “our,” “us,” and similar terms are used for convenience and should not be understood as precise designations of any particular entity. The account name and certain terms like “employees” are used by this site but may not be accurate. Individuals may identify themselves as working or having worked at Hyatt or a Hyatt hotel, but please note that self-identification should not be treated as confirmation of employment, past or present, by Hyatt or any particular entity or hotel. In some cases, an individual may have been employed by an affiliate of Hyatt Hotels Corporation or by an owner or franchisee of a Hyatt-branded hotel.

Loading...
similarCompanies

Hyatt Similar Companies

Deutsche Hospitality

Deutsche Hospitality stands for an exceptional portfolio comprising more than 130 hotels in 20 countries on three continents, about 30 hotels are currently under development. Deutsche Hospitality stands for an exceptional portfolio comprising more than 130 hotels in 20 countries on three continents

MGM Resorts International

The resorts and casinos of MGM Resorts International™ are some of the most famous in the world. Our 28 destinations are renowned for their winning combination of quality entertainment, luxurious facilities, and exceptional customer service. We are actively expanding our presence globally, with pot

Ovations Food Services, LP

Ovations Food Services is now Spectra. Spectra is an industry leader in hosting and entertainment, partnering with clients to create memorable experiences for millions of visitors every year. Spectra’s unmatched blend of integrated services delivers incremental value for clients through several pri

IHG Hotels & Resorts

IHG Hotels & Resorts [LON:IHG, NYSE:IHG (ADRs)] is a global hospitality company, with a purpose to provide True Hospitality for Good. With a family of 19 hotel brands and IHG One Rewards, one of the world's largest hotel loyalty programmes, IHG has over 6,300 open hotels in more than 100 countries,

Meliá Hotels International

Welcome to Meliá Hotels International! From Mallorca to the world, our story is an exciting journey that began more than six decades ago and has led us to become one of the largest hotel chains on the planet and the most sustainable in Europe (S&P Global). With more than 400 hotels across the worl

Jumeirah

Jumeirah, a global leader in luxury hospitality and a member of Dubai Holding, operates an exceptional portfolio of 31 properties, including 33 signature F&B restaurants, across the Middle East, Europe, Asia and Africa. In 1999, Jumeirah changed the face of luxury hospitality with the opening of t

Hyatt Regency

Welcome to Hyatt Regency hotels, where connections flow seamlessly whether you’re traveling for business or leisure. With more than 150 hotels in over 30 countries, Hyatt Regency is a welcome place for convention goers, business travelers, and leisure seekers alike. Find yourself surrounded by en

Rotana Hotels

Since inception, Rotana has grown to be the region’s largest hospitality management company, and a brand that is widely recognized and admired. Rotana currently manages a portfolio of over 100 properties throughout the Middle East, Africa, Eastern Europe and Türkiye offering a wide range of servic

SJM Resorts

SJM Resorts, S.A. ("SJM") is one of the six concessionaires in Macau, authorised by the Government of the Macau Special Administrative Region to operate casinos and gaming areas. SJM is also the only casino gaming concessionaire with its roots in Macau. SJM owns and operates the Grand Lisboa Palace

newsone

Hyatt CyberSecurity News

November 10, 2025 10:25 PM
Baby boom at tech firm is a sign that it's a good place to work, CEO says

Christian Hyatt is CEO and co-founder of cybersecurity consulting firm risk3sixty. The company's health care benefits and culture that...

October 13, 2025 07:00 AM
cOcOn 2025 | Kerala Police Cybersecurity Conference at Kochi Grand Hyatt

The 18th edition of cOcOn, the annual international cybersecurity conference organised by the Kerala Police, was held at the Grand Hyatt,...

October 11, 2025 07:00 AM
Kerala CM Pinarayi launches declaration of children's online safety

Pinarayi stressed the need for electronic governance systems to prepare for growing cyber threats as public services become increasingly...

October 07, 2025 07:00 AM
Countdown for cOcOn 2025 begins with cybersecurity workshops

COCON 2025 cybersecurity conference by Kerala Police & ISRA features workshops, keynotes, and strategic responses to cyber threats.

October 07, 2025 07:00 AM
Cybersecurity conference ‘c0c0n’ set for take off

Kerala Police's flagship event brings global experts, hands-on hacking villages, and cutting-edge insights to secure the cyber future.

October 03, 2025 07:00 AM
Hyatt Collaborates with HYROX as the Official Regional Hotel Partner in Asia Pacific

World of Hyatt, the award-winning loyalty program from Hyatt, is announcing a new regional collaboration with HYROX Asia Pacific—one of the...

October 01, 2025 07:00 AM
c0c0n 2025 cybersecurity conference in Kochi: Dates, speakers, workshops & key highlights

Join c0c0n 2025 in Kochi, Oct 7-11, Asia`s leading cybersecurity & hacking conference. Connect, collaborate, & contribute to securing the...

