What is the official website of Microsoft 365 ?

The official website of Microsoft 365 is https://products.office.com/business/office.

What is Microsoft 365's cybersecurity risk score?

Microsoft 365 has an AI-generated cybersecurity risk score of 754 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Microsoft 365 experienced?

According to Rankiteo, Microsoft 365 currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Microsoft 365 been affected by any supply chain cyber incidents ?

According to Rankiteo, Microsoft 365 has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Oracle (Incident ID: FLOREL1788971139) Google LLC (Incident ID: MICINTFEDGOO1788783925) Microsoft Security Response Center (Incident ID: GOOMICTREMET1788168069) GitHub (Incident ID: AIK1787999043) MLflow (Incident ID: MLF1787063064) Resecurity (Incident ID: CISRESMICAMASERSALGIT1786868753) Microsoft (Incident ID: HCLTAT1786448292) Microsoft Power Platform (Incident ID: MICATL1786962683) Microsoft Dynamics 365 (Incident ID: ALL1785522998) Microsoft Security Response Center (Incident ID: POL1785356870) Microsoft (Incident ID: KIE1787783299) OpenAI (Incident ID: CHE1784787889) AsyncAPI Initiative (Incident ID: CISSONMICORAASYKNX1784341544) AsyncAPI Initiative (Incident ID: ASYMIC1785327908) Packagist Conductors (Incident ID: WHMPACGITCPA1784816835) Microsoft Security (Incident ID: APOLEVNEU1787336860) ShapedPlugin LLC (Incident ID: FORSHATANMICJAMIRHTEX1782147825) PRODAFT (Incident ID: MICSENKASESECRO1782073479) GitHub (Incident ID: SNOGIT1787203094) npm, Inc. (Incident ID: GITEXONPM1780604646) GitHub (Incident ID: GIT1780453444)

Does Microsoft 365 have SOC 2 Type 1 certification ?

According to Rankiteo, Microsoft 365 is not certified under SOC 2 Type 1.

Does Microsoft 365 have SOC 2 Type 2 certification ?

According to Rankiteo, Microsoft 365 does not hold a SOC 2 Type 2 certification.

Does Microsoft 365 comply with GDPR ?

According to Rankiteo, Microsoft 365 is not listed as GDPR compliant.

Does Microsoft 365 have PCI DSS certification ?

According to Rankiteo, Microsoft 365 does not currently maintain PCI DSS compliance.

Does Microsoft 365 comply with HIPAA ?

According to Rankiteo, Microsoft 365 is not compliant with HIPAA regulations.

Does Microsoft 365 have ISO 27001 certification ?

According to Rankiteo,Microsoft 365 is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Microsoft 365 operate in ?

Microsoft 365 operates primarily in the IT Services and IT Consulting industry.

How many employees does Microsoft 365 have ?

Microsoft 365 employs approximately 41 people worldwide.

Does Microsoft 365 own any subsidiaries ?

Microsoft 365 presently has no subsidiaries across any sectors.

How many LinkedIn followers does Microsoft 365 have ?

Microsoft 365's official LinkedIn profile has approximately 695,175 followers.

What is the NAICS classification code for Microsoft 365 ?

Microsoft 365 is classified under the NAICS code 5415, which corresponds to Computer Systems Design and Related Services.

Does Microsoft 365 have a Crunchbase profile ?

No, Microsoft 365 does not have a profile on Crunchbase.

Does Microsoft 365 have a LinkedIn profile ?

Yes, Microsoft 365 maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/microsoft-365.

How many cybersecurity incidents has Microsoft 365 experienced ?

As of September 23, 2026, Rankiteo reports that Microsoft 365 has experienced 100 cybersecurity incidents.

How many peer or competitor companies does Microsoft 365 have ?

Microsoft 365 has an estimated 41,775 peer or competitor companies worldwide.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Microsoft 365

Boost Score +25 with badge (5 left)

754

/1000

Fair

779

/1000

Fair

Microsoft 365 Vendor Cyber Rating & Cyber Score

office.com

Add Your Compliance Badge

Microsoft 365 is the world's productivity cloud designed to help you achieve more across work and life.

