What is the official website of IBM ?

The official website of IBM is http://www.ibm.com.

What is IBM's cybersecurity risk score?

IBM has an AI-generated cybersecurity risk score of 498 out of 1000, indicating a Critical security posture according to Rankiteo's assessment.

How many security incidents has IBM experienced?

According to Rankiteo, IBM currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has IBM been affected by any supply chain cyber incidents ?

According to Rankiteo, IBM has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: IBM (Incident ID: ATTIBM1781168591) Anthropic (Incident ID: ANTARCFLOIBM1776659058) Sistemi Informativi, an IBM Company (Incident ID: SIS1777847095)

Does IBM have SOC 2 Type 1 certification ?

According to Rankiteo, IBM is not certified under SOC 2 Type 1.

Does IBM have SOC 2 Type 2 certification ?

According to Rankiteo, IBM does not hold a SOC 2 Type 2 certification.

Does IBM comply with GDPR ?

According to Rankiteo, IBM is not listed as GDPR compliant.

Does IBM have PCI DSS certification ?

According to Rankiteo, IBM does not currently maintain PCI DSS compliance.

Does IBM comply with HIPAA ?

According to Rankiteo, IBM is not compliant with HIPAA regulations.

Does IBM have ISO 27001 certification ?

According to Rankiteo,IBM is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does IBM operate in ?

IBM operates primarily in the IT Services and IT Consulting industry.

How many employees does IBM have ?

IBM employs approximately 336,062 people worldwide.

Does IBM own any subsidiaries ?

IBM presently has no subsidiaries across any sectors.

How many LinkedIn followers does IBM have ?

IBM's official LinkedIn profile has approximately 19,659,540 followers.

What is the NAICS classification code for IBM ?

IBM is classified under the NAICS code 5415, which corresponds to Computer Systems Design and Related Services.

Does IBM have a Crunchbase profile ?

No, IBM does not have a profile on Crunchbase.

Does IBM have a LinkedIn profile ?

Yes, IBM maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/ibm.

How many cybersecurity incidents has IBM experienced ?

As of July 30, 2026, Rankiteo reports that IBM has experienced 24 cybersecurity incidents.

How many peer or competitor companies does IBM have ?

IBM has an estimated 41,204 peer or competitor companies worldwide.

What types of cybersecurity incidents has IBM faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack, Breach and Vulnerability.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

IBM

Boost Score +25 with badge (5 left)

498

/1000

Critical

523

/1000

Critical

IBM Vendor Cyber Rating & Cyber Score

ibm.com

Add Your Compliance Badge

At IBM, we do more than work. We create. We create as technologists, developers, and engineers. We create with our partners. We create with our competitors. If you're searching for ways to make the world work better through technology and infrastructure, software and consulting, then we want to work with you. We're here to help every creator turn their "what if" into what is. Let's create something that will change everything.

IBM A.I CyberSecurity Scoring

Scoring History

IBM

IBM CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

IBM

Breach

7/2026

IBM1785357547

IBM

Breach

100

7/2026

IBM1785321873

IBM

Breach

100

6/2026

IBM

ATTIBM178116859...

IBM

Vulnerability

100

4/2026

Anthropic

ANTARCFLOIBM177...

IBM

Cyber Attack

100

4/2026

Sistemi Informa...

SIS1777847095

IBM

Breach

1/2026

IBM1770199486

IBM

Vulnerability

12/2025

IBM1767621759

IBM

Breach

11/2025

IBM1769139287

IBM

Vulnerability

11/2025

IBM459304511062...

IBM

Vulnerability

10/2025

IBM486204810252...

IBM

Breach

9/2025

IBM500090325

IBM

Vulnerability

100

6/2025

IBM347060525

IBM

Vulnerability

5/2025

IBM376203711112...

IBM

Cyber Attack

100

3/2025

IBMPON178532152...

IBM

Vulnerability

1/2025

IBM426204209102...

