What is the official website of IBM ?

The official website of IBM is http://www.ibm.com.

What is IBM's cybersecurity risk score?

IBM has an AI-generated cybersecurity risk score of 498 out of 1000, indicating a Critical security posture according to Rankiteo's assessment.

How many security incidents has IBM experienced?

According to Rankiteo, IBM currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has IBM been affected by any supply chain cyber incidents ?

According to Rankiteo, IBM has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: IBM (Incident ID: ATTIBM1781168591) Anthropic (Incident ID: ANTARCFLOIBM1776659058) Sistemi Informativi, an IBM Company (Incident ID: SIS1777847095)

Does IBM have SOC 2 Type 1 certification ?

According to Rankiteo, IBM is not certified under SOC 2 Type 1.

Does IBM have SOC 2 Type 2 certification ?

According to Rankiteo, IBM does not hold a SOC 2 Type 2 certification.

Does IBM comply with GDPR ?

According to Rankiteo, IBM is not listed as GDPR compliant.

Does IBM have PCI DSS certification ?

According to Rankiteo, IBM does not currently maintain PCI DSS compliance.

Does IBM comply with HIPAA ?

According to Rankiteo, IBM is not compliant with HIPAA regulations.

Does IBM have ISO 27001 certification ?

According to Rankiteo,IBM is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does IBM operate in ?

IBM operates primarily in the IT Services and IT Consulting industry.

How many employees does IBM have ?

IBM employs approximately 336,062 people worldwide.

Does IBM own any subsidiaries ?

IBM presently has no subsidiaries across any sectors.

How many LinkedIn followers does IBM have ?

IBM's official LinkedIn profile has approximately 19,659,540 followers.

What is the NAICS classification code for IBM ?

IBM is classified under the NAICS code 5415, which corresponds to Computer Systems Design and Related Services.

Does IBM have a Crunchbase profile ?

No, IBM does not have a profile on Crunchbase.

Does IBM have a LinkedIn profile ?

Yes, IBM maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/ibm.

How many cybersecurity incidents has IBM experienced ?

As of July 30, 2026, Rankiteo reports that IBM has experienced 24 cybersecurity incidents.

How many peer or competitor companies does IBM have ?

IBM has an estimated 41,191 peer or competitor companies worldwide.

What types of cybersecurity incidents has IBM faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach, Vulnerability and Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

IBM

Boost Score +25 with badge (5 left)

498

/1000

Critical

523

/1000

Critical

IBM Vendor Cyber Rating & Cyber Score

ibm.com

Add Your Compliance Badge

At IBM, we do more than work. We create. We create as technologists, developers, and engineers. We create with our partners. We create with our competitors. If you're searching for ways to make the world work better through technology and infrastructure, software and consulting, then we want to work with you. We're here to help every creator turn their "what if" into what is. Let's create something that will change everything.

IBM A.I CyberSecurity Scoring

Scoring History

IBM

IBM CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

IBM

Breach

7/2026

IBM1785357547

IBM

Breach

100

7/2026

IBM1785321873

IBM

Breach

100

6/2026

IBM

ATTIBM178116859...

IBM

Vulnerability

100

4/2026

Anthropic

ANTARCFLOIBM177...

IBM

Cyber Attack

100

4/2026

Sistemi Informa...

SIS1777847095

IBM

Breach

1/2026

IBM1770199486

IBM

Vulnerability

12/2025

IBM1767621759

IBM

Breach

11/2025

IBM1769139287

IBM

Vulnerability

11/2025

IBM459304511062...

IBM

Vulnerability

10/2025

IBM486204810252...

IBM

Breach

9/2025

IBM500090325

IBM

Vulnerability

100

6/2025

IBM347060525

IBM

Vulnerability

5/2025

IBM376203711112...

IBM

Cyber Attack

100

3/2025

IBMPON178532152...

IBM

Vulnerability

1/2025

IBM426204209102...

IBM

Breach

100

6/2024

IBM543415411042...