Microsoft 365

Microsoft 365 CyberSecurity News & History

Past Incidents

100

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Microsoft Security

Cyber Attack

100

9/2026

MIC1790065443

Microsoft Security

Vulnerability

9/2026

MIC1789986463

Microsoft Security

Vulnerability

100

9/2026

MIC1790001640

Microsoft Security

Vulnerability

100

9/2026

MIC1789871027

Microsoft Security

Cyber Attack

9/2026

MICOPE178992165...

Microsoft AI

Vulnerability

100

9/2026

MIC1789743686

Microsoft Security

Ransomware

100

9/2026

BLABLARYUCONMIC...

Microsoft Security ...

Ransomware

100

9/2026

MIC1789461009

Microsoft Security

Cyber Attack

9/2026

MIC1789410611

Microsoft Security

Cyber Attack

9/2026

Oracle

FLOREL178897113...

GitHub

Cyber Attack

9/2026

GITFIR178905113...

Microsoft Security

Vulnerability

9/2026

TENFLOFLOMICTRE...

Microsoft Security

Cyber Attack

100

9/2026

FORCHEMIKPALMIC...

Microsoft Security

Vulnerability

9/2026

MIC1788949665

Microsoft Security

Cyber Attack

9/2026

MIC1788776702

Microsoft Security

Cyber Attack

9/2026

Google LLC

MICINTFEDGOO178...

Microsoft Security

Cyber Attack

8/2026

WETBJ'MIC178957...

Microsoft Security ...

Vulnerability

8/2026

MIC1788267525

Microsoft Security ...

Cyber Attack

8/2026

Microsoft Secur...

GOOMICTREMET178...

GitHub

Cyber Attack

100

8/2026

GitHub

AIK1787999043

Microsoft Security

Vulnerability

8/2026

MIC1787898427

Microsoft Security ...

Vulnerability

100

8/2026

MIC1787847949

GitHub

Breach

8/2026

TELGITSTROPE178...

Microsoft

Vulnerability

8/2026

MIC1787826520

GitHub

Cyber Attack

100

8/2026

MCDCITSHEVODVER...

Microsoft Security

Breach

8/2026

MICVODSAF178747...

Microsoft Security

Vulnerability

8/2026

MIC1787149631

Microsoft Security ...

Vulnerability

100

8/2026

MIC1787163871

Microsoft

Vulnerability

100

8/2026

MIC1787156632

Microsoft Security ...

Vulnerability

100

8/2026

MIC1787034406

Microsoft Copilot

Vulnerability

8/2026

GOOMIC178711351...

Microsoft

Vulnerability

100

8/2026

MLflow

MLF1787063064

GitHub

Cyber Attack

8/2026

GIT1786969496

Microsoft Security

Breach

8/2026

Resecurity

CISRESMICAMASER...

Microsoft

Vulnerability

100

8/2026

MICSAP178649758...

Microsoft Security

Vulnerability

8/2026

MIC1786631229

Microsoft Security ...

Vulnerability

8/2026

MIC1786620445

Microsoft Threat In...

Cyber Attack

100

8/2026

MIC1786568300

Microsoft Security ...

Vulnerability

100

8/2026

MIC1787733576

Microsoft Security

Vulnerability

8/2026

MIC1786525732

Microsoft

Breach

8/2026

Microsoft

HCLTAT178644829...

Microsoft Power Pla...

Vulnerability

100

8/2026

Microsoft Power...

MICATL178696268...

GitHub

Cyber Attack

8/2026

GIT1785839378

Microsoft Security

Vulnerability

100

8/2026

MIC1788265560

Microsoft Security ...

Vulnerability

100

7/2026

MIC1785392682

Microsoft Dynamics ...

Ransomware

100

7/2026

Microsoft Dynam...

ALL1785522998

Microsoft Security ...

Breach

7/2026

Microsoft Secur...

