What is Insomni'hack's cybersecurity risk score?

Insomni'hack has an AI-generated cybersecurity risk score of 751 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Insomni'hack experienced?

According to Rankiteo, Insomni'hack currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Insomni'hack been affected by any supply chain cyber incidents ?

According to Rankiteo, Insomni'hack has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Insomni'hack have SOC 2 Type 1 certification ?

According to Rankiteo, Insomni'hack is not certified under SOC 2 Type 1.

Does Insomni'hack have SOC 2 Type 2 certification ?

According to Rankiteo, Insomni'hack does not hold a SOC 2 Type 2 certification.

Does Insomni'hack comply with GDPR ?

According to Rankiteo, Insomni'hack is not listed as GDPR compliant.

Does Insomni'hack have PCI DSS certification ?

According to Rankiteo, Insomni'hack does not currently maintain PCI DSS compliance.

Does Insomni'hack comply with HIPAA ?

According to Rankiteo, Insomni'hack is not compliant with HIPAA regulations.

Does Insomni'hack have ISO 27001 certification ?

According to Rankiteo,Insomni'hack is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Insomni'hack operate in ?

Insomni'hack operates primarily in the IT Services and IT Consulting industry.

How many employees does Insomni'hack have ?

Insomni'hack employs approximately None employees people worldwide.

Does Insomni'hack own any subsidiaries ?

Insomni'hack presently has no subsidiaries across any sectors.

How many LinkedIn followers does Insomni'hack have ?

Insomni'hack's official LinkedIn profile has approximately 240 followers.

What is the NAICS classification code for Insomni'hack ?

Insomni'hack is classified under the NAICS code 5415, which corresponds to Computer Systems Design and Related Services.

Does Insomni'hack have a Crunchbase profile ?

No, Insomni'hack does not have a profile on Crunchbase.

Does Insomni'hack have a LinkedIn profile ?

Yes, Insomni'hack maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/insomnihack.

How many cybersecurity incidents has Insomni'hack experienced ?

As of July 30, 2026, Rankiteo reports that Insomni'hack has experienced 14 cybersecurity incidents.

How many peer or competitor companies does Insomni'hack have ?

Insomni'hack has an estimated 41,205 peer or competitor companies worldwide.

What types of cybersecurity incidents has Insomni'hack faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack, Breach and Ransomware.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Insomni'hack

Boost Score +25 with badge (5 left)

751

/1000

Fair

776

/1000

Fair

Insomni'hack Vendor Cyber Rating & Cyber Score

insomnihack.ch

Add Your Compliance Badge

Insomni’hack is a cybersecurity conference and hacking contest, founded in 2008. Now held over 5 days at the SwissTech Convention Center in Lausanne, the event hosts a broad spectrum of workshops, talks, and on-site CTFs and brings together cybersecurity professionals and enthusiasts from around the world. We deliver cutting-edge technical content alongside a world-class live hacking competition designed to push the boundaries of cyber defence, research and community collaboration. Whether you’re a seasoned cyber-researcher, a professional defender, or a keen enthusiast, Insomni’hack is your hub for innovation, connection and real-world challenge. Join us for the 2026 edition: March 16-20, 2026.

Insomni'hack A.I CyberSecurity Scoring

Scoring History

Insomni'hack

Insomni'hack CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Insomni'hack

Cyber Attack

9/2025

ORA814090225

Orange

Breach

8/2025

ORA1770804300

Orange

Ransomware

100

8/2025

ORA1770316673

Insomni'hack

Cyber Attack

8/2025

ORA1764727825

Orange

Ransomware

100

7/2025

ORA1767980221

Orange Cyberdefense

Cyber Attack

5/2025

ORA1777999109

Insomni'hack

Ransomware

100

3/2025

ORA625031825

Insomni'hack

Breach

7/2024

ORA529082025

Orange

Breach

6/2024

ORA1768849235

Insomni'hack

Cyber Attack

01/2024

ORA214221124

Insomni'hack

Breach

100

09/2022

ORA2131141122

Insomni'hack

Cyber Attack

100

03/2022

ORA2548322

Insomni'hack

Breach

1/2022

ORA957082125

Insomni'hack

Ransomware

07/2020

ORA2911822

Loading…

A.I.

Insomni'hack Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Insomni'hack

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for Insomni'hack in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Insomni'hack in 2026.

Incident Types Insomni'hack vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for Insomni'hack in 2026.