IBM

Breach

100

6/2024

IBM1769139399

IBM

Breach

100

1/2024

FEDIBM178287286...

IBM

Breach

9/2023

IBM040091825

IBM

Cyber Attack

100

5/2020

IBM136251309042...

IBM

Vulnerability

04/2020

IBM162291222

IBM

Breach

11/2017

IBM1785328112

IBM

Breach

100

1/2013

ATTIBM178094643...

IBM

Cyber Attack

100

1/2013

MERIBM178069828...

Loading…

A.I.

IBM Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for IBM

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

IBM has 300.0% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

IBM has 476.92% more incidents than the average of all companies with at least one recorded incident.

Incident Types IBM vs IT Services and IT Consulting Industry Avg (This Year)

IBM reported 6 incidents this year: 1 cyber attacks, 0 ransomware, 1 vulnerabilities, 4 data breaches, compared to industry peers with at least 1 incident.

Incident History - IBM (X = Date, Y = Severity)

Loading…

SUBSIDIARY

IBM Subsidiaries

IBM

IT Services and IT Consulting

Website: http://www.ibm.com

Company Size: 10,001+ employees

IBM ConsultingIT Services and IT Consulting

IBM Data, AI & AutomationIT Services and IT Consulting

IBM Hybrid Cloud and InfrastructureIT Services and IT Consulting

IBM QuantumIT Services and IT Consulting

IBM ResearchResearch Services

Loading…

IBM Similar Companies

Asurion

cb asurion.com

As the world’s leading tech care company, Asurion eliminates the fears and frustrations associated with technology, to ensure our 300 million customers get the most out of their devices, appliances and connections. We provide insurance, repair, replacement, installation and 24/7 support for everything from cellphones to laptops and household appliances. Our experts are available online, on the phone, at one of our more than 800 stores, or can even come to you.

NTT DATA North America

nttdata.com

NTT DATA, Inc. is a trusted global innovator of business and technology services. We're committed to helping clients innovate, optimize and transform for long-term success. Our R&D investments help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have diverse experts in more than 50 countries and a robust partner ecosystem of established and start-up companies. Our services include business and technology consulting, data and artificial intelligence, industry solutions, as well as the development, implementation and management of applications, infrastructure, and connectivity.

Tata Consultancy Services

tcs.com

Tata Consultancy Services (TCS) is the technology partner of choice for industry leading organizations worldwide. Since its inception in 1968, TCS has upheld the highest standards of innovation, engineering excellence, and customer service. It has set an aspiration to become the world's largest AI-led technology services company and is enabling its clients to transform themselves across the full AI stack, from infrastructure to intelligence. Rooted in the heritage of the Tata Group, TCS is focused on creating long term value for its clients, its investors, its employees, and the community at large. With a highly skilled workforce spread across 55 countries and 202 service delivery centers across the world, the company has been recognized as a top employer in six continents. With the ability to rapidly apply and scale new technologies, the company has built long term partnerships with its clients – helping them emerge as perpetually adaptive enterprises. Many of these relationships have endured into decades and navigated every technology cycle, from mainframes in the 1970s to artificial intelligence today. TCS sponsors 14 of the world’s most prestigious marathons and endurance events, including the TCS New York City Marathon, TCS London Marathon and TCS Sydney Marathon with a focus on promoting health, sustainability, and community empowerment. Caution against fraudulent job offers: TCS doesn’t charge any fee throughout the recruitment process. Refer here: https://www.tcs.com/careers/india/recruitment-fraud-alert

Apex Systems

apexsystems.com

Apex Systems is a leading global technology services firm that incorporates industry insights and experience to deliver solutions that fulfill our clients’ digital visions. We offer a continuum of services, specializing in strategy, transformation, and managed services across application development, data, enterprise platforms, cloud and infrastructure, and cybersecurity. Through our ability to innovate alongside our customers, we build and deploy the right artificial intelligence solutions to realize business value and improve customer experiences. Our alliances with cutting-edge technology partners empower our customers by providing them with the latest advancements. Apex has a presence in over 70 markets across North America, Europe, and India. Apex is a part of the commercial segment of ASGN Incorporated (NYSE: ASGN). To learn more, visit www.apexsystems.com. Apex strives to provide our talent with the best possible experience, from start to finish. Our commitment to excellence is reflected in many awards, including ClearlyRated's Best of Staffing® in Talent Satisfaction in the United States and Great Place to Work® in the United Kingdom and Mexico. Visit us today to join our team: www.apexsystems.com/careers.

