What is the official website of INSS ?

The official website of INSS is http://www.inss.gov.br.

What is INSS's cybersecurity risk score?

INSS has an AI-generated cybersecurity risk score of 757 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has INSS experienced?

According to Rankiteo, INSS currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has INSS been affected by any supply chain cyber incidents ?

According to Rankiteo, INSS has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does INSS have SOC 2 Type 1 certification ?

According to Rankiteo, INSS is not certified under SOC 2 Type 1.

Does INSS have SOC 2 Type 2 certification ?

According to Rankiteo, INSS does not hold a SOC 2 Type 2 certification.

Does INSS comply with GDPR ?

According to Rankiteo, INSS is not listed as GDPR compliant.

Does INSS have PCI DSS certification ?

According to Rankiteo, INSS does not currently maintain PCI DSS compliance.

Does INSS comply with HIPAA ?

According to Rankiteo, INSS is not compliant with HIPAA regulations.

Does INSS have ISO 27001 certification ?

According to Rankiteo,INSS is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does INSS operate in ?

INSS operates primarily in the Government Administration industry.

How many employees does INSS have ?

INSS employs approximately 17,778 people worldwide.

Does INSS own any subsidiaries ?

INSS presently has no subsidiaries across any sectors.

How many LinkedIn followers does INSS have ?

INSS's official LinkedIn profile has approximately 64,476 followers.

What is the NAICS classification code for INSS ?

INSS is classified under the NAICS code 92, which corresponds to Public Administration.

Does INSS have a Crunchbase profile ?

No, INSS does not have a profile on Crunchbase.

Does INSS have a LinkedIn profile ?

Yes, INSS maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/inss.

How many cybersecurity incidents has INSS experienced ?

As of August 8, 2026, Rankiteo reports that INSS has experienced 1 cybersecurity incidents.

How many peer or competitor companies does INSS have ?

INSS has an estimated 13,152 peer or competitor companies worldwide.

What types of cybersecurity incidents has INSS faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

INSS

Boost Score +25 with badge (5 left)

757

/1000

Fair

782

/1000

Fair

INSS Vendor Cyber Rating & Cyber Score

inss.gov.br

Add Your Compliance Badge

O Instituto Nacional do Seguro Social (INSS) é uma autarquia do Governo Federal do Brasil que recebe as contribuições para a manutenção do Regime Geral da Previdência Social, sendo responsável pelo pagamento da aposentadoria, pensão por morte, auxílio-doença, auxílio-acidente, entre outros benefícios previstos em lei. O INSS trabalha junto com a Dataprev, empresa de tecnologia que faz o processamento de todos os dados da Previdência. Está vinculado ao Ministério da Previdência Social.

INSS A.I CyberSecurity Scoring

Scoring History

INSS

INSS CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

INSS

Cyber Attack

3/2026

BININSGOO177325...

Loading…

A.I.

INSS Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for INSS

Incidents vs Government Administration Industry Avg (This Year)

INSS has 30.07% fewer incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

INSS has 2.91% fewer incidents than the average of all companies with at least one recorded incident.

Incident Types INSS vs Government Administration Industry Avg (This Year)

INSS reported 1 incidents this year: 1 cyber attacks, 0 ransomware, 0 vulnerabilities, 0 data breaches, compared to industry peers with at least 1 incident.

Incident History - INSS (X = Date, Y = Severity)

Loading…

SUBSIDIARY

INSS Subsidiaries

Parent Company

INSS

Government Administration

Website: http://www.inss.gov.br

Company Size: 10,001+ employees

No subsidiary data available for this company.

Loading…

INSS Similar Companies

State of Missouri

mo.gov

Build the Missouri of tomorrow. Ensure a strong foundation today. Join a group of innovative team members focused on driving the State of Missouri forward. As public servants, our team members have the opportunity to produce work that is both lasting and important. This work serves to protect families, communities, and our natural resources. No matter where you are in your career, whether entry level or senior level, a career with the State of Missouri will challenge you to grow both personally and professionally. Though one employer, there is no shortage of exciting opportunities as there are many career paths you may take within the State. If you are searching for a job that transforms lives, including your own, a career with the State of Missouri is the perfect fit!

