What is the official website of IPEN ?

The official website of IPEN is https://www.ipen.br/.

What is IPEN's cybersecurity risk score?

IPEN has an AI-generated cybersecurity risk score of 764 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has IPEN experienced?

According to Rankiteo, IPEN currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has IPEN been affected by any supply chain cyber incidents ?

According to Rankiteo, IPEN has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does IPEN have SOC 2 Type 1 certification ?

According to Rankiteo, IPEN is not certified under SOC 2 Type 1.

Does IPEN have SOC 2 Type 2 certification ?

According to Rankiteo, IPEN does not hold a SOC 2 Type 2 certification.

Does IPEN comply with GDPR ?

According to Rankiteo, IPEN is not listed as GDPR compliant.

Does IPEN have PCI DSS certification ?

According to Rankiteo, IPEN does not currently maintain PCI DSS compliance.

Does IPEN comply with HIPAA ?

According to Rankiteo, IPEN is not compliant with HIPAA regulations.

Does IPEN have ISO 27001 certification ?

According to Rankiteo,IPEN is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does IPEN operate in ?

IPEN operates primarily in the Government Administration industry.

How many employees does IPEN have ?

IPEN employs approximately 966 people worldwide.

Does IPEN own any subsidiaries ?

IPEN presently has no subsidiaries across any sectors.

How many LinkedIn followers does IPEN have ?

IPEN's official LinkedIn profile has approximately 13,373 followers.

What is the NAICS classification code for IPEN ?

IPEN is classified under the NAICS code 92, which corresponds to Public Administration.

Does IPEN have a Crunchbase profile ?

No, IPEN does not have a profile on Crunchbase.

Does IPEN have a LinkedIn profile ?

Yes, IPEN maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/ipen.

How many cybersecurity incidents has IPEN experienced ?

As of August 9, 2026, Rankiteo reports that IPEN has not experienced any cybersecurity incidents.

How many peer or competitor companies does IPEN have ?

IPEN has an estimated 13,152 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

IPEN

Boost Score +25 with badge (5 left)

764

/1000

Fair

789

/1000

Fair

IPEN Vendor Cyber Rating & Cyber Score

ipen.br

Add Your Compliance Badge

IPEN/CNEN - Instituto de Pesquisas Energéticas e Nucleares

IPEN A.I CyberSecurity Scoring

Scoring History

IPEN

IPEN CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

IPEN Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for IPEN

Incidents vs Government Administration Industry Avg (This Year)

No incidents recorded for IPEN in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for IPEN in 2026.

Incident Types IPEN vs Government Administration Industry Avg (This Year)

No incidents recorded for IPEN in 2026.

Incident History - IPEN (X = Date, Y = Severity)

Loading…

SUBSIDIARY

IPEN Subsidiaries

IPEN

Government Administration

Website: https://www.ipen.br/

Company Size: 966

Governo do Estado de São PauloGovernment Administration

FAPESPResearch Services

ARTESP - Agência Reguladora de Serviços Públicos Delegados de Transporte do Estado de São PauloTransportation Programs

Centro Paula SouzaGovernment Administration

CETESB - Companhia Ambiental do Estado de São PauloGovernment Administration

Universidade Estadual de CampinasPesquisa e desenvolvimento cientifico

DER - Departamento de Estradas de Rodagem do Estado de São PauloGovernment Administration

SabespEnvironmental Services

Secretaria de Desenvolvimento Econômico do Estado de São PauloGovernment Administration

Subsecretaria de Parcerias do Estado de São PauloAdministração pública, defesa e seguridade social

Universidade de São PauloEducação superior

Agência USP de InovaçãoResearch Services

Centro de Tecnologia da Informação de São CarlosInformation Technology & Services

IAMSPE - Instituto de Assistência Médica ao Servidor Público EstadualHuman Resources

Secretaria de Estado da Saúde de São PauloUtilities

DERSACivil Engineering

Instituto de Pesos e Medidas - IpemGovernment Administration

Metrô de São PauloRail Transportation

Faculdade de Medicina de São José do Rio Preto - FAMERPResearch Services

Faculdade de Medicina de Marília - FamemaHigher Education

Hospital das Clínicas da Fac. de Medicina de Rib. Preto da Univ. de São Paulo - USPHospitals and Health Care

Fundação SeadePublic Policy Offices

FUNDAP GuatemalaCivic and Social Organizations

EMPRESA METROPOLITANA DE TRANSPORTES URBANOS DE SÃO PAULO – EMTU/SPTruck Transportation