CenturyLink

centurylink.com

CenturyLink (NYSE: CTL) is a technology leader delivering hybrid networking, cloud connectivity, and security solutions to customers around the world. Through its extensive global fiber network, CenturyLink provides secure and reliable services to meet the growing digital demands of businesses and consumers. CenturyLink strives to be the trusted connection to the networked world and is focused on delivering technology that enhances the customer experience. Learn more at http://news.centurylink.com/.

Neobpo

www.neobpo

Somos especializados em integrar tecnologia com inteligência humana, oferecendo soluções digitais que promovem transformação e eficiência operacional. Nosso foco é gerar valor por meio de resultados reais, utilizando inteligência digital para atender às necessidades específicas de cada cliente. Mergulhamos nos desafios de empresas que buscam inovação, modernização e escalabilidade, oferecendo soluções seguras e personalizadas para impulsionar seu crescimento. Adotamos uma abordagem consultiva ao longo de toda a jornada, identificando oportunidades estratégicas desde o primeiro contato, proporcionando soluções sob medida que combinam dados, automação e atendimento dedicado. O impacto que geramos vai além da entrega de resultados. Transformamos a forma como nossos clientes operam, melhorando sua produtividade, segurança e escalabilidade, garantindo um crescimento sustentável e criando valor mensurável para seus negócios.

Softtek

softtek.com

Founded in 1982 by a small group of entrepreneurs, Softtek started out in Mexico providing local IT services, and today is a global leader in next-generation digital solutions. The first company to introduce the Nearshore model, Softtek helps Global 2000 organizations build their digital capabilities constantly and seamlessly, from ideation and development to execution and evolution. Its entrepreneurial drive spans 20+ countries and more than 15,000 talented professionals. For more information on what we do, who we are, and career opportunities, visit www.softtek.com / Follow us on Instagram (@softtekofficial), on Twitter (@Softtek), and be our fan on Facebook www.facebook.com/softtek.

FIS

fisglobal.com

Unlocking financial technology. Bringing the world’s money into harmony. At FIS, we advance the way the world pays, banks, and invests. With decades of expertise, we provide financial technology solutions to financial institutions, businesses, and developers. Headquartered in Jacksonville, Florida, we’re a proud member of the Fortune 500® and the Standard & Poor’s 500® Index. Let's innovate together.

Allianz Technology

allianz.com

With its headquarters in Munich, Germany, Allianz Technology is Allianz's global IT service provider and delivers IT solutions that drive the group's digitalization. With more than 11,000 employees in more than 20 countries around the world, Allianz Technology is tasked to run, optimize, transform, and innovate the infrastructure, applications, and services together with Allianz companies to co-create the best customer experience. We service the entire spectrum of digitalization - from one of the industry's largest IT infrastructure projects that spans data centres, networks, and security, to application platforms ranging from workplace services to digital interaction. In short: We deliver comprehensive end-to-end IT solutions for Allianz in the digital age. We are the backbone of Allianz.

Loading…

NEWS

IBM CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

July 10, 2026 12:40 AM

IBM and Red Hat launch Lightwell to simplify open source vulnerability remediation

IBM and Red Hat have launched Lightwell to help enterprises fix open source vulnerabilities without disruptive software upgrades.

Read Article

July 09, 2026 10:47 PM

IBM just answered a $5 billion cybersecurity question

IBM and Red Hat commercially launched Lightwell on July 8, turning a $5 billion pledge into two products that enterprises can actually buy.