POL1785356870

Microsoft Security

Vulnerability

7/2026

MIC1786107729

Microsoft Security

Cyber Attack

7/2026

MIC1784881741

Microsoft

Breach

7/2026

Microsoft

KIE1787783299

Microsoft Security

Vulnerability

7/2026

MIC1784744777

Microsoft Security ...

Vulnerability

100

7/2026

OpenAI

CHE1784787889

Microsoft Security

Cyber Attack

7/2026

MIC1784658331

Microsoft Threat In...

Vulnerability

7/2026

MICNOVBRU178442...

Microsoft Security

Vulnerability

7/2026

AsyncAPI Initia...

CISSONMICORAASY...

Microsoft

Vulnerability

100

7/2026

MIC1784125827

Microsoft Security

Vulnerability

7/2026

MIC1784096635

Microsoft Security

Vulnerability

7/2026

MIC1784096831

Microsoft Threat In...

Cyber Attack

100

7/2026

AsyncAPI Initia...

ASYMIC178532790...

Microsoft Security

Vulnerability

100

7/2026

MIC1784141218

Microsoft

Vulnerability

7/2026

MIC1784816949

Microsoft

Vulnerability

7/2026

MIC1784089434

Microsoft Security ...

Vulnerability

7/2026

MIC1784298242

GitHub

Cyber Attack

100

7/2026

Packagist Condu...

WHMPACGITCPA178...

Microsoft Threat In...

Cyber Attack

100

7/2026

MIC1783680524

GitHub

Vulnerability

7/2026

GIT1783441439

Microsoft Security ...

Vulnerability

100

7/2026

MIC1783441514

Microsoft Security

Breach

7/2026

Microsoft Secur...

APOLEVNEU178733...

Microsoft Security ...

Vulnerability

7/2026

MIC1783067043

Microsoft Security

Vulnerability

7/2026

MIC1786379301

Microsoft Security

Ransomware

100

7/2026

MIC1787041566

Microsoft

Vulnerability

6/2026

MIC1782721445

Microsoft Security

Cyber Attack

6/2026

MIC1782483842

Microsoft Security

Vulnerability

6/2026

MIC1782375843

Microsoft Security

Cyber Attack

6/2026

MIC1782404840

Microsoft

Breach

6/2026

ANAMIC178542315...

Microsoft Security

Cyber Attack

6/2026

ShapedPlugin LL...

FORSHATANMICJAM...

Microsoft Security ...

Ransomware

100

6/2026

MIC1782204242

Microsoft Security

Cyber Attack

6/2026

PRODAFT

MICSENKASESECRO...

GitHub

Cyber Attack

6/2026

GIT1781778547

Microsoft Security

Vulnerability

6/2026

MIC1781785861

GitHub

Vulnerability

6/2026

GitHub

SNOGIT178720309...

Microsoft Threat In...

Cyber Attack

6/2026

MIC1781713463

Microsoft Security ...

Vulnerability

6/2026

MIC1781238231

Microsoft Security

Cyber Attack

6/2026

SPOMICADO178120...

Microsoft Security ...

Vulnerability

6/2026

MIC1781101475

Microsoft Security ...

Vulnerability

6/2026

MIC1781072633

Microsoft Security

Vulnerability

6/2026

MIC1782296659

Microsoft Security ...

Vulnerability

6/2026

MIC1781785666

Microsoft Security ...

Breach

6/2026

MIC1780986305

Microsoft

Cyber Attack

6/2026

MIC1780900177

Microsoft Security ...

Vulnerability

6/2026

MIC1780640667

GitHub Security Lab

Cyber Attack

6/2026

npm, Inc.

GITEXONPM178060...

Microsoft 365

Vulnerability

6/2026

LINMIC178053984...

Microsoft Threat In...

Cyber Attack

6/2026

MICISR178456517...

GitHub

Vulnerability

100

6/2026

GitHub

GIT1780453444

Microsoft Security ...

Vulnerability

6/2026

MIC1781540872

Microsoft Security

Vulnerability

6/2026

MIC1781591215

Microsoft Threat In...