Fundação Pró-Sangue Hemocentro de São PauloHealth, Wellness & Fitness

Porto de São SebastiãoTransportation, Logistics, Supply Chain and Storage

CEDAB-Centro de Estudos Desportivos e Artísticos do BrasilEntertainment Providers

EMAE - Empresa Metropolitana de Águas e Energia S.A.Utilities

Companhia Paulista de Obras e ServiçosCivil Engineering

Desenvolve SPFinancial Services

Loading…

IPEN Similar Companies

Etat de Vaud

vd.ch

Le canton de Vaud, c’est plus de 800 000 personnes vivant dans plus de 300 communes ! Rejoindre l’Administration cantonale vaudoise, c’est s’engager aux côtés de près de 40’000 personnes unies dans un même but : servir la population. Pourquoi nous suivre ? Dédiez votre quart d’heure vaudois aux opportunités de carrière et à l’info du canton ! Retrouvez les actualités vaudoises, les décisions du Grand Conseil et du Conseil d’Etat qui orientent les politiques publiques, les infos pratiques et les chiffres clés. Découvrez aussi des portraits des collaboratrices et collaborateurs au cœur de l’action et des offres d’emploi variées. Pourquoi nous rejoindre ? Nous rejoindre, c’est s’engager auprès d’un employeur fiable, éthique, équitable et tourné vers la durabilité. Parce que les envies, les attentes et les besoins évoluent tout au long d’une carrière, nous proposons des formations, des opportunités de développement de carrière ainsi qu’un équilibre entre vie privée et vie professionnelle. Vous aussi contribuez à l’actualité et à l’avenir du canton ! Retrouvez toutes nos offres d’emploi sur www.vd.ch/offres-demploi

Correios

correios.com.br

Empresa Brasileira de Correios e Telégrafos foi criada como empresa em 1969 por decreto lei. Hoje conta com mais de 100.000 empregados, tem presença em todos os municípios do Brasil. NEGÓCIO: Soluções que aproximam. MISSÃO: Fornecer soluções acessíveis e confiáveis para conectar pessoas, instituições e negócios, no Brasil e no mundo. VISÃO: Ser uma empresa de classe mundial. VALORES: A. Ética B. Meritocracia C. Respeito às Pessoas D. Compromisso com o Cliente E. Sustentabilidade

Department of Education and Youth

www.gov.ie

The Department of Education and Youth is a ministerial department of the Irish State with responsibility for education. Our mission to facilitate children and young people, through learning, to achieve their full potential and contribute to Ireland’s social, economic and cultural development. The current Minister for Education is Hildegarde Naughton TD, and the Minister of State with responsiblity for Special Education and Inclusion is Michael Moynihan TD.

South African Revenue Service (SARS)

sars.gov.za

Its main functions are to: collect and administer all national taxes, duties and levies; collect revenue that may be imposed under any other legislation, as agreed on between SARS and an organ of state or institution entitled to the revenue; provide protection against the illegal importation and exportation of goods; facilitate trade; and advise the Minister of Finance on all revenue matters

Government of Alberta

alberta.ca

Work with the Alberta government to build a stronger province for current and future generations. We offer diverse and rewarding employment opportunities in an environment that encourages continuous learning and career growth. We are one of the largest employers in Alberta with over 27,000 employees throughout the province. We are an award winning organization that values respect, accountability, integrity, and excellence. Our employees share a common vision of proudly working together to build a stronger province and make a positive and lasting difference in the lives of Albertans. The people of Alberta enjoy a very high quality of life, including the lowest overall taxes in Canada. www.jobs.alberta.ca Please see our comment policy: https://www.alberta.ca/social-media-comment-policy.aspx

Comunidad de Madrid

comunidad.madrid

Si necesitas información general y especializada sobre los servicios públicos madrileños puedes llamar al teléfono de Atención al Ciudadano 012. En la Comunidad de Madrid estamos encantados de recibir comentarios y favorecer el diálogo, por eso te proponemos unas normas básicas de participación: - Respeta a los demás usuarios y haz un uso adecuado de la red al publicar un comentario. Se eliminará cualquier mensaje difamatorio, ofensivo, amenazador, grosero o que esté penado por las leyes españolas. - Haz comentarios relacionados con lo publicado, sé lo más breve posible y evita las mayúsculas. Se borrarán aquellos comentarios que se consideren fuera de tema. - No están permitidos los mensajes que contengan spam o publicidad intrusiva. - La Comunidad de Madrid no se hace responsable del contenido de las opiniones que los participantes dejan en los comentarios, ni se identifica con ellas. ¡Esperamos tu participación! Síguenos también en www.twitter.com/ComunidadMadrid y www.facebook.com/ComunidadeMadrid.