IBM

Breach

100

6/2024

IBM543415411042...

IBM

Breach

100

6/2024

IBM1769139399

IBM

Breach

100

1/2024

FEDIBM178287286...

IBM

Breach

9/2023

IBM040091825

IBM

Cyber Attack

100

5/2020

IBM136251309042...

IBM

Vulnerability

04/2020

IBM162291222

IBM

Breach

11/2017

IBM1785328112

IBM

Breach

100

1/2013

ATTIBM178094643...

IBM

Cyber Attack

100

1/2013

MERIBM178069828...

Loading…

A.I.

IBM Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for IBM

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

IBM has 300.0% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

IBM has 476.92% more incidents than the average of all companies with at least one recorded incident.

Incident Types IBM vs IT Services and IT Consulting Industry Avg (This Year)

IBM reported 6 incidents this year: 1 cyber attacks, 0 ransomware, 1 vulnerabilities, 4 data breaches, compared to industry peers with at least 1 incident.

Incident History - IBM (X = Date, Y = Severity)

Loading…

SUBSIDIARY

IBM Subsidiaries

IBM

IT Services and IT Consulting

Website: http://www.ibm.com

Company Size: 10,001+ employees

IBM ConsultingIT Services and IT Consulting

IBM watsonxIT Services and IT Consulting

IBM SecurityComputer and Network Security

IBM QuantumIT Services and IT Consulting

IBM ResearchResearch Services

Loading…

IBM Similar Companies

ITC Infotech

itcinfotech.com

ITC Infotech is a global technology solution and services leader providing business-friendly solutions, that enable future-readiness for clients. We seamlessly bring together digital expertise, strong industry-specific alliances, and deep domain expertise from ITC Group businesses. Our solutions and services are focused on Banking and financial Services, Healthcare, Manufacturing, Consumer Goods, Travel and Hospitality. ITC Infotech is a wholly-owned subsidiary of ITC Ltd, one of India’s most admired companies.

CenturyLink

centurylink.com

CenturyLink (NYSE: CTL) is a technology leader delivering hybrid networking, cloud connectivity, and security solutions to customers around the world. Through its extensive global fiber network, CenturyLink provides secure and reliable services to meet the growing digital demands of businesses and consumers. CenturyLink strives to be the trusted connection to the networked world and is focused on delivering technology that enhances the customer experience. Learn more at http://news.centurylink.com/.

eClerx

eclerx.com

eClerx is a productized services company, bringing together people, technology and domain expertise to amplify business results. Our mission is to set the benchmark for client service and success in our industry. Our vision is to be the innovation partner of choice for technology, data analytics and process management services.

AlmavivA Group

almaviva.it

Almaviva is the Italian digital innovation group that supports the country’s growth by helping enterprises meet the challenges of staying competitive in the digital age. The Group helps organizations transform their business models, operational structures, corporate culture, and ICT systems. Building on strong Made in Italy expertise, the Almaviva Group has developed a global network of 41,000 professionals, 30 companies, and 80 offices worldwide, with a significant presence in Latin America (Brazil, Colombia, and the Dominican Republic), as well as in the United States, Belgium, Spain, Finland, Saudi Arabia, the United Arab Emirates, Egypt, and Tunisia.

Expleo Group

expleo.com

Expleo is a global engineering, technology and consulting service provider that partners with leading organisations to guide them through their business transformation, helping them achieve operational excellence and future-proof their businesses. Expleo benefits from more than 50 years of experience developing complex products, optimising manufacturing processes, and ensuring the quality of information systems. Leveraging its deep sector knowledge and wide-ranging expertise in fields including AI engineering, digitalisation, hyper-automation, cybersecurity and data science, the group’s mission is to fast-track innovation through each step of the value chain. As a responsible and diverse organisation, Expleo is committed to doing business with integrity and working towards a more sustainable and secure society. Expleo boasts an extensive global footprint, powered by 18,000 highly-skilled experts delivering value in 29 countries and generating more than €1.4 billion in revenue.