September 22, 2025 07:00 AM
CyberMindr Partners with ETCISO Annual Conclave 2025 at Grand Hyatt, Goa

New Delhi [India], September 22: CyberMindr Joins the ETCISO Annual Conclave 2025 as a supporting partner. Held from September 18 to 21 at...

September 12, 2025 07:00 AM
Hyatt, Kiraku, and Takenaka Announce 22 Billion Yen Final Close of Real Estate Fund for Luxury Onsen Ryokan Joint Venture Brand “Atona”

Hyatt Hotels Corporation (NYSE: H), Kiraku, Inc. (“Kiraku”). and Takenaka Corporation announced today the final close of Atona Impact Fund,...

faq

Frequently Asked Questions

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.

Hyatt CyberSecurity History Information

Official Website of Hyatt

The official website of Hyatt is http://www.hyatt.com.

Hyatt’s AI-Generated Cybersecurity Score

According to Rankiteo, Hyatt’s AI-generated cybersecurity score is 770, reflecting their Fair security posture.

How many security badges does Hyatt’ have ?

According to Rankiteo, Hyatt currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Does Hyatt have SOC 2 Type 1 certification ?

According to Rankiteo, Hyatt is not certified under SOC 2 Type 1.

Does Hyatt have SOC 2 Type 2 certification ?

According to Rankiteo, Hyatt does not hold a SOC 2 Type 2 certification.

Does Hyatt comply with GDPR ?

According to Rankiteo, Hyatt is not listed as GDPR compliant.

Does Hyatt have PCI DSS certification ?

According to Rankiteo, Hyatt does not currently maintain PCI DSS compliance.

Does Hyatt comply with HIPAA ?

According to Rankiteo, Hyatt is not compliant with HIPAA regulations.

Does Hyatt have ISO 27001 certification ?

According to Rankiteo,Hyatt is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Industry Classification of Hyatt

Hyatt operates primarily in the Hospitality industry.

Number of Employees at Hyatt

Hyatt employs approximately 85,240 people worldwide.

Subsidiaries Owned by Hyatt

Hyatt presently has no subsidiaries across any sectors.

Hyatt’s LinkedIn Followers

Hyatt’s official LinkedIn profile has approximately 1,537,391 followers.

NAICS Classification of Hyatt

Hyatt is classified under the NAICS code 7211, which corresponds to Traveler Accommodation.

Hyatt’s Presence on Crunchbase

No, Hyatt does not have a profile on Crunchbase.

Hyatt’s Presence on LinkedIn

Yes, Hyatt maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/hyatt.

Cybersecurity Incidents Involving Hyatt

As of November 27, 2025, Rankiteo reports that Hyatt has experienced 3 cybersecurity incidents.

Number of Peer and Competitor Companies

Hyatt has an estimated 13,641 peer or competitor companies worldwide.

What types of cybersecurity incidents have occurred at Hyatt ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach and Ransomware.

Incident Details

Can you provide details on each incident ?

Incident : Malware Attack

Title: Hyatt Hotels Malware Attack

Description: Hyatt Hotels chain across the was infected by a malware attack back in January 2016. The attackers designed the malware to exfiltrated payment card information including cardholder names, card numbers, expiration dates, and internal verification code affected payment processing systems.

Date Detected: 2016-01-01

Type: Malware Attack

Attack Vector: Malware

Motivation: Financial Gain

Incident : Data Breach

Title: Hyatt Hotels Corporation Data Breach

Description: The Washington State Office of the Attorney General reported a data breach involving Hyatt Hotels Corporation on October 12, 2017. The breach occurred between March 18, 2017 and July 2, 2017, potentially affecting 640 Washington residents with unauthorized access to payment card information, including cardholder names, card numbers, expiration dates, and internal verification codes.

Date Detected: 2017-10-12

Date Publicly Disclosed: 2017-10-12

Type: Data Breach

Incident : Data Breach

Title: Hyatt Hotels Corporation Data Breach

Description: The Washington Office of the Attorney General reported a data breach involving Hyatt Hotels Corporation on January 14, 2016. The breach, which involved unauthorized access to payment card data, occurred between August 13, 2015, and December 8, 2015, affecting 15 individuals. The breach was due to malware specifically designed to target payment card data.

Date Detected: 2016-01-14

Date Publicly Disclosed: 2016-01-14

Type: Data Breach

Attack Vector: Malware

Vulnerability Exploited: Unauthorized access to payment card data

Motivation: Financial Gain

What are the most common types of attacks the company has faced ?

Common Attack Types: The most common types of attacks the company has faced is Breach.

Impact of the Incidents

What was the impact of each incident ?