UWV

uwv.nl

Bij UWV werken we aan een samenleving waarin iedereen mee kan doen. We helpen mensen op weg bij het vinden of behouden van werk. In geval van ziekte kijken we wat iemand nog wél kan. En als werken niet mogelijk is, zorgt UWV snel voor inkomen. We geven op deskundige en efficiënte wijze uitvoering aan werknemersverzekeringen, zoals de WW, WIA, WAO, WAZ, Wajong, Wazo en Ziektewet. Bij UWV werken ruim 22.000 mensen, die allen bijdragen aan een samenleving waarin iedereen mee kan doen. Onze medewerkers zijn er voor werkzoekenden, werkenden, mensen met een afstand tot de arbeidsmarkt, stakeholders én werkgevers. Als je bij UWV werkt, weet je waar je het voor doet: mensen verder helpen met werk en inkomen. Werken bij UWV is tastbaar, je werkt aan echte vraagstukken van mensen, ieder met eigen uitdagingen, ambities en drijfveren. Zo leveren medewerkers van UWV allemaal een bijdrage aan een samenleving waarin iedereen mee kan doen. Want bij UWV werk je niet alleen voor jezelf. Je werkt voor ons allemaal.

I WORK FOR SA

sa.gov.au

The OFFICIAL careers page for the South Australian Government. The South Australian Public Sector is the State's largest workforce. We are an employer of choice that reflects the diverse community we serve. Our people are from a range of backgrounds and vocations, from entry level, mid-career and leadership professionals as well as graduates, apprentices and trainees. As a public sector employee, you can be proud that the work you do supports our community and our State's prosperity. For a career with more opportunity, flexibility and purpose, visit IWORKFOR.SA.gov.au

CONICET

conicet.gov.ar

El Consejo Nacional de Investigaciones Científicas y Técnicas (CONICET) es el principal organismo dedicado a la promoción de la ciencia y la tecnología en la Argentina. Su actividad se desarrolla en cuatro grandes áreas: • Ciencias agrarias, ingeniería y de materiales • Ciencias biológicas y de la salud • Ciencias exactas y naturales • Ciencias sociales y humanidades En el CONICET, además promovemos y gestionamos la transferencia de tecnologías, servicios y capacidades de Investigación y Desarrollo (I+D) que genera su comunidad científica hacia los sectores socioproductivos, Pymes, Gobiernos, organismos públicos y la sociedad civil. En ese sentido: • Conectamos recursos humanos altamente especializados con empresarios/as para generar oportunidades conjuntas. • Impulsamos la participación con cámaras y asociaciones empresarias, parques tecnológicos e industriales, organismos del Estado, ONG, organizaciones civiles, y redes nacionales e internacionales de vinculación tecnológica. • Facilitamos la transferencia al sector productivo mediante procesos de escalado, pruebas de concepto, entre otros. • Promovemos la creación de Empresas de Base Tecnológica. El CONICET es un ente autárquico del Estado Nacional en jurisdicción del Ministerio de Ciencia, Tecnología e Innovación.

Loading…

NEWS

IPEN CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

December 02, 2025 08:00 AM

Cribl Supercharges Incident Response in Amazon Security Hub with Open Cybersecurity Schema Framework (OCSF) Support

Enhanced capability in Cribl Stream transforms disparate security findings into a standardized format, accelerating threat correlation and...

Read Article

November 09, 2025 08:00 AM

Cybersecurity Talent Crunch To Create 3.5 Million Unfilled Jobs Globally By 2021

350 percent growth in open cybersecurity positions from 2013 to 2021.

Read Article

November 03, 2025 08:00 AM

AWS and CrowdStrike Open Cybersecurity Accelerator to Startups Worldwide

The third annual program is accepting applications through Nov. 15 and will run for eight weeks, from Jan. 5 to March 3, 2026, according to...

Read Article

August 04, 2025 07:00 AM

Powering AI-Driven Security with the Open Cybersecurity Schema Framework

The new AWS Security Hub (Preview) leverages OCSF, enabling seamless data exchange across security capabilities with normalized data formats.