Ransomware

100

6/2026

MIC1789115702

Microsoft

Vulnerability

6/2026

MIC1781541072

Loading…

A.I.

Microsoft 365 Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Microsoft 365

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

Microsoft 365 has 32.89% fewer incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

Microsoft 365 has 1.96% fewer incidents than the average of all companies with at least one recorded incident.

Incident Types Microsoft 365 vs IT Services and IT Consulting Industry Avg (This Year)

Microsoft 365 reported 1 incidents this year: 0 cyber attacks, 0 ransomware, 1 vulnerabilities, 0 data breaches, compared to industry peers with at least 1 incident.

Incident History - Microsoft 365 (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Microsoft 365 Subsidiaries

Microsoft 365

IT Services and IT Consulting

Website: https://products.office.com/business/office

Company Size: 10,001+ employees

MicrosoftSoftware Development

Microsoft Visual StudioSoftware Development

Microsoft Security Response CenterComputer and Network Security

Microsoft AdvertisingAdvertising Services

Microsoft for HealthcareSoftware Development

Loading…

Microsoft 365 Similar Companies

Capita

capita.com

Capita is an outsourcer, helping clients across the public and private sectors run complex business processes more efficiently, creating better consumer experiences. Operating across eight countries, Capita’s 34,000 colleagues support primarily UK and European clients with people-based services underpinned by market-leading technology. We’re a vital support service for our clients, enabling the everyday interactions that we expect to run seamlessly, to run seamlessly. A publicly listed business with adjusted revenue of £2.4bn, Capita’s areas of focus are Central Government, Local Public Service, Defence, Learning, Fire & Security, Contact Centres and Pensions Solutions. We’re embracing change to respond to the ever-changing needs of society, creating better outcomes for all our stakeholders.

VOIS

voiscentre.com

VOIS (Vodafone Intelligent Solutions) is a strategic arm of Vodafone Group Plc, creating value for customers by delivering intelligent solutions through Talent, Technology & Transformation. As the largest shared services organisation in the global telco industry, our portfolio of next-generation solutions and services are designed in partnership with customers across Vodafone Group, local markets, and partner markets to simplify and drive growth. We are pioneering a new Partnership model for the Telco industry, where the sharing of ideas, innovation, platforms and services will unlock opportunities for our people and value for our customers. With our strategic partner Accenture, we work alongside our Vodafone customers, other Telco and tech companies to drive transformation, meet the challenges of our industry and ensure we stay relevant and resilient. This partnership is a unique, industry-first model which brings together the best of in-house and 3rd party capability. We deliver value and results at scale by leveraging technology, data and our talented international team of 30K professionals in the following services: Technology, Business, B2B, Corporate Services, Customer Care. Our commercial model creates clear, benchmarked and competitively-priced services so that we can offer guaranteed outcomes for customers with flexibility and optionality. Bringing together our combined strengths with our strategic partner Accenture our strategy is to: Commercialise: Create cost transparency and foster trust and growth for our customers Re-platform: To simplify, streamline and scale our business Extend beyond our borders: deepening our relationships, growing our services and expanding our customer base across new customers & new geographies We work with customers across 28 countries from 10 VOIS locations: Albania, Egypt, Hungary, India, Romania, Spain, Turkey, UK, Germany, Ireland, and with a network of teams in Czech Republic, Italy, Greece, and Portugal.

Virtusa

cb virtusa.com

Virtusa is a global product and platform engineering services company that makes experiences better with technology. We help organizations grow faster, more profitably, and more sustainably by reimagining enterprises through domain-driven solutions. We combine strategy, design, and engineering, backed by unmatched expertise at the intersection of industry, business, and technology to generate real-world business impact for clients. Headquartered in Massachusetts with global delivery centers, Virtusa provides a broad range of services, solutions, and assets, including strategy and design, AI advisory and services, digital engineering, data and analytics, digital assurance, cloud and security, cx transformation and managed services across industries such as financial services, healthcare, communications, media, entertainment, travel, manufacturing, and technology.