Read Article

July 09, 2026 07:51 PM

Former IBM Federal Leader Joins Camelot Secure as CTO

Victor Brown brings three decades of experience in enterprise architecture and AI to lead the evolution of the Secure360 Platform.

Read Article

July 09, 2026 03:11 PM

IBM and Red Hat automate open-source vulnerability remediation

Share this story: Tags: AI · ci/cd · cybersecurity · devsecops · ibm · infosec · lightwell · open-source · red hat

Read Article

July 09, 2026 11:45 AM

Why Is IBM (NYSE:IBM) Strengthening AI and Cloud Services?

IBM (NYSE:IBM) expands hybrid cloud, enterprise AI, consulting, and cybersecurity capabilities while strengthening enterprise technology...

Read Article

July 09, 2026 07:39 AM

IBM and Red Hat expand Lightwell with open-source blockchain services

Following the introduction of Project Lightwell in May, the first commercial rollout is now underway. IBM and Red Hat are introducing two...

Read Article

July 09, 2026 03:26 AM

IBM & Red Hat Invest $5B to Secure Open Source Software in AI Era

IBM and Red Hat launch Project Lightwell, a $5B AI-driven initiative delivering secure open-source fixes for enterprises worldwide.

Read Article

July 09, 2026 01:07 AM

IBM And Red Hat Launch Lightwell To Address Open Source Vulnerability Remediation At Scale

IBM and Red Hat have commercially launched Lightwell, a platform that delivers automated vulnerability remediation through two offerings:...

Read Article

July 08, 2026 05:26 PM

IBM and Red Hat launch Lightwell to defend open-source code from AI attacks

Their plan to protect open-source projects from AI-discovered security holes has led to the launch of two commercial offerings: Lightwell...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-66064

SUMMARY

goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.5, the httpserver/handler.go sendFile handler opened files using a cleaned path but derived the authorization filename from raw req.URL.Path, so a trailing slash could bypass .goshs ACL-file protection and block-list checks. This issue is fixed in version 2.1.5.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Impact Score

1.4

Exploitability

3.9

REFERENCES

CVE-2026-66063

SUMMARY

goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.5, the httpserver/updown.go multipart upload handler split part.FileName() on / but did not reject .., allowing an unauthenticated upload with filename .. to create a file outside the served tree. This issue is fixed in version 2.1.5.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Impact Score

2.5

Exploitability

3.9

REFERENCES

CVE-2026-64863

SUMMARY

goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.4, the httpserver/server.go wdGuard handled WebDAV MOVE as a write-only method and did not enforce --no-delete, allowing WebDAV clients to delete or overwrite files via MOVE with Overwrite: T. This issue is fixed in version 2.1.4.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 9.1)

cvss3

Base Score: 9.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Impact Score

5.2

Exploitability

3.9

REFERENCES

CVE-2026-62325

SUMMARY

goshs is a feature-rich single-binary file server for red teamers and developers. From 2.1.3 until 2.1.4, the sftpserver/sftpserver.go password handler used Username != "" && Password != "", so running goshs with -b 'admin:' -sftp and no -fkf left both SFTP authentication handlers unset and allowed unauthenticated file access. This issue is fixed in version 2.1.4.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 9.1)

cvss3

Base Score: 9.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Impact Score

5.2

Exploitability

3.9

REFERENCES

CVE-2026-59921

SUMMARY

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, HttpPostRequestEncoder constructs multipart HTTP request bodies by directly concatenating user-supplied filenames and field names into Content-Disposition MIME headers without validating or sanitizing CRLF characters (\r\n). Since MIME headers are delimited by CRLF, an attacker who controls the filename can inject arbitrary MIME headers into the multipart body part. The root cause is that neither the encoder nor the FileUpload implementations' setFilename() methods, which only check for null, neutralize CRLF characters before the filename is embedded into the header. This issue has been fixed in versions 4.1.136.Final and 4.2.16.Final.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 5.7)

cvss3

Base Score: 5.7

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

2.1

REFERENCES

https://github.com/netty/netty/security/advisories/GHSA-gcjf-9mgh-3p7g

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…