ISO 27001 Certificate
SOC 1 Type I Certificate
SOC 2 Type II Certificate
PCI DSS
HIPAA
RGPD
Internal validation & live display
Multiple badges & continuous verification
Faster underwriting decisions
ISOSOC2 Type 1SOC2 Type 2PCI DSSHIPAAGDPR

Founded in 2003, LinkedIn connects the world's professionals to make them more productive and successful. With more than 1 billion members worldwide, including executives from every Fortune 500 company, LinkedIn is the world's largest professional network. The company has a diversified business model with revenue coming from Talent Solutions, Marketing Solutions, Sales Solutions and Premium Subscriptions products. Headquartered in Silicon Valley, LinkedIn has offices across the globe..

LinkedIn A.I CyberSecurity Scoring

LinkedIn

Company Details

Linkedin ID:

linkedin

Employees number:

23,853

Number of followers:

31,813,875

NAICS:

5112

Industry Type:

Software Development

Homepage:

linkedin.com

IP Addresses:

34

Company ID:

LIN_3207977

Scan Status:

Completed

AI scoreLinkedIn Risk Score (AI oriented)

Between 800 and 849

https://images.rankiteo.com/companyimages/linkedin.jpeg
LinkedIn Software Development
Updated:
  • Powered by our proprietary A.I cyber incident model
  • Insurance preferes TPRM score to calculate premium
globalscoreLinkedIn Global Score (TPRM)

XXXX

https://images.rankiteo.com/companyimages/linkedin.jpeg
LinkedIn Software Development
  • Instant access to detailed risk factors
  • Benchmark vs. industry & size peers
  • Vulnerabilities
  • Findings

LinkedIn Company CyberSecurity News & History

Past Incidents
3
Attack Types
1
EntityTypeSeverityImpactSeenBlog DetailsIncident DetailsView
LinkedIn CorporationBreach8546/2012
Rankiteo Explanation :
Attack with significant impact with customers data leaks

Description: The California Office of the Attorney General disclosed a **data breach** affecting **LinkedIn Corporation** in **June 2016**, stemming from an earlier **2012 incident** that was rediscovered. The breach exposed **117 million user accounts**, compromising **email addresses, hashed passwords, and LinkedIn member IDs**. Although passwords were invalidated for accounts created before 2012 as a mitigating measure, the incident highlighted significant vulnerabilities in LinkedIn’s historical security practices. The exposed data, while hashed, posed risks of credential stuffing, phishing, and unauthorized account access if decryption attempts succeeded. The breach did not involve financial or highly sensitive personal data (e.g., Social Security numbers), but the scale of exposed credentials—one of the largest at the time—undermined user trust and required widespread password resets. LinkedIn faced reputational damage and regulatory scrutiny, though no direct financial fraud or identity theft was reported as a direct consequence of this specific breach.

LinkedInBreach10056/2016
Rankiteo Explanation :
Attack threatening the organization's existence

Description: LinkedIn suffered a data breach incident in 2016 which exposed the email addresses and passwords of 117 million users. Hackers broke into the network, stole a database of password hashes, and posted some 6.5 million account credentials on a Russian password forum for the world to see. LinkedIn’s Chief Information Security Officer Cory Scott took the safety and security of members’ accounts seriously and offered protection tools such as email challenges and dual factor authentication.

LinkedInBreach100412/2016
Rankiteo Explanation :
Attack with significant impact with customers data leaks

Description: Lynda.com now LinkedIn Learning, was informing its consumers of a security breach. The firm claims that an unauthorised third party gained access to a database that contained user data. The company began informing its clientele that hackers had gained access to learning data, including attempted courses and contact information. The company's owner, LinkedIn, verified the issue and disclosed that, as a precaution, the passwords of 55,000 users had been reset. It is possible that 9.5 million users were affected in total. LinkedIn disclosed further steps to safeguard user accounts on Lynda.com in reaction to the data leak.

LinkedIn Corporation
Breach
Severity: 85
Impact: 4
Seen: 6/2012
Blog:
Rankiteo Explanation
Attack with significant impact with customers data leaks

Description: The California Office of the Attorney General disclosed a **data breach** affecting **LinkedIn Corporation** in **June 2016**, stemming from an earlier **2012 incident** that was rediscovered. The breach exposed **117 million user accounts**, compromising **email addresses, hashed passwords, and LinkedIn member IDs**. Although passwords were invalidated for accounts created before 2012 as a mitigating measure, the incident highlighted significant vulnerabilities in LinkedIn’s historical security practices. The exposed data, while hashed, posed risks of credential stuffing, phishing, and unauthorized account access if decryption attempts succeeded. The breach did not involve financial or highly sensitive personal data (e.g., Social Security numbers), but the scale of exposed credentials—one of the largest at the time—undermined user trust and required widespread password resets. LinkedIn faced reputational damage and regulatory scrutiny, though no direct financial fraud or identity theft was reported as a direct consequence of this specific breach.

