Comparison Overview

Islamic Azad University (IAU)- دانشگاه آزاد اسلامی

VS

University of Michigan

Islamic Azad University (IAU)- دانشگاه آزاد اسلامی

International Students and Scholars Office, Tehran, Tehran, IR
Last Update: 2025-12-25
Between 750 and 799

Islamic Azad University (IAU)- دانشگاه آزاد اسلامی is an Iranian non-profit, non-governmental system of higher education founded in 1982, in response to an increasing social demand for specialized manpower and development I.A.U. is a dynamic and fast-growing university and its steady expansion is mirrored in the broad range and increased number of its undergraduate and postgraduate taught courses. Under five disciplines, I.A.U offers 66 fields of study courses in over 180 campuses in and out of the country. Currently, over 1,000,000 students are enrolled. On the global level, I.A.U is a member of several international associations including, the International Association of Universities, the International Association of University Presidents, Federation of the Universities of the Islamic World (F.U.I.W). Headquartered in Tehran, Iran, the Islamic Azad University was founded in 1982 and currently has an enrollment of 1.5 million students, making it the world's third largest. Azad University has over 400 branches across the country and also in other countries. It has branches and universities in U.A.E, United Kingdom, Tanzania, Lebanon and Armenia and has plans to establish more branch campuses in Malaysia, Canada, Afghanistan and Tajikistan in the near future. Over the years, the university has accumulated assets estimated to be worth between $20 and $25 billion.

NAICS: 611
NAICS Definition:
Employees: 4,439
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

University of Michigan

1109 Geddes Ave, Ann Arbor, Michigan, 48104, US
Last Update: 2025-12-25
Between 700 and 749

The mission of the University of Michigan is to serve the people of Michigan and the world through preeminence in creating, communicating, preserving, and applying knowledge, art, and academic values, and in developing leaders and citizens who will challenge the present and enrich the future. Why Work at Michigan? Being part of something greater, of serving a larger mission of discovery and care — that's the heart of what drives people to work at Michigan. In some way, great or small, every person here helps to advance this world-class institution. It's adding a purpose to your profession. Work at Michigan and become a victor for the greater good.

NAICS: 6113
NAICS Definition: Colleges, Universities, and Professional Schools
Employees: 37,146
Subsidiaries: 18
12-month incidents
1
Known data breaches
1
Attack type number
2

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/islamic-azad-university-iau---.jpeg
Islamic Azad University (IAU)- دانشگاه آزاد اسلامی
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/university-of-michigan.jpeg
University of Michigan
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Islamic Azad University (IAU)- دانشگاه آزاد اسلامی
100%
Compliance Rate
0/4 Standards Verified
University of Michigan
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Higher Education Industry Average (This Year)

No incidents recorded for Islamic Azad University (IAU)- دانشگاه آزاد اسلامی in 2025.

Incidents vs Higher Education Industry Average (This Year)

University of Michigan has 21.95% more incidents than the average of same-industry companies with at least one recorded incident.

Incident History — Islamic Azad University (IAU)- دانشگاه آزاد اسلامی (X = Date, Y = Severity)

Islamic Azad University (IAU)- دانشگاه آزاد اسلامی cyber incidents detection timeline including parent company and subsidiaries

Incident History — University of Michigan (X = Date, Y = Severity)

University of Michigan cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/islamic-azad-university-iau---.jpeg
Islamic Azad University (IAU)- دانشگاه آزاد اسلامی
Incidents

No Incident

https://images.rankiteo.com/companyimages/university-of-michigan.jpeg
University of Michigan
Incidents

Date Detected: 3/2025
Type:Breach
Attack Vector: Hacking, Encryption Cracking, Unauthorized Access
Motivation: Unauthorized access to personal information
Blog: Blog

Date Detected: 08/2023
Type:Cyber Attack
Blog: Blog

FAQ

Islamic Azad University (IAU)- دانشگاه آزاد اسلامی company demonstrates a stronger AI Cybersecurity Score compared to University of Michigan company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

University of Michigan company has historically faced a number of disclosed cyber incidents, whereas Islamic Azad University (IAU)- دانشگاه آزاد اسلامی company has not reported any.

In the current year, University of Michigan company has reported more cyber incidents than Islamic Azad University (IAU)- دانشگاه آزاد اسلامی company.

Neither University of Michigan company nor Islamic Azad University (IAU)- دانشگاه آزاد اسلامی company has reported experiencing a ransomware attack publicly.

University of Michigan company has disclosed at least one data breach, while Islamic Azad University (IAU)- دانشگاه آزاد اسلامی company has not reported such incidents publicly.

University of Michigan company has reported targeted cyberattacks, while Islamic Azad University (IAU)- دانشگاه آزاد اسلامی company has not reported such incidents publicly.