eThekwini Municipality

durban.gov.za

EThekwini Municipality is a Metropolitan Municipality found in the South African province of KwaZulu-Natal. Home to the world-famous city of Durban. EThekwini is the largest City in the province and the third largest city in the country. It is a sophisticated cosmopolitan city of over 3 468 088 people. It is known as the home of Africa's best-managed, busiest port and is also a major centre of tourism because of the city's warm subtropical climate and extensive beaches. The eThekwini Municipality is an employer of choice, with excellent working conditions and competitive salary packages for employees. The Municipality is committed to creating a great place to work by creating development opportunities for employees to grow. Working for eThekwini Municipality will give you a chance to make a difference in people’s lives and become part of our team to make Durban the most caring and liveable city in Africa. Some facts about eThekwini Municipality: 1. Known as South Africa’s Playground – plenty of places to visit and activities to do 2. First African city to host the Commonwealth Games 3. Historically rich with Heritage sites for Nelson Mandela and Mahatma Ghandi 4. Home to the Comrades Marathon – The worlds’ largest ultra-marathon 5. The world’s tallest bungee swing at the Moses Mabhida stadium 6. Durban Aliwal Shoal – a world top diving site 7. Durban harbour - 9th largest harbour in the world - busiest container port in Africa 8. Africa’s first Aerotropolis – Trade Port with direct links globally 9. One of the top surfing destinations in South Africa 10. Ushaka Marine World – Biggest Aquarium in Africa

State of Illinois

illinois.gov

The government of Illinois, under the Constitution of Illinois, has three branches of government: executive, legislative and judicial. The executive branch is split into several statewide elected offices, with the Governor as chief executive, and has numerous departments, agencies, boards and commissions. Legislative functions are granted to the General Assembly, composed of the 118-member House of Representatives and the 59-member Senate. The judiciary is composed of the Supreme Court and lower courts. The government of Illinois has numerous departments, agencies, boards and commissions, but the code departments, so called because they're established by the Civil Administrative Code of Illinois, provide most of the state's services: Department on Aging Department of Agriculture Department of Central Management Services Department of Children and Family Services Department of Commerce and Economic Opportunity Department of Corrections Department of Employment Security Department of Financial and Professional Regulation Department of Healthcare and Family Services Department of Human Rights Department of Human Services Department of Juvenile Justice Department of Labor Department of the Lottery Department of Natural Resources Department of Public Health Department of Revenue Department of State Police Department of Transportation Department of Veterans' Affairs

U.S. Department of Education

ed.gov

Our mission is to promote student achievement and preparation for global competitiveness by fostering educational excellence and ensuring equal access. ED is dedicated to: • Establishing policies on federal financial aid for education, and distributing as well as monitoring those funds. • Collecting data on America's schools and disseminating research. • Focusing national attention on key educational issues. • Prohibiting discrimination and ensuring equal access to education.

FDA

fda.gov

The Food and Drug Administration is an agency within the Department of Health and Human Services. The FDA is responsible for protecting the public health by ensuring the safety, efficacy, and security of human and veterinary drugs, biological products, and medical devices; and by ensuring the safety of our nation's food supply, cosmetics, and products that emit radiation. FDA also has responsibility for regulating the manufacturing, marketing, and distribution of tobacco products to protect the public health and to reduce tobacco use by minors. FDA is responsible for advancing the public health by helping to speed innovations that make medical products more effective, safer, and more affordable and by helping the public get the accurate, science-based information they need to use medical products and foods to maintain and improve their health. FDA also plays a significant role in the Nation's counterterrorism capability. FDA fulfills this responsibility by ensuring the security of the food supply and by fostering development of medical products to respond to deliberate and naturally emerging public health threats.

Nav

nav.no

Nav er en viktig del av sikkerhetsnettet i velferdsstaten. Vi skal bidra til at flere kommer i arbeid og færre går på stønad, og samtidig sørge for at de som trenger det er sikra inntekt og økonomisk trygghet gjennom rett pengestøtte til rett tid. For å løse dette samfunnsoppdraget forvalter Nav om lag en tredel av statsbudsjettet, gjennom ordninger som arbeidsrettede tiltak, dagpenger, arbeidsavklaringspenger, sykepenger, pensjon, økonomisk sosialhjelp, foreldrepenger, barnetrygd og kontantstøtte. Nav tilbyr tjenester, ytelser og stønader til både privatpersoner og arbeidsgivere. For å sikre helhetlige tjenester, samarbeider vi tett med arbeidslivet, kommune-, helse- og utdanningssektoren, andre statlige virksomheter og frivillige aktører.