LinkedIn
Breach
Severity: 100
Impact: 5
Seen: 6/2016
Blog:
Rankiteo Explanation
Attack threatening the organization's existence

Description: LinkedIn suffered a data breach incident in 2016 which exposed the email addresses and passwords of 117 million users. Hackers broke into the network, stole a database of password hashes, and posted some 6.5 million account credentials on a Russian password forum for the world to see. LinkedIn’s Chief Information Security Officer Cory Scott took the safety and security of members’ accounts seriously and offered protection tools such as email challenges and dual factor authentication.

LinkedIn
Breach
Severity: 100
Impact: 4
Seen: 12/2016
Blog:
Rankiteo Explanation
Attack with significant impact with customers data leaks

Description: Lynda.com now LinkedIn Learning, was informing its consumers of a security breach. The firm claims that an unauthorised third party gained access to a database that contained user data. The company began informing its clientele that hackers had gained access to learning data, including attempted courses and contact information. The company's owner, LinkedIn, verified the issue and disclosed that, as a precaution, the passwords of 55,000 users had been reset. It is possible that 9.5 million users were affected in total. LinkedIn disclosed further steps to safeguard user accounts on Lynda.com in reaction to the data leak.

Ailogo

LinkedIn Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

🔒
Incident Predictions locked
Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

🔒
A.I. Risk Score Predictions locked
Access Monitoring Plan
statics

Underwriter Stats for LinkedIn

Incidents vs Software Development Industry Average (This Year)

No incidents recorded for LinkedIn in 2025.

Incidents vs All-Companies Average (This Year)

No incidents recorded for LinkedIn in 2025.

Incident Types LinkedIn vs Software Development Industry Avg (This Year)

No incidents recorded for LinkedIn in 2025.

Incident History — LinkedIn (X = Date, Y = Severity)

LinkedIn cyber incidents detection timeline including parent company and subsidiaries

LinkedIn Company Subsidiaries

SubsidiaryImage

Founded in 2003, LinkedIn connects the world's professionals to make them more productive and successful. With more than 1 billion members worldwide, including executives from every Fortune 500 company, LinkedIn is the world's largest professional network. The company has a diversified business model with revenue coming from Talent Solutions, Marketing Solutions, Sales Solutions and Premium Subscriptions products. Headquartered in Silicon Valley, LinkedIn has offices across the globe..

Loading...
similarCompanies

LinkedIn Similar Companies

Facebook

The Facebook company is now Meta. Meta builds technologies that help people connect, find communities, and grow businesses. When Facebook launched in 2004, it changed the way people connect. Apps like Messenger, Instagram and WhatsApp further empowered billions around the world. Now, Meta is moving

Snowflake

**Snowflake is proud to be the Official Data Collaboration Provider for LA28 and Team USA.** Snowflake delivers the AI Data Cloud — a global network where thousands of organizations mobilize data with near-unlimited scale, concurrency, and performance. Inside the AI Data Cloud, organizations unite

Instacart

Instacart, the leading grocery technology company in North America, works with grocers and retailers to transform how people shop. The company partners with more than 1,500 national, regional, and local retail banners to facilitate online shopping, delivery and pickup services from more than 85,000

Just Eat Takeaway.com

Just Eat Take​away​.com is a lead­ing glob­al online deliv­ery mar­ket­place, con­nect­ing con­sumers and restau­rants through our plat­form in 19 coun­tries. Like a dinner table, working at JET brings our office employees and couriers together. From coding to customer service to couriers, JET is a

PayPal

We're championing possibilities for all by making money fast, easy, and more enjoyable. Our hope is unlock opportunities for people in their everyday lives and empower the millions of people and businesses around the world who trust, rely, and use PayPal every day. For support, visit the PayPal He

Walmart Global Tech

Walmart has a long history of transforming retail and using technology to deliver innovations that improve how the world shops and empower our 2.1 million associates. It began with Sam Walton and continues today with Global Tech associates working together to power Walmart and lead the next retail d