Incident History - Insomni'hack (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Insomni'hack Subsidiaries

Insomni'hack

IT Services and IT Consulting

Website: https://insomnihack.ch/?utm_source=linkedIn-page&utm_medium=about-page&utm_campaign=Insomnihack

Company Size: 51-200 employees

OrangeTelecommunications

Imagine with OrangeTechnology, Information and Internet

Orange BusinessIT Services and IT Consulting

Orange EgyptTelecommunications

Orange MarocTelecommunications

Orange TunisieTelecommunications

Orange BankBanking

Orange JordanTelecommunications

Orange MaliTelecommunications

Orange EspañaTelecommunications

Orange PolskaTelecommunications

Orange MarineTelecommunications

Orange WholesaleTelecommunications

GlobecastBroadcast Media Production and Distribution

TOTEMTelecommunications

Elettra TlcTelecommunications

Orange LuxembourgTelecommunications

ParnasseTelecommunications

Viaccess-OrcaTelecommunications

Targeted TV AdvertisingBroadcast Media Production and Distribution

Orange Money Africa and Middle EastTelecommunications

Femmes EntrepreneusesTelecommunications

Internet na doma DSLTelecommunications

Orange ProTélécommunications

Orange EU PolicyTelecommunications

Orange CyberdefenseIT Services and IT Consulting

SensePostComputer and Network Security

Loading…

Insomni'hack Similar Companies

Algar Tech

algartech.com

Somos a Algar Tech CX. Com 26 anos de mercado, atuamos como parceira de negócio para a transformação digital de grandes corporações. Nosso portfólio possui serviços de Relacionamento com o Cliente, que visam melhorar a experiência dos consumidores. Somos mais de 7 mil associados que trabalham com o propósito de conectar pessoas e organizações de um jeito único, aliados a um amplo ecossistema de parceiros. Somos referência no setor, com especialização em indústrias, práticas e com competências para a digitalização. Somos a empresa BPO do Ano na categoria de Médias Operações Multicanal pelo Prêmio Consumidor Moderno 2024 e recebemos o troféu Ouro em Customer Experience pelo Smart Customer. Para trabalhar conosco, acesse o nosso banco de talentos: www.bancodetalentosalgar.com.br Para nos conhecer mais, acesse o nosso site: www.algartech.com/cx

Carelon Global Solutions India

carelonglobal.in

Carelon Global Solutions makes healthcare operations more practical, effective, and efficient. Our global team of more than 25K innovators drives growth, delivers exceptional support, and develops digital tools specifically for health plans, providers, and systems. Each day, our partners and experts from across the globe implement new ways to save time and money — so doctors can focus on care. Formerly known as Legato Health Technologies, Carelon Global Solutions is part of the Carelon family of brands and is a fully owned subsidiary of Elevance Health. Headquartered in the United States, Carelon Global Solutions has talented teams in India, Ireland, the Philippines, and Puerto Rico. Want to be part of something meaningful? Join our growing team. We believe that when bold talent meets limitless thinking, the possibilities are endless. As part of our India team, you’ll work alongside some of the best minds in the business to solve healthcare’s most complex challenges. You’ll be part of an exciting, fast-paced, and supportive company culture, where all associates receive: • Competitive pay. • Generous benefits. • Training, mentorship, and growth. • Hybrid workplace flexibility. • The opportunity to help others and make a difference. Follow our Carelon Global Solutions India LinkedIn page for the latest job postings and timely company news.

Zensar Technologies

zensar.com

Zensar stands out as a premier technology consulting and services company, embracing an ‘experience-led everything’ philosophy. We are creators, thinkers, and problem solvers passionate about designing digital experiences that are engineered into scale-ready products, services, and solutions to deliver superior engagement to high-growth companies. This full lifecycle capability – from experience to engineering to engagement – is what makes us unique. This integrated approach also means that we harness the power of technology, creativity, and insight to deliver impact — ensuring our work focuses not just on technology but also on the people who use it. Part of the $4.4 billion RPG Group, Zensar is headquartered in Pune, India. Our 10,000+ employees work across 30+ locations worldwide, including Seattle, Princeton, Cape Town, London, Singapore, and Mexico City. As an organization, we are diverse and multi-dimensional and unite across geographies and skill sets to deliver products and services that are value-driven, environmentally conscious, and human-centered. To know more, visit us at www.zensar.com.