Allianz Technology

allianz.com

With its headquarters in Munich, Germany, Allianz Technology is Allianz's global IT service provider and delivers IT solutions that drive the group's digitalization. With more than 11,000 employees in more than 20 countries around the world, Allianz Technology is tasked to run, optimize, transform, and innovate the infrastructure, applications, and services together with Allianz companies to co-create the best customer experience. We service the entire spectrum of digitalization - from one of the industry's largest IT infrastructure projects that spans data centres, networks, and security, to application platforms ranging from workplace services to digital interaction. In short: We deliver comprehensive end-to-end IT solutions for Allianz in the digital age. We are the backbone of Allianz.

Amadeus

amadeus.com

We make the experience of travel better for everyone, everywhere by inspiring innovation, partnerships and responsibility to people, places and planet. Our technology powers the travel and tourism industry. We inspire more connected ways of thinking, centered around the traveler. Our platform connects the travel and hospitality ecosystem. We are making travel a force for social and environmental good. We are passionate about travel. With a unique perspective, at the heart of our industry, we are redesigning the travel of tomorrow.

TELUS Digital

telusdigital.com

TELUS Digital crafts unique and enduring experiences for customers and employees, and creates future-focused digital transformations that stand the test of time. We are the brand behind the brands. Our global team members are both passionate ambassadors of our clients’ products and services, and visionary technology experts resolute in our pursuit to elevate their end customer journeys, solve business challenges, mitigate risks, and drive continuous innovation. Our portfolio of end-to-end, integrated capabilities include digital IT services, such as cloud solutions and AI-fueled automation, trust and safety services, AI data solutions, including expertise in computer vision, and front-end digital design and consulting services. Fuel iX™ is TELUS Digital’s proprietary GenAI engine at the heart of our innovation, helping enterprises advance their GenAI pilots to working prototypes and production at scale, quickly, securely and responsibly across multiple environments, applications and clouds. Powered by purpose, TELUS Digital leverages technology, human ingenuity and compassion to fuel remarkable outcomes and create inclusive, thriving communities in the regions where we operate around the world. Guided by our Humanity-in-the-loop principles, we take a responsible approach to the transformational technologies we develop and deploy by proactively considering and addressing the broader impacts of our work.

Apex Systems

apexsystems.com

Apex Systems is a leading global technology services firm that incorporates industry insights and experience to deliver solutions that fulfill our clients’ digital visions. We offer a continuum of services, specializing in strategy, transformation, and managed services across application development, data, enterprise platforms, cloud and infrastructure, and cybersecurity. Through our ability to innovate alongside our customers, we build and deploy the right artificial intelligence solutions to realize business value and improve customer experiences. Our alliances with cutting-edge technology partners empower our customers by providing them with the latest advancements. Apex has a presence in over 70 markets across North America, Europe, and India. Apex is a part of the commercial segment of ASGN Incorporated (NYSE: ASGN). To learn more, visit www.apexsystems.com. Apex strives to provide our talent with the best possible experience, from start to finish. Our commitment to excellence is reflected in many awards, including ClearlyRated's Best of Staffing® in Talent Satisfaction in the United States and Great Place to Work® in the United Kingdom and Mexico. Visit us today to join our team: www.apexsystems.com/careers.

Luxoft

luxoft.com

Luxoft, a DXC Technology Company (NYSE: DXC), is a digital strategy and software engineering firm providing bespoke technology solutions that drive business change for customers the world over. Acquired by U.S. company DXC Technology in 2019, Luxoft is a global operation in 44 cities and 21 countries with an international, agile workforce of nearly 18,000 people. It combines a unique blend of engineering excellence and deep industry expertise, helping over 425 global clients innovate in the areas of automotive, financial services, travel and hospitality, healthcare, life sciences, media and telecommunications. DXC Technology is a leading Fortune 500 IT services company which helps global companies run their mission critical systems. Together, DXC and Luxoft offer a differentiated customer-value proposition for digital transformation by combining Luxoft’s front-end digital capabilities with DXC’s expertise in IT modernization and integration. Follow our profile for regular updates and insights into technology and business needs.