Incident : Malware Attack HYA1348522

Data Compromised: Cardholder names, Card numbers, Expiration dates, Internal verification code

Systems Affected: Payment Processing Systems

Payment Information Risk: True

Incident : Data Breach HYA456072525

Data Compromised: Cardholder names, Card numbers, Expiration dates, Internal verification codes

Payment Information Risk: True

Incident : Data Breach HYA550072525

Data Compromised: Payment card data

Payment Information Risk: High

What types of data are most commonly compromised in incidents ?

Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Payment Card Information, , Payment Card Information, and Payment card data.

Which entities were affected by each incident ?

Incident : Malware Attack HYA1348522

Entity Name: Hyatt Hotels

Entity Type: Hotel Chain

Industry: Hospitality

Incident : Data Breach HYA456072525

Entity Name: Hyatt Hotels Corporation

Entity Type: Hospitality

Industry: Hospitality

Location: Washington

Customers Affected: 640

Incident : Data Breach HYA550072525

Entity Name: Hyatt Hotels Corporation

Entity Type: Corporation

Industry: Hospitality

Customers Affected: 15

Data Breach Information

What type of data was compromised in each breach ?

Incident : Malware Attack HYA1348522

Type of Data Compromised: Payment card information

Sensitivity of Data: High

Incident : Data Breach HYA456072525

Type of Data Compromised: Payment card information

Number of Records Exposed: 640

Sensitivity of Data: High

Incident : Data Breach HYA550072525

Type of Data Compromised: Payment card data

Number of Records Exposed: 15

Sensitivity of Data: High

References

Where can I find more information about each incident ?

Incident : Data Breach HYA456072525

Source: Washington State Office of the Attorney General

Date Accessed: 2017-10-12

Incident : Data Breach HYA550072525

Source: Washington Office of the Attorney General

Date Accessed: 2016-01-14

Where can stakeholders find additional resources on cybersecurity best practices ?

Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: Washington State Office of the Attorney GeneralDate Accessed: 2017-10-12, and Source: Washington Office of the Attorney GeneralDate Accessed: 2016-01-14.

Stakeholder and Customer Advisories

Were there any advisories issued to stakeholders or customers for each incident ?

Incident : Malware Attack HYA1348522

Customer Advisories: The hotel chain offered one year’s free protection to those affected by the breach

What advisories does the company provide to stakeholders and customers following an incident ?

Advisories Provided: The company provides the following advisories to stakeholders and customers following an incident: was The hotel chain offered one year’s free protection to those affected by the breach.

Additional Questions

Incident Details

What was the most recent incident detected ?

Most Recent Incident Detected: The most recent incident detected was on 2016-01-01.

What was the most recent incident publicly disclosed ?

Most Recent Incident Publicly Disclosed: The most recent incident publicly disclosed was on 2016-01-14.

Impact of the Incidents

What was the most significant data compromised in an incident ?

Most Significant Data Compromised: The most significant data compromised in an incident were Cardholder Names, Card Numbers, Expiration Dates, Internal Verification Code, , cardholder names, card numbers, expiration dates, internal verification codes, and Payment card data.

What was the most significant system affected in an incident ?

Most Significant System Affected: The most significant system affected in an incident was Payment Processing Systems.

Data Breach Information

What was the most sensitive data compromised in a breach ?

Most Sensitive Data Compromised: The most sensitive data compromised in a breach were expiration dates, internal verification codes, Card Numbers, Cardholder Names, Payment card data, card numbers, Internal Verification Code, Expiration Dates and cardholder names.

What was the number of records exposed in the most significant breach ?

Number of Records Exposed in Most Significant Breach: The number of records exposed in the most significant breach was 655.0.

References

What is the most recent source of information about an incident ?

Most Recent Source: The most recent source of information about an incident are Washington Office of the Attorney General and Washington State Office of the Attorney General.

Stakeholder and Customer Advisories

What was the most recent customer advisory issued ?

Most Recent Customer Advisory: The most recent customer advisory issued was an The hotel chain offered one year’s free protection to those affected by the breach.

cve

Latest Global CVEs (Not Company-Specific)

Description

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.

Risk Information
cvss4
Base: 7.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.

Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.

Risk Information
cvss4
Base: 6.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Access Data Using Our API

SubsidiaryImage

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=hyatt' -H 'apikey: YOUR_API_KEY_HERE'

What Do We Measure ?

revertimgrevertimgrevertimgrevertimg
Incident
revertimgrevertimgrevertimgrevertimg
Finding
revertimgrevertimgrevertimgrevertimg
Grade
revertimgrevertimgrevertimgrevertimg
Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network Security

Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)

Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)

Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat Intelligence

Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Top LeftTop RightBottom LeftBottom Right
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
Users Love Us Badge