Region Stockholm

regionstockholm.se

Är du beredd att tänka nytt och hitta framtidens lösningar? För vårt framtida uppdrag behöver vi medarbetare med hög kompetens, stort engagemang och som strävar efter ständig förbättring. Vid din sida kan du få engagerade kollegor inom hundratals kvalificerade yrken – ekonomer, sjuksköterskor, jurister, radiologer, ingenjörer och kirurger. Stockholms läns landsting är en av landets största arbetsgivare med ett livsviktigt uppdrag. Vi ger två miljoner invånare en effektiv kollektivtrafik och en god hälso- och sjukvård i landets snabbast växande region. Varje dag, dygnet runt.

City of Cape Town

capetown.gov.za

Cape Town, or the Mother City, is South Africa’s oldest city, its second-most populous and the legislative capital. It is made up of a diverse population, a rich history, world-famous tourist attractions and an exciting calendar of international and local events. More than 231 councillors and 26 225 staff serve 4 million residents across a sprawling and cosmopolitan metro of 2 500 square kilometres. The City provides all the services normally associated with a full-service municipality, such as water, electricity, waste removal, sanitation, new infrastructure, roads, public spaces, facilities, housing developments, the upgrade of informal settlements and existing infrastructure, clinics and more. To meet the current and future needs of its residents, the City of Cape Town has formulated strategies and policies to guide development and growth. Central to these is the Integrated Development Plan (IDP), which is a five-year plan that informs the City’s policy and budget decisions. The City’s strong sense of community makes it one of the best places to live, work and raise a family. We offer rewarding career opportunities, great benefits and competitive salaries. New opportunities are posted at www.capetown.gov.za/careers.

State of Oregon

cb oregon.gov

Official LinkedIn page for the state of Oregon. Oregon is a state in the Pacific Northwest region of the United States. It is located on the Pacific coast, with Washington to the north, California to the south, Nevada on the southeast and Idaho to the east. The Columbia and Snake rivers delineate much of Oregon's northern and eastern boundaries, respectively. The area was inhabited by many indigenous tribes before the arrival of traders, explorers, and settlers who formed an autonomous government in Oregon Country in 1843. The Oregon Territory was created in 1848, and Oregon became the 33rd state on February 14, 1859.

Loading…

NEWS

INSS CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 09, 2026 08:00 AM

Toward Strategic Agility: A Case for South Korea's Evolving and Adaptive Approach to Cybersecurity

An argument for "strategic agility" in South Korea's cybersecurity policy to counter rising breaches and geopolitical uncertainty.

Read Article

January 21, 2026 08:00 AM

INSS hosts counterparts from Japan’s National Institute for Defense Studies (NIDS)

On 21 Jan, the Institute for National Strategic Studies (INSS) welcomed two experts from Japan's National Institute for Defense Studies...

Read Article

November 27, 2025 08:00 AM

Report: North Korea ready to use AI in military operations

It's widely recognized that North Korean cyber actors are leveraging AI tools to accelerate cryptocurrency theft operations.

Read Article

October 01, 2025 07:00 AM

Campaigning for Iraq's November elections to begin Friday

ERBIL, Kurdistan Region - Iraq's parliamentary election campaigning will officially begin on Friday, the Independent High Electoral...

Read Article

September 26, 2025 07:00 AM

Iraq’s electoral commission probes campaign violations for AI

ERBIL, Kurdistan Region - Iraq's electoral commission is investigating allegations of campaign violations for the use of Artificial...

Read Article

September 06, 2025 07:00 AM

How AI Is Helping Financial Services Companies in Brazil Cut Costs and Improve Efficiency

How AI helps financial services in Brazil cut costs and boost efficiency — beginner's guide with real Brazil examples and practical steps.

Read Article

July 07, 2025 07:00 AM

The Trump Administration’s Withdrawal from the Fight Against Foreign Interference—Strategic Implications

Donald Trump's return to the White House in January 2025 signaled dramatic changes in how the United States addresses threats of foreign...

Read Article

April 27, 2025 07:00 AM

How Israeli Military Technology Continues to Improve the US Military

After the 1973 Yom Kippur War, the US Department of Defense undertook an extensive evaluation of the conflict, commissioning no fewer than...

Read Article

April 09, 2025 07:00 AM

INSS: 1.5TB data hacker caught in Iraq - Shafaq News

Iraq's National Security Service (INSS) revealed on Wednesday it had arrested a suspect accused of orchestrating one of the country's most significant...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-52880

SUMMARY

Klever-Go is the Go implementation of the Klever blockchain protocol. Versions from 1.7.14 through 1.7.17 are vulnerable to a remotely triggerable denial of service. Both REST APIs are started with the Gin Engine.Run convenience method, which serves requests through Go's default HTTP server with no ReadHeaderTimeout, ReadTimeout, or MaxHeaderBytes configured. As a result, incoming connections that never complete their request headers are held open indefinitely. When a REST listener is reachable beyond localhost through the documented all-interface bind or a Docker port-publish deployment, a single unauthenticated client can open many slow-header connections and hold them open until server file descriptors are exhausted, preventing the API from accepting new connections. This renders the REST API unavailable to legitimate clients. This issue is fixed in version 1.7.18.