UST

ust.com

UST is a global digital transformation solutions provider. For more than 20 years, UST has worked side by side with the world’s best companies to make a real impact through transformation. Powered by technology, inspired by people and led by purpose, UST partners with their clients from design to operation. With deep domain expertise and a future-proof philosophy, UST embeds innovation and agility into their clients’ organizations. With over 30K+ employees in 30+ countries, UST builds for boundless impact—touching billions of lives in the process.

Loading…

NEWS

Microsoft 365 CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 10, 2026 02:34 PM

New Attack Campaign Exploits Microsoft Teams Impersonation to Install A0Backdoor Malware

Cybersecurity researchers have discovered a new attack campaign that combines email bombing, Microsoft Teams impersonation,...

Read Article

March 10, 2026 10:24 AM

Top 10 Best Anti Phishing Tools in 2026

Best ANTI PHISHING TOOLS 2026: 1. Proofpoint Core Email Protection 2. Microsoft Defender for Office 365 3. Mimecast Advanced Email Security.

Read Article

March 10, 2026 05:59 AM

WA auditor general flags weak Microsoft 365 security controls across state entities

Government agencies in Western Australia are putting sensitive data and critical public services at risk due to inadequate Microsoft 365...

Read Article

March 10, 2026 01:25 AM

Microsoft introduces Microsoft 365 E7 subscription with expanded AI features

Microsoft Corp. today introduced a new subscription that bundles its productivity applications with artificial intelligence and...

Read Article

March 09, 2026 02:20 PM

Microsoft Launches Copilot Cowork, a New AI Feature in Microsoft 365 to Automate Tasks

Microsoft has introduced Copilot Cowork, a new AI-powered feature embedded within Microsoft 365 that moves beyond conversational assistance...

Read Article

March 09, 2026 02:00 PM

M365Pwned – Red Team GUI Toolkit for Microsoft 365 Exploitation via Graph API

A red teamer operating under the handle OtterHacker has publicly released M365Pwned, a pair of WinForms GUI tools designed to enumerate,...

Read Article

March 05, 2026 05:00 PM

Women’s History Month: Encouraging women in cybersecurity at every career stage

This Women's History Month, Microsoft explores ways to support the next generation of female defenders at every career stage.

Read Article

February 10, 2026 08:00 AM

Microsoft 365 Admin Center Outage Hits users in North America

Microsoft 365 Admin Center Outage Hits users in North America ... Microsoft 365 administrators in North America are grappling with widespread...

Read Article

February 06, 2026 08:00 AM

Cybersecurity for modern businesses: A practical path to stronger protection

Learn how modern cybersecurity for enterprise—spanning endpoint security, secure laptops, and fraud protection—helps reduce cyberattacks and...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-95828

SUMMARY

A vulnerability was determined in Mstfakts College-Management-System. This affects the function session_start of the file Front-end/server.php of the component Authentication. Executing a manipulation can lead to session fixiation. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-09-22

Updated

Date2026-09-22

RISK INFORMATION (Score: 4.3)

cvss2

Base Score: 5.0

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:N/A:N

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.8

REFERENCES

CVE-2026-95820

SUMMARY

A vulnerability was found in anirbandutta9 College-Notes-Gallery up to 8c1cf3d98f30982d069c88ca172612c001eb39f6. Affected by this issue is some unknown functionality of the file /dashboard/userprofile.php?section=admin1. Performing a manipulation of the argument image results in unrestricted upload. It is possible to initiate the attack remotely. The exploit has been made public and could be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.

Published

Date2026-09-22

Updated

Date2026-09-22

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-61685

SUMMARY

ReactPress is a publishing system for React developers. Prior to version 3.7.0, ReactPress API list endpoints build TypeORM `QueryBuilder` conditions using unsanitized HTTP query parameter names as SQL column identifiers (e.g. `` `article.${key}` ``). TypeORM parameterizes values but not column names, allowing unauthenticated attackers to inject SQL through crafted query string keys. Version 3.7.0 contains a patch. As a workaround, allowlist allowed filter column names before interpolating into SQL.