Pitney Bowes

Pitney Bowes is a technology-driven products and services company that provides SaaS shipping solutions, mailing innovation, and financial services to clients around the world – including more than 90 percent of the Fortune 500. Small businesses to large enterprises, and government entities rely on

Zoho offers beautifully smart software to help you grow your business. With over 100 million users worldwide, Zoho's 55+ products aid your sales and marketing, support and collaboration, finance, and recruitment needs—letting you focus only on your business. Zoho respects user privacy and does not h

ServiceNow (NYSE: NOW) makes the world work better for everyone. Our cloud-based platform and solutions help digitize and unify organizations so that they can find smarter, faster, better ways to make work flow. So employees and customers can be more connected, more innovative, and more agile. And w

newsone

LinkedIn CyberSecurity News

November 14, 2025 12:00 PM
Malicious LNK files are back in the spotlight! On November 20 at 12:00 PM ET, join SCYTHE’s Tyler Casey and Trey Bilbrey for a live walkthrough of how malicious LNK files are being used to deliver payloads, bypass controls, and persist undetected. Whether

November 13, 2025 07:00 PM
🚪 The simplest cyberattack isn’t digital… it’s physical. Tailgating — when someone slips into your office right behind you — is one of the easiest ways attackers gain access to your devices, your network, and your company’s sensitive data. All it takes is: • A smil

November 12, 2025 08:20 PM
Post by The Cyber Security Hub™

November 12, 2025 07:00 PM
👀 Is someone reading your messages? If your phone feels slower, overheats for no reason, or acts like it has a “mind of its own,” it might not be a glitch—it could be stalkerware. This hidden spyware lets someone track your texts, calls, location, even your came

November 10, 2025 07:00 PM
🔗 Think before you click! That “free” download or urgent email link might not be what it seems. Phishing links can install malware, steal personal data, or compromise your business network in seconds. Here’s how to stay safe: ✅ Hover over links before clicking.

November 09, 2025 07:00 PM
🛡️ Identity theft can destroy more than just your credit — it can ruin your life. Hackers use phishing, data breaches, and public Wi-Fi traps to steal personal info like bank or social security details. Here’s how to stay protected: 📊 Monitor your credit reports regula

November 08, 2025 07:00 PM
✈️ Traveling soon? Cyber threats don’t take vacations. From public Wi-Fi to lost devices, your data is always at risk when you’re on the move. Here’s how to protect it: 🔒 Use a VPN to secure your connection. 🧹 Enable remote wipe for stolen devices. 🔐 Store s

November 06, 2025 08:33 AM
Hack the Box becomes LinkedIn Learning’s first cybersecurity training labs partner in new partnership

Hack the Box is LinkedIn Learning's first cybersecurity training labs partner, offering performance-based cybersecurity training on the...

November 05, 2025 11:05 AM
Hack the Box Powers First Cybersecurity Training Labs in Linkedin Learning to Close Workforce Readiness Gap

Hack The Box announced a new partnership with LinkedIn as HTB becomes LinkedIn Learning's first cybersecurity training labs partner.

faq

Frequently Asked Questions

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.

LinkedIn CyberSecurity History Information

Official Website of LinkedIn

The official website of LinkedIn is https://careers.linkedin.com.

LinkedIn’s AI-Generated Cybersecurity Score

According to Rankiteo, LinkedIn’s AI-generated cybersecurity score is 833, reflecting their Good security posture.

How many security badges does LinkedIn’ have ?

According to Rankiteo, LinkedIn currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Does LinkedIn have SOC 2 Type 1 certification ?

According to Rankiteo, LinkedIn is not certified under SOC 2 Type 1.

Does LinkedIn have SOC 2 Type 2 certification ?

According to Rankiteo, LinkedIn does not hold a SOC 2 Type 2 certification.

Does LinkedIn comply with GDPR ?

According to Rankiteo, LinkedIn is not listed as GDPR compliant.

Does LinkedIn have PCI DSS certification ?

According to Rankiteo, LinkedIn does not currently maintain PCI DSS compliance.

Does LinkedIn comply with HIPAA ?

According to Rankiteo, LinkedIn is not compliant with HIPAA regulations.

Does LinkedIn have ISO 27001 certification ?

According to Rankiteo,LinkedIn is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Industry Classification of LinkedIn

LinkedIn operates primarily in the Software Development industry.

Number of Employees at LinkedIn

LinkedIn employs approximately 23,853 people worldwide.

Subsidiaries Owned by LinkedIn

LinkedIn presently has no subsidiaries across any sectors.

LinkedIn’s LinkedIn Followers

LinkedIn’s official LinkedIn profile has approximately 31,813,875 followers.