Neobpo

www.neobpo

Somos especializados em integrar tecnologia com inteligência humana, oferecendo soluções digitais que promovem transformação e eficiência operacional. Nosso foco é gerar valor por meio de resultados reais, utilizando inteligência digital para atender às necessidades específicas de cada cliente. Mergulhamos nos desafios de empresas que buscam inovação, modernização e escalabilidade, oferecendo soluções seguras e personalizadas para impulsionar seu crescimento. Adotamos uma abordagem consultiva ao longo de toda a jornada, identificando oportunidades estratégicas desde o primeiro contato, proporcionando soluções sob medida que combinam dados, automação e atendimento dedicado. O impacto que geramos vai além da entrega de resultados. Transformamos a forma como nossos clientes operam, melhorando sua produtividade, segurança e escalabilidade, garantindo um crescimento sustentável e criando valor mensurável para seus negócios.

Ingram Micro

ingrammicro.com

Ingram Micro is a leading technology company for the global information technology ecosystem. With the ability to reach nearly 90% of the global population, we play a vital role in the worldwide IT sales channel, bringing products and services from technology manufacturers and cloud providers to a highly diversified base of business-to-business technology experts. Through Ingram Micro Xvantage™, our AI-powered digital platform, we offer what we believe to be the industry’s first comprehensive business-to-consumer-like experience, integrating hardware and cloud subscriptions, personalized recommendations, instant pricing, order tracking, and billing automation. We also provide a broad range of technology services, including financing, specialized marketing, and lifecycle management, as well as technical pre- and post-sales professional support. Learn more at www.ingrammicro.com.

LexisNexis

cb lexisnexis.com

LexisNexis is a leading innovator of private, secure, and authoritative Legal AI solutions that help legal and business professionals draft full documents with ease, make informed decisions faster, and deliver outstanding work and improved outcomes, all powered by trusted content. LexisNexis Legal & Professional serves customers in more than 150 countries with 11,800 employees worldwide, and is part of RELX, a global provider of information-based analytics and decision tools for professional and business customers.

T-Systems International

t-systems.com

Your digitalization partner with industry expertise With locations in more than 26 countries and over 26,000 employees (2024), T-Systems is one of the leading providers of digital services in Europe. The Deutsche Telekom subsidiary is headquartered in Germany and has a presence in Europe as well as in selected core markets and strategic production locations. T-Systems can provide a global production and supply chain to companies operating worldwide. T-Systems offers integrated end-to-end IT solutions, driving the digital transformation of companies in all industries and the public sector. T-Systems’ focus industries are automotive, the public sector, healthcare and transport. For these areas, T-Systems develops industryspecific solutions – so-called vertical applications. The comprehensive portfolio of services includes secure operation of traditional IT infrastructures, migration to private cloud and public cloud environments of hyperscalers, as well as management of hybrid and multi-cloud infrastructures. T-Systems integrates customized platforms, industry-specific applications and innovative technologies such as artificial intelligence (AI), big data and blockchain into these infrastructures. To achieve this, the Telekom subsidiary works closely with leading global technology partners. The end-to-end services also include state-of-the-art security solutions and data protection in accordance with DSGVO requirements. T-Systems pursues a holistic approach: consulting (advisory) and solutions from the areas of digital, cloud services and security are offered from a single source. Become one of us: https://www.t-systems.com/de/en/company/careers Imprint: https://www.t-systems.com/de/en/imprint

Avanade

bit.ly

Avanade is the world’s leading expert on Microsoft. Trusted by over 7,000 clients worldwide, we deliver AI-driven solutions that unlock the full potential of people and technology, optimize operations, foster innovation and drive growth. As Microsoft’s Global SI Partner we combine global scale with local expertise in AI, cloud, data analytics, cybersecurity, and ERP to design solutions that prioritize people and drive meaningful impact. We champion diversity, inclusion, and sustainability, ensuring our work benefits society and business.

Tata Consultancy Services

tcs.com

Tata Consultancy Services (TCS) is the technology partner of choice for industry leading organizations worldwide. Since its inception in 1968, TCS has upheld the highest standards of innovation, engineering excellence, and customer service. It has set an aspiration to become the world's largest AI-led technology services company and is enabling its clients to transform themselves across the full AI stack, from infrastructure to intelligence. Rooted in the heritage of the Tata Group, TCS is focused on creating long term value for its clients, its investors, its employees, and the community at large. With a highly skilled workforce spread across 55 countries and 202 service delivery centers across the world, the company has been recognized as a top employer in six continents. With the ability to rapidly apply and scale new technologies, the company has built long term partnerships with its clients – helping them emerge as perpetually adaptive enterprises. Many of these relationships have endured into decades and navigated every technology cycle, from mainframes in the 1970s to artificial intelligence today. TCS sponsors 14 of the world’s most prestigious marathons and endurance events, including the TCS New York City Marathon, TCS London Marathon and TCS Sydney Marathon with a focus on promoting health, sustainability, and community empowerment. Caution against fraudulent job offers: TCS doesn’t charge any fee throughout the recruitment process. Refer here: https://www.tcs.com/careers/india/recruitment-fraud-alert

Loading…

NEWS

Insomni'hack CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

April 04, 2025 07:00 AM

Cyber security conference - Insomni'hack

On Wednesday 13 March, Dr. Anastasiia Kucherenko from the Gen Learning Center took part in the Insomni'hack cybersecurity conference.