ASGN Incorporated

asgn.com

ASGN Incorporated (NYSE: ASGN) is a leading provider of IT services and solutions across the commercial and government sectors. ASGN helps corporate enterprises and government organizations develop, implement and operate critical IT and business solutions through its integrated offerings. For more information, please visit asgn.com. *Please note: Our company does not use the Telegram app, Google Hangouts, or communicate using non-corporate email account addresses. For more about what we do and do not ask for in the hiring process, please visit: https://www.asgn.com/fraud-alert

Dimension Data

cb dimensiondata.com

Dimension Data is a leading African born technology provider operating in the Middle East and Africa, offering a portfolio of services including systems integration, managed services infrastructure, cloud solutions, business applications, customer experience, and intelligent security solutions. We provide innovative solutions that optimise today’s evolving technology environments, enabling clients to leverage data in a digital age. Founded in 1983, and headquartered in Johannesburg, Dimension Data is a proud member of the NTT Group, one of the world’s leading information communication technology (ICT) companies, comprising a group of global technology companies. In 2020, Dimension Data completed its transition to operate as one entity consolidating all its subsidiaries under a single Dimension Data brand employing over 10 000 employees across 15 countries. We continue to invest heavily in innovation bringing together the world’s best technologies, from consulting, technical and support services to a fully managed service. Dimension Data is currently a level 2 BBBEE contributor after successfully concluding a significant BBBEE transaction in 2019. Dimension Data will continue to implement strategies to ensure it contributes meaningfully to transformation towards an inclusive society.

CDW

cb cdw.com

At CDW, we know how to make technology work so people can do great things. Our experts bring a full-stack, full-lifestyle approach with custom solutions, services and relationships to bring your vision to life. Through decades of experience, scale, and deep industry expertise, we deliver the full promise of what technology can do to help you reach your goals and drive innovation. Partner with CDW, and together, let’s Make amazing happen. A Fortune 500 company and member of the S&P 500 Index, CDW helps its customers to navigate an increasingly complex IT market and maximize return on their technology investments. For more information about CDW, please visit www.CDW.com.

Mastercard

mastercard.com

Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re building a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.

Loading…

NEWS

IBM CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

July 10, 2026 12:40 AM

IBM and Red Hat launch Lightwell to simplify open source vulnerability remediation

IBM and Red Hat have launched Lightwell to help enterprises fix open source vulnerabilities without disruptive software upgrades.

Read Article

July 09, 2026 10:47 PM

IBM just answered a $5 billion cybersecurity question

IBM and Red Hat commercially launched Lightwell on July 8, turning a $5 billion pledge into two products that enterprises can actually buy.

Read Article

July 09, 2026 07:51 PM

Former IBM Federal Leader Joins Camelot Secure as CTO

Victor Brown brings three decades of experience in enterprise architecture and AI to lead the evolution of the Secure360 Platform.

Read Article

July 09, 2026 03:11 PM

IBM and Red Hat automate open-source vulnerability remediation

Share this story: Tags: AI · ci/cd · cybersecurity · devsecops · ibm · infosec · lightwell · open-source · red hat

Read Article

July 09, 2026 11:45 AM

Why Is IBM (NYSE:IBM) Strengthening AI and Cloud Services?

IBM (NYSE:IBM) expands hybrid cloud, enterprise AI, consulting, and cybersecurity capabilities while strengthening enterprise technology...

Read Article

July 09, 2026 07:39 AM

IBM and Red Hat expand Lightwell with open-source blockchain services

Following the introduction of Project Lightwell in May, the first commercial rollout is now underway. IBM and Red Hat are introducing two...

Read Article

July 09, 2026 03:26 AM

IBM & Red Hat Invest $5B to Secure Open Source Software in AI Era

IBM and Red Hat launch Project Lightwell, a $5B AI-driven initiative delivering secure open-source fixes for enterprises worldwide.