Neither Islamic Azad University (IAU)- دانشگاه آزاد اسلامی company nor University of Michigan company has reported experiencing or disclosing vulnerabilities publicly.

Neither Islamic Azad University (IAU)- دانشگاه آزاد اسلامی nor University of Michigan holds any compliance certifications.

Neither company holds any compliance certifications.

University of Michigan company has more subsidiaries worldwide compared to Islamic Azad University (IAU)- دانشگاه آزاد اسلامی company.

University of Michigan company employs more people globally than Islamic Azad University (IAU)- دانشگاه آزاد اسلامی company, reflecting its scale as a Higher Education.

Neither Islamic Azad University (IAU)- دانشگاه آزاد اسلامی nor University of Michigan holds SOC 2 Type 1 certification.

Neither Islamic Azad University (IAU)- دانشگاه آزاد اسلامی nor University of Michigan holds SOC 2 Type 2 certification.

Neither Islamic Azad University (IAU)- دانشگاه آزاد اسلامی nor University of Michigan holds ISO 27001 certification.

Neither Islamic Azad University (IAU)- دانشگاه آزاد اسلامی nor University of Michigan holds PCI DSS certification.

Neither Islamic Azad University (IAU)- دانشگاه آزاد اسلامی nor University of Michigan holds HIPAA certification.

Neither Islamic Azad University (IAU)- دانشگاه آزاد اسلامی nor University of Michigan holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

n8n is an open source workflow automation platform. Prior to version 2.0.0, in self-hosted n8n instances where the Code node runs in legacy (non-task-runner) JavaScript execution mode, authenticated users with workflow editing access can invoke internal helper functions from within the Code node. This allows a workflow editor to perform actions on the n8n host with the same privileges as the n8n process, including: reading files from the host filesystem (subject to any file-access restrictions configured on the instance and OS/container permissions), and writing files to the host filesystem (subject to the same restrictions). This issue has been patched in version 2.0.0. Workarounds for this issue involve limiting file operations by setting N8N_RESTRICT_FILE_ACCESS_TO to a dedicated directory (e.g., ~/.n8n-files) and ensure it contains no sensitive data, keeping N8N_BLOCK_FILE_ACCESS_TO_N8N_FILES=true (default) to block access to .n8n and user-defined config files, and disabling high-risk nodes (including the Code node) using NODES_EXCLUDE if workflow editors are not fully trusted.

Risk Information
cvss3
Base: 7.1
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
Description

n8n is an open source workflow automation platform. From version 1.0.0 to before 2.0.0, a sandbox bypass vulnerability exists in the Python Code Node that uses Pyodide. An authenticated user with permission to create or modify workflows can exploit this vulnerability to execute arbitrary commands on the host system running n8n, using the same privileges as the n8n process. This issue has been patched in version 2.0.0. Workarounds for this issue involve disabling the Code Node by setting the environment variable NODES_EXCLUDE: "[\"n8n-nodes-base.code\"]", disabling Python support in the Code node by setting the environment variable N8N_PYTHON_ENABLED=false, which was introduced in n8n version 1.104.0, and configuring n8n to use the task runner based Python sandbox via the N8N_RUNNERS_ENABLED and N8N_NATIVE_PYTHON_RUNNER environment variables.

Risk Information
cvss3
Base: 9.9
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L
Description

LMDeploy is a toolkit for compressing, deploying, and serving LLMs. Prior to version 0.11.1, an insecure deserialization vulnerability exists in lmdeploy where torch.load() is called without the weights_only=True parameter when loading model checkpoint files. This allows an attacker to execute arbitrary code on the victim's machine when they load a malicious .bin or .pt model file. This issue has been patched in version 0.11.1.

Risk Information
cvss3
Base: 8.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description

n8n is an open source workflow automation platform. Prior to version 1.114.0, a stored Cross-Site Scripting (XSS) vulnerability may occur in n8n when using the “Respond to Webhook” node. When this node responds with HTML content containing executable scripts, the payload may execute directly in the top-level window, rather than within the expected sandbox introduced in version 1.103.0. This behavior can enable a malicious actor with workflow creation permissions to execute arbitrary JavaScript in the context of the n8n editor interface. This issue has been patched in version 1.114.0. Workarounds for this issue involve restricting workflow creation and modification privileges to trusted users only, avoiding use of untrusted HTML responses in the “Respond to Webhook” node, and using an external reverse proxy or HTML sanitizer to filter responses that include executable scripts.

Risk Information
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
Description

Yealink T21P_E2 Phone 52.84.0.15 is vulnerable to Directory Traversal. A remote normal privileged attacker can read arbitrary files via a crafted request result read function of the diagnostic component.

Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N