NAICS Classification of LinkedIn

LinkedIn is classified under the NAICS code 5112, which corresponds to Software Publishers.

LinkedIn’s Presence on Crunchbase

Yes, LinkedIn has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/linkedin.

LinkedIn’s Presence on LinkedIn

Yes, LinkedIn maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/linkedin.

Cybersecurity Incidents Involving LinkedIn

As of November 27, 2025, Rankiteo reports that LinkedIn has experienced 3 cybersecurity incidents.

Number of Peer and Competitor Companies

LinkedIn has an estimated 26,608 peer or competitor companies worldwide.

What types of cybersecurity incidents have occurred at LinkedIn ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

How does LinkedIn detect and respond to cybersecurity incidents ?

Detection and Response: The company detects and responds to cybersecurity incidents through an remediation measures with offered protection tools such as email challenges and dual factor authentication, and remediation measures with passwords reset for 55,000 users, and communication strategy with informing customers about the breach, and law enforcement notified with yes (california office of the attorney general), and containment measures with passwords for accounts created before the 2012 breach were invalidated..

Incident Details

Can you provide details on each incident ?

Incident : Data Breach

Title: LinkedIn Data Breach

Description: LinkedIn suffered a data breach incident in 2016 which exposed the email addresses and passwords of 117 million users. Hackers broke into the network, stole a database of password hashes, and posted some 6.5 million account credentials on a Russian password forum for the world to see.

Date Detected: 2016

Date Publicly Disclosed: 2016

Type: Data Breach

Attack Vector: Network Intrusion

Threat Actor: Unknown Hackers

Motivation: Data Theft

Incident : Data Breach

Title: Lynda.com Security Breach

Description: An unauthorized third party gained access to a database containing user data at Lynda.com, now LinkedIn Learning.

Type: Data Breach

Attack Vector: Unauthorized Access

Threat Actor: Unauthorized Third Party

Incident : Data Breach

Title: LinkedIn Data Breach (2016)

Description: The California Office of the Attorney General reported a data breach involving LinkedIn Corporation on June 2, 2016. The breach date was May 17, 2016, and it involved member email addresses, hashed passwords, and LinkedIn member IDs, all from a 2012 incident. Approximately 117 million accounts were potentially affected as passwords for accounts created before the 2012 breach were invalidated.

Date Detected: 2016-05-17

Date Publicly Disclosed: 2016-06-02

Type: Data Breach

What are the most common types of attacks the company has faced ?

Common Attack Types: The most common types of attacks the company has faced is Breach.

Impact of the Incidents

What was the impact of each incident ?

Incident : Data Breach LIN12220522

Data Compromised: Email addresses and passwords

Incident : Data Breach LIN1136181123

Data Compromised: Learning data, Contact information

Incident : Data Breach LIN026090625

Data Compromised: Email addresses, Hashed passwords, Linkedin member ids

Brand Reputation Impact: Potential reputational damage due to exposure of 117 million accounts

Identity Theft Risk: High (due to exposure of email-password combinations)

What types of data are most commonly compromised in incidents ?

Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Email addresses and passwords, Learning Data, Contact Information, , Email Addresses, Hashed Passwords, Linkedin Member Ids and .

Which entities were affected by each incident ?

Incident : Data Breach LIN12220522

Entity Name: LinkedIn

Entity Type: Company

Industry: Social Media

Location: Global

Customers Affected: 117 million users

Incident : Data Breach LIN1136181123

Entity Name: Lynda.com (LinkedIn Learning)

Entity Type: Online Learning Platform

Industry: Education Technology

Customers Affected: Potentially 9.5 million users

Incident : Data Breach LIN026090625

Entity Name: LinkedIn Corporation

Entity Type: Corporation

Industry: Technology / Social Networking

Location: California, USA

Customers Affected: 117 million

Response to the Incidents

What measures were taken in response to each incident ?

Incident : Data Breach LIN12220522

Remediation Measures: Offered protection tools such as email challenges and dual factor authentication

Incident : Data Breach LIN1136181123

Remediation Measures: Passwords reset for 55,000 users

Communication Strategy: Informing customers about the breach

Incident : Data Breach LIN026090625

Law Enforcement Notified: Yes (California Office of the Attorney General)

Containment Measures: Passwords for accounts created before the 2012 breach were invalidated

Data Breach Information

What type of data was compromised in each breach ?