Read Article

July 09, 2026 01:07 AM

IBM And Red Hat Launch Lightwell To Address Open Source Vulnerability Remediation At Scale

IBM and Red Hat have commercially launched Lightwell, a platform that delivers automated vulnerability remediation through two offerings:...

Read Article

July 08, 2026 05:26 PM

IBM and Red Hat launch Lightwell to defend open-source code from AI attacks

Their plan to protect open-source projects from AI-discovered security holes has led to the launch of two commercial offerings: Lightwell...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-67595

SUMMARY

VaahCMS versions 2.0.0 through 2.3.4 contain a malicious obfuscated JavaScript payload embedded in the Blade template responsible for rendering security OTP emails, allowing remote attackers to execute unauthorized code in any browser that renders the affected email template with JavaScript enabled. The payload establishes a WebSocket connection to a hardcoded command-and-control endpoint, installs a password-field keylogger using MutationObserver to capture dynamically added inputs, scrapes WhatsApp Web DOM content, and accepts remote commands to redirect or overwrite the rendered page.

Published

Date2026-07-29

Updated

Date2026-07-29

RISK INFORMATION (Score: 8.1)

cvss3

Base Score: 8.1

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.2

REFERENCES

CVE-2026-15157

SUMMARY

undici does not validate the type property of a duck-typed blob-like request body before using it as the Content-Type header on the HTTP/1.1 dispatcher. In undici before 6.28.0, from 7.0.0 up to before 7.29.0, and from 8.0.0 up to before 8.9.0, an application that passes a hand-rolled blob-like body (via request, stream, pipeline, or dispatch) whose type is derived from untrusted input allows an attacker to inject CRLF sequences and append arbitrary HTTP headers, potentially smuggling a second request past the upstream. Native Blob objects are safe because their constructor strips CRLF from the type, and fetch is unaffected because it validates headers, but ecosystem libraries that build duck-typed blob shapes from user input can reach the vulnerable path. This is the same defect class as CVE-2022-35948 and CVE-2026-1527, on a header sink that the earlier fixes did not cover. The issue is fixed in undici 6.28.0, 7.29.0, and 8.9.0.

Published

Date2026-07-29

Updated

Date2026-07-29

RISK INFORMATION (Score: 4.2)

cvss3

Base Score: 4.2

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

Impact Score

2.5

Exploitability

1.6

REFERENCES

CVE-2026-14643

SUMMARY

undici's cache interceptor mishandles optional whitespace placed around the equals sign of a qualified no-cache or private Cache-Control directive. In undici from 7.0.0 up to before 7.29.0 and from 8.0.0 up to before 8.9.0, the parser either drops the directive or stores a field name with literal quote characters, so the cache decision fails to recognize the qualification and the response is stored. In shared-cache mode, this lets a response containing one user's authenticated data be served from cache to a later caller, including an unauthenticated one, when both requests resolve to the same cache key. It affects applications that enable the cache interceptor in shared mode, forward Authorization headers upstream, and receive cacheable responses with qualified directives padded with whitespace around the equals sign. This is the whitespace-around-equals variant that the fix for CVE-2026-9678 did not normalize, and it is fixed in undici 7.29.0 and 8.9.0.

Published

Date2026-07-29

Updated

Date2026-07-29

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2025-69949

SUMMARY

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in check_availability.php via the parameters emailid and email.

Published

Date2026-07-29

Updated

Date2026-07-29

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2025-69945

SUMMARY

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /doctor/edit-patient.php?editid=1.

Published

Date2026-07-29

Updated

Date2026-07-29

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

https://github.com/um-dsp/TaintRadar/blob/main/sql_injection_cves/hospitalmanagementsystemproject/20250811-hospital-management-system-edit-patient.php-editid-sqli/20250811-hospital-management-system-edit-patient.php-editid-sqli.md

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…