Company Details
kone
35,146
641,510
3332
kone.com
370
KON_8667359
Completed

KONE Company CyberSecurity Posture
kone.comWe shape the future of cities.
Company Details
kone
35,146
641,510
3332
kone.com
370
KON_8667359
Completed
Between 750 and 799

KONE Global Score (TPRM)XXXX



No incidents recorded for KONE in 2025.
No incidents recorded for KONE in 2025.
No incidents recorded for KONE in 2025.
KONE cyber incidents detection timeline including parent company and subsidiaries

We shape the future of cities.


Metso is a frontrunner in sustainable technologies, end-to-end solutions and services for the aggregates, minerals processing and metals refining industries globally. By improving our customers’ energy and water efficiency, increasing their productivity, and reducing environmental risks with our p

Mitsubishi Heavy Industries (MHI) Group is one of the world’s leading industrial firms. For more than 130 years, we have channeled big thinking into solutions that move the world forward – advancing the lives of everyone who shares our planet. We deliver innovative and integrated solutions across a

For over 170 years, Smiths Group has been pioneering progress by engineering a better future. We serve millions of people every year, to help make the world safer, more energy efficient and productive, and better connected, across four global markets: Energy, General Industrial, Safety & Security,

Xylem is the global leader in advanced technologies, solutions and services that address the world’s biggest water challenges. We enable our customers to dramatically improve the way water and wastewater is used, managed, conserved, re-used and returned to nature. At every level, our global team is
Ingersoll Rand Inc. (NYSE:IR), driven by an entrepreneurial spirit and ownership mindset, is dedicated to Making Life Better for our employees, customers, shareholders, and planet. Customers lean on us for exceptional performance and durability in mission-critical flow creation and industrial soluti

Flowserve is one of the world's largest manufacturers of pumps, valves and seals with over 16,000 employees across 50 countries. Built on more than 50 world-renowned heritage brands, the equity and customer loyalty we have earned over the past 230 years is the foundation of our leadership position a

Trane Technologies is a global climate innovator advancing sustainability through our leading brands Trane® and Thermo King®, which bring efficient and sustainable climate solutions to buildings, homes and transportation across the globe. Together, we are one team innovating for a better future. At

Stork B.V. was an international group of companies active in aerospace, technical services, food, and printing machinery. Since 2008 Stork is delisted from the Amsterdam Stock Exchange and now privately held . As of January 1, 2013 - Fokker Technologies and Stork Technical Services have thei

The Schindler Group is a leading manufacturer and provider of related services for elevators, escalators, and moving walkways. Founded in 1874 in Switzerland, our company is at the forefront of industry innovation, working on pushing the boundaries of technological engineering, while having a stro
.png)
Created in 2013 under the impetus of 8 founding states, the Smart Africa initiative has become one of the most ambitious levers of...
This significant development underscores ANCA's growing relevance as a continental platform for cybersecurity collaboration and policy...
Here are the worldwide cybersecurity job openings available as of May 27, 2025, including on-site, hybrid, and remote roles.
KONE, a global leader in the elevator and escalator industry, has been awarded the Sao Khue Award 2025 for its smart service robot...
In an interview at GITEX Africa 2025, Akim Benamara, Chief Editor and Founder of TechAfrica News, engaged Lacina Koné, CEO of Smart Africa,...
Smart Africa CEO Lacina Koné and Dutch Ambassador Ernest Norman discussed cyber capacity collaboration at GC3B, promoting secure, inclusive digital growth.
ANCA's five-year roadmap is an enormous step forward for African cybersecurity, establishing a unified framework to help countries combat cyber threats.
Ahead of the AI Global Summit in Kigali, Lacina Koné, director general of Smart Africa, talks the future of AI.
In a move to enhance digital security on the African continent, Kaspersky (www.Kaspersky.co.za) has signed a three-year Memorandum of...

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of KONE is https://www.kone.com/en/.
According to Rankiteo, KONE’s AI-generated cybersecurity score is 797, reflecting their Fair security posture.
According to Rankiteo, KONE currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, KONE is not certified under SOC 2 Type 1.
According to Rankiteo, KONE does not hold a SOC 2 Type 2 certification.
According to Rankiteo, KONE is not listed as GDPR compliant.
According to Rankiteo, KONE does not currently maintain PCI DSS compliance.
According to Rankiteo, KONE is not compliant with HIPAA regulations.
According to Rankiteo,KONE is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
KONE operates primarily in the Industrial Machinery Manufacturing industry.
KONE employs approximately 35,146 people worldwide.
KONE presently has no subsidiaries across any sectors.
KONE’s official LinkedIn profile has approximately 641,510 followers.
KONE is classified under the NAICS code 3332, which corresponds to Industrial Machinery Manufacturing.
No, KONE does not have a profile on Crunchbase.
Yes, KONE maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/kone.
As of November 27, 2025, Rankiteo reports that KONE has not experienced any cybersecurity incidents.
KONE has an estimated 7,403 peer or competitor companies worldwide.
Total Incidents: According to Rankiteo, KONE has faced 0 incidents in the past.
Incident Types: The types of cybersecurity incidents that have occurred include .
.png)
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.