Published

Date2026-08-07

Updated

Date2026-08-07

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

3.9

REFERENCES

CVE-2026-52879

SUMMARY

Klever-Go is the Go implementation of the Klever blockchain protocol. In versions 1.7.14 through 1.7.17, the direct-message ingress handler spawns a new goroutine for every incoming direct message before the processor-level antiflood layer makes any admission decision, with no semaphore, throttler, or bound on the number of concurrent in-flight spawns. Because the antiflood check runs inside the spawned goroutine rather than before it, a single connected peer can open a direct-send stream and send a stream of well-formed messages to force unbounded goroutine creation, where each goroutine allocates its own stack and holds a message reference until processing completes, adding scheduler and garbage-collection pressure faster than the runtime can drain it. This lets one peer degrade the node's availability and its ability to process legitimate traffic, resulting in a remotely triggerable denial of service. The issue is fixed in 1.7.18.

Published

Date2026-08-07

Updated

Date2026-08-07

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

3.9

REFERENCES

CVE-2026-52878

SUMMARY

Klever-Go is the Go implementation of the Klever blockchain protocol. Versions 1.7.14 through 1.7.17 are vulnerable to a nil-pointer panic triggered by a protobuf Transaction whose embedded RawData sub-message is omitted. This omission causes RawData to decode to nil. Every transaction gossiped on the Klever-Go P2P network is decoded and validated synchronously inside the libp2p pubsub topic-validator callback, where txVersionChecker.CheckTxVersion dereferences tx.RawData.Version with no nil check. Because the libp2p pubsub callback, the underlying go-libp2p-pubsub validation worker, and Klever's own network/p2p layer install no recover(), the panic propagates and crashes the entire node process. The attacker payload is a 3-byte protobuf message; no validator key, stake, funds, or on-chain account is required, and delivery aimed at enough of the BLS validator set can halt block production, resulting in a chain halt. This issue has been fixed in version 1.7.18.

Published

Date2026-08-07

Updated

Date2026-08-07

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

3.9

REFERENCES

CVE-2026-49343

SUMMARY

Klever-Go is the Go implementation of the Klever blockchain protocol. In versions prior to 1.7.18, the account-data trie syncers are vulnerable to a resource-exhaustion flaw that leaks bounded throttler slots on error paths. In syncDataTrie() (in both userAccountsSyncer.go and kappAccountsSyncer.go), StartProcessing() reserves a slot from the NumGoRoutinesThrottler, but the corresponding EndProcessing() is only called on the success path and on the duplicate-root early return. As a result, any error from trie.NewTrie(), trie.NewTrieSyncer(), or trieSyncer.StartSyncing() (including the network-dependent timeout path) permanently consumes one slot for the lifetime of the throttler. An attacker who can repeatedly cause trie-node sync failures or timeouts during bootstrap can exhaust the bounded throttler, after which further account-data trie syncs stop making progress and SyncAccounts() returns a timeout. Because epoch bootstrap in syncUserAccountsState() and syncKappAccountsState() aborts on any such error, this causes bootstrap to fail, a core availability issue affecting fresh, restarting, or resyncing nodes and validators. This issue is fixed in version 1.7.18.

Published

Date2026-08-07

Updated

Date2026-08-07

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-48122

SUMMARY

Ruby LSP is an implementation of the language server protocol for Ruby. Several workspace-level settings in the Ruby LSP VS Code extension prior to version 0.10.4 could override the path to the Ruby executable, the version manager executables, or the Bundler `Gemfile` used at startup. A malicious repository containing a `.vscode/settings.json` could set these values to attacker-controlled targets. Opening and trusting the repository would then execute code with the privileges of the developer. The Ruby LSP gem and clients of the language server in other editors are not affected. Version 0.10.4 of the Ruby LSP VS Code extension fixes the issue.

Published

Date2026-08-07

Updated

Date2026-08-07

RISK INFORMATION (Score: )

cvss4

Base Score: 5.4

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/Shopify/ruby-lsp/security/advisories/GHSA-2x7g-8mp4-572w

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…