Read Article

July 09, 2025 07:00 AM

26 million CVs were exposed when a recruiting software firm left a misconfigured Azure container open – cybersecurity experts warn it's an easy mistake that's becoming far too common

TalentHook left a misconfigured Azure Blob storage container open, researchers said, leaving jobseekers open to phishing attempts.

Read Article

May 15, 2025 07:00 AM

Kindo Launches WhiteRabbitNeo Version 3: The Next Chapter In Autonomous, Open Cybersecurity & Infrastructure AI

WhiteRabbitNeo V3 brings unprecedented power and accessibility to security teams—from cloud-native enterprises to government environments...

Read Article

April 28, 2025 07:00 AM

Foundation-sec-8b: Cisco Foundation AI’s First Open-Source Security Model

Foundation-sec-8b is a foundational step toward building AI-native security systems—tools that don't just process data but truly understand the...

Read Article

April 15, 2025 07:00 AM

Taiwan to launch joint cybersecurity center

Taiwan is to launch a joint cybersecurity center to implement major initiatives as part of a pivot from the current incrementalist strategy.

Read Article

April 04, 2025 07:00 AM

Cybersecurity Jobs Report: 3.5 Million Unfilled Positions In 2025

Cybersecurity Ventures' prediction that there will be 3.5 million unfilled cybersecurity jobs globally by 2021, up from one million positions in 2014.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-71983

SUMMARY

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the wps.cgi interface that allows remote attackers to execute arbitrary commands by injecting malicious input through the pin2g, pin5g, or pin6g parameters. Attackers can exploit these unsanitized parameters to execute arbitrary commands on the affected device and obtain root privileges.

Published

Date2026-08-08

Updated

Date2026-08-08

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-71502

SUMMARY

CTI-Transmute contains a stored cross-site scripting vulnerability caused by insufficient neutralization of Vue template expression delimiters in server-rendered user-controlled data. An unauthenticated attacker can create a public conversion whose name or description contains a malicious Vue expression using the application's configured [[ ... ]] delimiters. User profile names may provide an additional injection vector. Although Jinja HTML escaping is applied, the resulting value is subsequently included in a DOM region compiled by Vue. Vue interprets the attacker-controlled value as a template expression rather than ordinary text. By accessing the JavaScript Function constructor from within the expression, an attacker can execute arbitrary JavaScript in the security context of the CTI-Transmute origin. The application's nonce-based Content Security Policy does not prevent exploitation because the Vue runtime compiler requires the unsafe-eval policy exception. The malicious payload is stored by the application and executed whenever another user opens an affected page, such as the public conversion detail page. The victim may be a normal user or an administrator. Successful exploitation could allow the attacker to: * Access data available to the victim through the application. * Extract API keys, tokens, or other sensitive information exposed to the page. * Perform authenticated actions using the victim's session. * Modify conversions or other application data. * Escalate the impact by targeting an administrator. A demonstrated payload can use [].constructor.constructor(...) to obtain the JavaScript Function constructor and execute arbitrary code. The regression tests also show that a short first-stage payload could retrieve an uncapped conversion description and evaluate a larger second-stage payload. The patch addresses the vulnerability by registering a global Jinja finalize hook that inserts a zero-width Unicode word joiner inside every Vue delimiter found in server-rendered values. This prevents Vue from recognizing the values as template expressions while preserving their visible representation.

Published

Date2026-08-08

Updated

Date2026-08-08

RISK INFORMATION (Score: )

cvss4

Base Score: 5.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-71958

SUMMARY

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vulnerability in the quicksetup.cgi interface. A remote attacker can write overly long strings to the test4, ssid2, and username fields and execute arbitrary commands by crafting a specific payload, or cause the device to crash.

Published

Date2026-08-08

Updated

Date2026-08-08

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-71957

SUMMARY

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vulnerability in the app.cgi interface. A remote attacker can write an overly long string to the netAcc.addlist[].name field and execute arbitrary commands by crafting a specific payload, or cause the device to crash.

Published

Date2026-08-08

Updated

Date2026-08-08

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-71956

SUMMARY

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a command injection vulnerability in the app.cgi interface. A remote attacker can inject arbitrary malicious commands into the netDig.ping.dst field, resulting in command execution with root privileges.

Published

Date2026-08-08

Updated

Date2026-08-08

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…