Read Article

December 24, 2024 08:00 AM

Breaking Into Cybersecurity: Essential Skills and Certifications in Spain

Mastering essential skills like network security, ethical hacking, and communication, along with certifications such as CISSP and CompTIA CySA+, is crucial.

Read Article

March 06, 2024 04:18 AM

InsomniHack 2024

Insomni'hack is a security conference and hacking contest founded and organized by SCRT S.A. - which is now Orange Cyberdefense Switzerland - since 2008.

Read Article

March 03, 2023 08:00 AM

Safety Net: Hackers for hire help companies find their weak spots

Hackers are being hired by more companies and governments for their expertise to spot vulnerabilities to cyberattacks. Read more.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-67595

SUMMARY

VaahCMS versions 2.0.0 through 2.3.4 contain a malicious obfuscated JavaScript payload embedded in the Blade template responsible for rendering security OTP emails, allowing remote attackers to execute unauthorized code in any browser that renders the affected email template with JavaScript enabled. The payload establishes a WebSocket connection to a hardcoded command-and-control endpoint, installs a password-field keylogger using MutationObserver to capture dynamically added inputs, scrapes WhatsApp Web DOM content, and accepts remote commands to redirect or overwrite the rendered page.

Published

Date2026-07-29

Updated

Date2026-07-29

RISK INFORMATION (Score: 8.1)

cvss3

Base Score: 8.1

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.2

REFERENCES

CVE-2026-15157

SUMMARY

undici does not validate the type property of a duck-typed blob-like request body before using it as the Content-Type header on the HTTP/1.1 dispatcher. In undici before 6.28.0, from 7.0.0 up to before 7.29.0, and from 8.0.0 up to before 8.9.0, an application that passes a hand-rolled blob-like body (via request, stream, pipeline, or dispatch) whose type is derived from untrusted input allows an attacker to inject CRLF sequences and append arbitrary HTTP headers, potentially smuggling a second request past the upstream. Native Blob objects are safe because their constructor strips CRLF from the type, and fetch is unaffected because it validates headers, but ecosystem libraries that build duck-typed blob shapes from user input can reach the vulnerable path. This is the same defect class as CVE-2022-35948 and CVE-2026-1527, on a header sink that the earlier fixes did not cover. The issue is fixed in undici 6.28.0, 7.29.0, and 8.9.0.

Published

Date2026-07-29

Updated

Date2026-07-29

RISK INFORMATION (Score: 4.2)

cvss3

Base Score: 4.2

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

Impact Score

2.5

Exploitability

1.6

REFERENCES

CVE-2026-14643

SUMMARY

undici's cache interceptor mishandles optional whitespace placed around the equals sign of a qualified no-cache or private Cache-Control directive. In undici from 7.0.0 up to before 7.29.0 and from 8.0.0 up to before 8.9.0, the parser either drops the directive or stores a field name with literal quote characters, so the cache decision fails to recognize the qualification and the response is stored. In shared-cache mode, this lets a response containing one user's authenticated data be served from cache to a later caller, including an unauthenticated one, when both requests resolve to the same cache key. It affects applications that enable the cache interceptor in shared mode, forward Authorization headers upstream, and receive cacheable responses with qualified directives padded with whitespace around the equals sign. This is the whitespace-around-equals variant that the fix for CVE-2026-9678 did not normalize, and it is fixed in undici 7.29.0 and 8.9.0.

Published

Date2026-07-29

Updated

Date2026-07-29

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2025-69949

SUMMARY

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in check_availability.php via the parameters emailid and email.

Published

Date2026-07-29

Updated

Date2026-07-29

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2025-69945

SUMMARY

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /doctor/edit-patient.php?editid=1.

Published

Date2026-07-29

Updated

Date2026-07-29

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

https://github.com/um-dsp/TaintRadar/blob/main/sql_injection_cves/hospitalmanagementsystemproject/20250811-hospital-management-system-edit-patient.php-editid-sqli/20250811-hospital-management-system-edit-patient.php-editid-sqli.md

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…