Incident : Data Breach LIN12220522

Type of Data Compromised: Email addresses and passwords

Number of Records Exposed: 117 million

Data Encryption: Password hashes

Personally Identifiable Information: Email addresses

Incident : Data Breach LIN1136181123

Type of Data Compromised: Learning data, Contact information

Number of Records Exposed: Potentially 9.5 million users

Incident : Data Breach LIN026090625

Type of Data Compromised: Email addresses, Hashed passwords, Linkedin member ids

Number of Records Exposed: 117 million

Sensitivity of Data: Moderate to High (hashed passwords and email addresses)

Data Exfiltration: Yes

Data Encryption: Hashed (passwords)

Personally Identifiable Information: Yes (email addresses linked to member IDs)

What measures does the company take to prevent data exfiltration ?

Prevention of Data Exfiltration: The company takes the following measures to prevent data exfiltration: Offered protection tools such as email challenges and dual factor authentication, Passwords reset for 55,000 users, .

How does the company handle incidents involving personally identifiable information (PII) ?

Handling of PII Incidents: The company handles incidents involving personally identifiable information (PII) through by passwords for accounts created before the 2012 breach were invalidated.

Regulatory Compliance

Were there any regulatory violations and fines imposed for each incident ?

Incident : Data Breach LIN026090625

Regulatory Notifications: California Office of the Attorney General

References

Where can I find more information about each incident ?

Incident : Data Breach LIN026090625

Source: California Office of the Attorney General

Where can stakeholders find additional resources on cybersecurity best practices ?

Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: California Office of the Attorney General.

Investigation Status

How does the company communicate the status of incident investigations to stakeholders ?

Communication of Investigation Status: The company communicates the status of incident investigations to stakeholders through Informing Customers About The Breach.

Stakeholder and Customer Advisories

Were there any advisories issued to stakeholders or customers for each incident ?

Incident : Data Breach LIN1136181123

Customer Advisories: Informing customers about the breach

What advisories does the company provide to stakeholders and customers following an incident ?

Advisories Provided: The company provides the following advisories to stakeholders and customers following an incident: were Informing Customers About The Breach and .

Post-Incident Analysis

What were the root causes and corrective actions taken for each incident ?

Incident : Data Breach LIN026090625

Root Causes: Legacy data from 2012 breach resurfaced; inadequate long-term protection of hashed credentials

Additional Questions

General Information

Who was the attacking group in the last incident ?

Last Attacking Group: The attacking group in the last incident were an Unknown Hackers and Unauthorized Third Party.

Incident Details

What was the most recent incident detected ?

Most Recent Incident Detected: The most recent incident detected was on 2016.

What was the most recent incident publicly disclosed ?

Most Recent Incident Publicly Disclosed: The most recent incident publicly disclosed was on 2016-06-02.

Impact of the Incidents

What was the most significant data compromised in an incident ?

Most Significant Data Compromised: The most significant data compromised in an incident were Email addresses and passwords, Learning Data, Contact Information, , email addresses, hashed passwords, LinkedIn member IDs and .

Response to the Incidents

What containment measures were taken in the most recent incident ?

Containment Measures in Most Recent Incident: The containment measures taken in the most recent incident was Passwords for accounts created before the 2012 breach were invalidated.

Data Breach Information

What was the most sensitive data compromised in a breach ?

Most Sensitive Data Compromised: The most sensitive data compromised in a breach were email addresses, LinkedIn member IDs, Learning Data, Email addresses and passwords, hashed passwords and Contact Information.

What was the number of records exposed in the most significant breach ?

Number of Records Exposed in Most Significant Breach: The number of records exposed in the most significant breach was 243.5M.

References

What is the most recent source of information about an incident ?

Most Recent Source: The most recent source of information about an incident is California Office of the Attorney General.

Stakeholder and Customer Advisories

What was the most recent customer advisory issued ?

Most Recent Customer Advisory: The most recent customer advisory issued was an Informing customers about the breach.

cve

Latest Global CVEs (Not Company-Specific)

Description

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.

Risk Information
cvss4
Base: 7.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.

Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.

Risk Information
cvss4
Base: 6.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Access Data Using Our API

SubsidiaryImage

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=linkedin' -H 'apikey: YOUR_API_KEY_HERE'

What Do We Measure ?

revertimgrevertimgrevertimgrevertimg
Incident
revertimgrevertimgrevertimgrevertimg
Finding
revertimgrevertimgrevertimgrevertimg
Grade
revertimgrevertimgrevertimgrevertimg
Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network Security

Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)

Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)

Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat Intelligence

Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Top LeftTop RightBottom LeftBottom Right
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
Users Love Us Badge