Published

Date2026-09-22

Updated

Date2026-09-22

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

3.9

REFERENCES

CVE-2026-57576

SUMMARY

plone.app.dexterity is a content-type system for the Plone content management system, and plone.app.contenttypes provides Plone’s Dexterity-based content types. Plone.app.dexterity versions through 3.2.2, 4.0.0 through 4.1.2, and 5.0.0, and plone.app.contenttypes versions through 3.0.11, 4.0.0 through 4.0.9, and 5.0.0 are vulnerable to denial of service because an authenticated user can create content with excessively long titles, descriptions, or uploaded-file names, causing Plone to become unresponsive and potentially making the resulting content difficult to edit or delete. The vulnerability is patched in plone.app.dexterity versions 3.2.3, 4.1.3, and 5.0.1, and in plone.app.contenttypes versions 3.0.12, 4.0.10, and 5.0.1.

Published

Date2026-09-22

Updated

Date2026-09-22

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.8

REFERENCES

CVE-2026-18176

SUMMARY

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to cleartext transmission of sensitive information.

Published

Date2026-09-22

Updated

Date2026-09-22

RISK INFORMATION (Score: 7.4)

cvss3

Base Score: 7.4

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Impact Score

Exploitability

2.8

REFERENCES

https://www.ibm.com/support/pages/node/7288641

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

Microsoft 365 Vendor Cyber Rating & Cyber Score

Microsoft 365 A.I CyberSecurity Scoring

Microsoft 365 CyberSecurity News & History

Microsoft 365 Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Microsoft 365

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Microsoft 365 vs IT Services and IT Consulting Industry Avg (This Year)

Incident History - Microsoft 365 (X = Date, Y = Severity)

Microsoft 365 Subsidiaries

Microsoft 365

Microsoft 365 Similar Companies

Capita

VOIS

Virtusa

Allianz Technology

Amadeus

TELUS Digital

Apex Systems

Luxoft

UST

Microsoft 365 CyberSecurity News

New Attack Campaign Exploits Microsoft Teams Impersonation to Install A0Backdoor Malware

Top 10 Best Anti Phishing Tools in 2026

WA auditor general flags weak Microsoft 365 security controls across state entities

Microsoft introduces Microsoft 365 E7 subscription with expanded AI features

Microsoft Launches Copilot Cowork, a New AI Feature in Microsoft 365 to Automate Tasks

M365Pwned – Red Team GUI Toolkit for Microsoft 365 Exploitation via Graph API

Women’s History Month: Encouraging women in cybersecurity at every career stage

Microsoft 365 Admin Center Outage Hits users in North America

Cybersecurity for modern businesses: A practical path to stronger protection

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Microsoft 365 CyberSecurity News & History

Microsoft 365 Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Microsoft 365

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Microsoft 365 vs IT Services and IT Consulting Industry Avg (This Year)

Incident History - Microsoft 365 (X = Date, Y = Severity)

Microsoft 365 Subsidiaries

Microsoft 365

Microsoft 365 Similar Companies

Capita

VOIS

Virtusa

Allianz Technology

Amadeus

TELUS Digital

Apex Systems

Luxoft

UST

Microsoft 365 CyberSecurity News

New Attack Campaign Exploits Microsoft Teams Impersonation to Install A0Backdoor Malware

Top 10 Best Anti Phishing Tools in 2026

WA auditor general flags weak Microsoft 365 security controls across state entities

Microsoft introduces Microsoft 365 E7 subscription with expanded AI features

Microsoft Launches Copilot Cowork, a New AI Feature in Microsoft 365 to Automate Tasks

M365Pwned – Red Team GUI Toolkit for Microsoft 365 Exploitation via Graph API

Women’s History Month: Encouraging women in cybersecurity at every career stage

Microsoft 365 Admin Center Outage Hits users in North America

Cybersecurity for modern businesses: A practical path to stronger protection

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo