What is the official website of Office of Cybersecurity, Energy Security, and Emergency Response (CESER) ?

The official website of Office of Cybersecurity, Energy Security, and Emergency Response (CESER) is https://www.energy.gov/ceser/office-cybersecurity-energy-security-and-emergency-response.

Has Office of Cybersecurity, Energy Security, and Emergency Response (CESER) been affected by any supply chain cyber incidents ?

According to Rankiteo, Office of Cybersecurity, Energy Security, and Emergency Response (CESER) has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

How many LinkedIn followers does Office of Cybersecurity, Energy Security, and Emergency Response (CESER) have ?

Office of Cybersecurity, Energy Security, and Emergency Response (CESER)'s official LinkedIn profile has approximately 7,123 followers.

What is the NAICS classification code for Office of Cybersecurity, Energy Security, and Emergency Response (CESER) ?

Office of Cybersecurity, Energy Security, and Emergency Response (CESER) is classified under the NAICS code 92, which corresponds to Public Administration.

How many peer or competitor companies does Office of Cybersecurity, Energy Security, and Emergency Response (CESER) have ?

Office of Cybersecurity, Energy Security, and Emergency Response (CESER) has an estimated 13,026 peer or competitor companies worldwide.

What types of cybersecurity incidents has Office of Cybersecurity, Energy Security, and Emergency Response (CESER) faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

OCESER

Boost Score +25 with badge (5 left)

730

/1000

Moderate

755

/1000

Fair

Office of Cybersecurity, Energy Security, and Emergency Response (CESER) Vendor Cyber Rating & Cyber Score

energy.gov

Add Your Compliance Badge

The U.S. Department of Energy’s (DOE) Office of Cybersecurity, Energy Security, and Emergency Response (CESER) leads the national effort to enhance the security and resiliency of the U.S. energy sector against growing and evolving cyber and physical threats to critical energy infrastructure. CESER’s success is rooted in strong partnerships it has fostered across the energy sector in executing its mission. CESER’s collaboration with energy owners and operators, manufacturers, and trade associations; with other Federal agencies; across States, local governments, tribes, territories; with academia, National Labs, and the research community —help to advance collective preparedness and response to the growing landscape of threats, technology

OCESER A.I CyberSecurity Scoring

Scoring History

OCESER

Office of Cybersecurity, Energy Security, and Emergency Response (CESER) CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Office of Cybersecu...

Cyber Attack

100

5/2026

FBIOFF177890542...

Loading…

A.I.

OCESER Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for OCESER

Incidents vs Government Administration Industry Avg (This Year)

Office of Cybersecurity, Energy Security, and Emergency Response (CESER) has 31.03% fewer incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

Office of Cybersecurity, Energy Security, and Emergency Response (CESER) has 4.76% fewer incidents than the average of all companies with at least one recorded incident.

Incident Types OCESER vs Government Administration Industry Avg (This Year)

Office of Cybersecurity, Energy Security, and Emergency Response (CESER) reported 1 incidents this year: 1 cyber attacks, 0 ransomware, 0 vulnerabilities, 0 data breaches, compared to industry peers with at least 1 incident.

Incident History - OCESER (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Office of Cybersecurity, Energy Security, and Emergency Response (CESER) Subsidiaries

Parent Company

OCESER

Government Administration

Website: https://www.energy.gov/ceser/office-cybersecurity-energy-security-and-emergency-response

Company Size: 201-500 employees

No subsidiary data available for this company.

Loading…

Office of Cybersecurity, Energy Security, and Emergency Response (CESER) Similar Companies

Belastingdienst

belastingdienst.nl

De organisatie bestaat uit diverse onderdelen, waaronder de Belastingdienst, Douane, Toeslagen, FIOD en enkele facilitaire organisaties. Met ruim 30.000 medewerkers werken we in kantoren die verspreid zijn over het hele land. Gezamenlijk heffen, innen en controleren we belastingen. Daarnaast zorgen we ook voor het uitbetalen van toeslagen. En zijn we verantwoordelijk voor douanetaken en het opsporen van fraude. De Belastingdienst is een organisatie die 24 uur per dag, 7 dagen per week in dienst staat van de samenleving. Waar jaarlijks miljoenen aangiften worden behandeld, en waar voor honderden miljoenen aan toeslagen worden uitbetaald. En waar de Douane dagelijks zorgt voor de vlotte en veilige in- en uitvoer van tonnen goederen. Ondanks deze grote aantallen streven wij waar mogelijk naar individuele en persoonlijke dienstverlening. En in de vorm van bijvoorbeeld convenanten en partnerships werken wij ook zo goed mogelijk samen met het bedrijfsleven en andere ketenpartners. De Belastingdienst: grootschalig, veelzijdig en altijd maatschappelijk relevant.

Council Careers Victoria

asn.au

Victorian local government jobs offer opportunities for people with diverse skills. The sector delivers more than 100 services and employs staff in the areas of health and community care, corporate and business support, engineering, planning and community development, and environment and emergency management. Local government offers you the opportunity to: • work directly with the community • work in any location across the state • be involved in on-going learning and development • negotiate flexible working arrangements • take part in employee health and recreation programs • undertake further study.

State of Missouri

mo.gov

Build the Missouri of tomorrow. Ensure a strong foundation today. Join a group of innovative team members focused on driving the State of Missouri forward. As public servants, our team members have the opportunity to produce work that is both lasting and important. This work serves to protect families, communities, and our natural resources. No matter where you are in your career, whether entry level or senior level, a career with the State of Missouri will challenge you to grow both personally and professionally. Though one employer, there is no shortage of exciting opportunities as there are many career paths you may take within the State. If you are searching for a job that transforms lives, including your own, a career with the State of Missouri is the perfect fit!

Government of Canada

canada.ca

The Government of Canada works on behalf of Canadians, both at home and abroad. Visit www.Canada.ca to learn more. Canada’s professional, non-partisan public service is among the best in the world, and many of its departments and agencies place in Canada’s Top 100 Employers year after year. If you are interested in joining our diverse and innovative team, visit www.jobs.gc.ca for information and opportunities. Terms: https://www.canada.ca/en/transparency/terms.html Le gouvernement du Canada œuvre au nom des Canadiens, tant au pays qu’à l’étranger. Consultez le site www.canada.ca pour en savoir plus. Impartiale et professionnelle, la fonction publique du Canada fait partie de l’élite mondiale. Bon nombre de ses ministères et organismes figurent parmi les 100 meilleurs employeurs du pays année après année. Vous aimeriez intégrer notre équipe diversifiée et innovante? Rendez-vous au www.emplois.gc.ca pour obtenir des informations et connaître les possibilités qui s’offrent à vous. Avis : https://www.canada.ca/fr/transparence/avis.html

The Singapore Public Service

careers.gov.sg

The Singapore Public Service works with the elected Government and Singaporeans to forge a common vision of Singapore’s future and bring it into reality. We take pride in living out our values of integrity, service and excellence. Follow us for stories on how our public officers are contributing to Public Sector Transformation by: · Innovating to deliver even better policies and services for Singaporeans and Singapore · Planning ahead for future challenges · Building a flourishing public service workforce and resilient, future-ready organisations. Gain insights on how our officers are: · Making an impact and realising their aspirations through access to a diverse range of exciting roles · Growing and learning in their jobs every day through the purposeful work they do and the diverse development opportunities across the public service · Balancing their work-life priorities through flexible work arrangements and employee wellness programmes. Shape Singapore’s future and yours with us. Join us to make a difference today for tomorrow.

U.S. Department of the Treasury

treasury.gov

The Treasury Department is the executive agency responsible for promoting economic prosperity and ensuring the financial security of the United States. The Department is responsible for a wide range of activities such as advising the President on economic and financial issues, encouraging sustainable economic growth, and fostering improved governance in financial institutions. The Department of the Treasury operates and maintains systems that are critical to the nation's financial infrastructure, such as the production of coin and currency, the disbursement of payments to the American public, revenue collection, and the borrowing of funds necessary to run the federal government. The Department works with other federal agencies, foreign governments, and international financial institutions to encourage global economic growth, raise standards of living, and to the extent possible, predict and prevent economic and financial crises. The Treasury Department also performs a critical and far-reaching role in enhancing national security by implementing economic sanctions against foreign threats to the U.S., identifying and targeting the financial support networks of national security threats, and improving the safeguards of our financial systems.

National Park Service

nps.gov

Most people know that the National Park Service cares for national parks, a network of over 420 natural, cultural and recreational sites across the nation. The treasures in this system – the first of its kind in the world – have been set aside by the American people to preserve, protect, and share the legacies of this land. People from all around the world visit national parks to experience America's story, marvel at the natural wonders, and have fun. Places like the Grand Canyon, the Statue of Liberty, and Gettysburg are popular destinations, but so too are the hundreds of lesser known yet equally meaningful gems like Rosie the Riveter in California, Boston Harbor Islands in Massachusetts, and Russell Cave in Alabama. The American system of national parks was the first of its kind in the world, and provides a living model for other nations wishing to establish and manage their own protected areas. The park service actively consults with these Nations, sharing what we've learned, and gaining knowledge from the experience of others. Beyond national parks, the National Park Service helps communities across America preserve and enhance important local heritage and close-to-home recreational opportunities. Grants and assistance are offered to register, record and save historic places; create community parks and local recreation facilities; conserve rivers and streams, and develop trails and greenways.

U.S. Department of Homeland Security

dhs.gov

The Department of Homeland Security (DHS) has a vital mission: to secure the nation from the many threats we face. This requires the hard work of more than 260,000 employees in jobs that range from aviation and border security to emergency response, from cybersecurity analyst to chemical facility inspector. Our duties are wide-ranging, and our goal is clear - keeping America safe. Mission 1: Counter Terrorism and Homeland Security Threats Mission 2: Secure U.S. Borders and Approaches Mission 3: Secure Cyberspace and Critical Infrastructure Mission 4: Preserve and Uphold the Nation's Prosperity and Economic Security Mission 5: Strengthen Preparedness and Resilience Mission 6: Champion the DHS Workforce and Strengthen the Department We continually strengthen our partnerships with communities, first responders, law enforcement and government agencies - at the state, local, tribal, federal and international levels. We are accelerating the deployment of science, technology, and innovation in order to make America more secure. And we are becoming leaner, smarter, and more efficient, ensuring that every security resource is used as effectively as possible. Together, we are committed to relentless resilience, striving to prevent future attacks against the United States and our allies, responding decisively to natural and man-made disasters, and advancing American prosperity and economic security long into the future.

Department of Education

vic.gov.au

The Department of Education is responsible for delivering the Victorian Government’s commitment to making Victoria the Education State, where all Victorians have the best learning and development experience, regardless of their background, postcode or circumstances. Education remains a cornerstone for ensuring all Victorians have the skills and knowledge they need to actively participate in and contribute to our rapidly-changing economy and society. The Department delivers and regulates statewide learning and development services across the early childhood and school sectors. Previously the Department of Education and Training.

Loading…

NEWS

Office of Cybersecurity, Energy Security, and Emergency Response (CESER) CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 18, 2026 11:03 PM

CESER Prioritizes American Energy Dominance and Infrastructure Hardening in New Strategic Plan

U.S. Department of Energy's (DOE) Office of Cybersecurity, Energy Security, and Emergency Response (CESER) published its first ever...

Read Article

March 18, 2026 10:52 AM

DOE to lay out strategy for protecting energy sector from cyberattacks

The department's cybersecurity office will outline its goals after the release of the White House cyber strategy.

Read Article

March 17, 2026 10:23 PM

Energy’s cyber unit eyes new strategic plan

The Energy Department's Office of Cybersecurity, Energy Security, and Emergency Response plans to lay out its first strategic plan,...

Read Article

March 17, 2026 05:02 PM

Energy Department set to release its first-ever cyber strategy

Alex Fitzsimmons, the acting director of the Office of Cybersecurity, Energy Security, and Emergency Response (CESER), said the plan is...

Read Article

March 09, 2026 07:42 PM

House Committee Clears DOE CESER Leadership Bill

The House Energy and Commerce Committee voted on March 4 to approve a bill that would require Senate confirmation for an assistant secretary...

Read Article

March 05, 2026 06:01 AM

Energy Sector Cyber Bills Set for House Markup Tomorrow (Mar 4, 2026)

Legislation that would elevate the Department of Energy's cybersecurity office and require it to be led by a Senate-confirmed assistant...

Read Article

February 05, 2026 08:00 AM

Sen. Wyden Pledges Further Efforts to Block CISA Nominee

Sen. Ron Wyden, D-Ore., is promising to continue his thus-far successful efforts to block confirmation of Sean Plankey as the Trump...

Read Article

January 16, 2026 08:00 AM

Appropriations Bill That Funds Water, Energy Cyber Programs Clears Senate (Jan 16, 2026)

Legislation that would fund cybersecurity programs for electricity and water systems and help police departments fight cyber crime cleared...

Read Article

January 13, 2026 08:00 AM

Lawmakers, experts confront growing cyber, physical threats to U.S. energy infrastructure

U.S. House lawmakers and energy industry leaders warned that growing cyber and physical threats to the nation's power grid demand closer...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-58489

SUMMARY

HedgeDoc is an open source, real-time collaborative markdown notes application. Prior to 1.11.0, the GitHub Gist export flow created an OAuth2 state value but only checked that it was present rather than validating it against the value expected for the user's session. Because the state was not properly validated, an attacker could forge a callback URL containing their own valid GitHub OAuth code. When processing the callback, HedgeDoc used the victim's logged-in session to select which note to export, but the attacker's authorization code to determine which GitHub account received it. As a result, a logged-in victim who clicked a crafted link could export their own private, protected, or limited note directly into a Gist controlled by the attacker. This issue has been fixed in version 1.11.0.

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: )

cvss4

Base Score: 6.8

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-58486

SUMMARY

HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to version 1.11.0, HedgeDoc was vulnerable to a YAML alias bomb due to unsafe processing of the note frontmatter. HedgeDoc parsed frontmatter with js-yaml.load (js-yaml v3) via @hedgedoc/meta-marked, which resolved YAML anchor aliases. A compact malicious payload could therefore expand into a huge object structure, consuming excessive CPU. This expansion ran on every request to the publish view (/s/<shortid>) and, when placed under the opengraph key, the editor view (/<noteId>). A ten-level alias bomb could block the single Node.js event loop for roughly 235 seconds per request, causing concurrent requests to hang or drop and rendering the instance unavailable (DoS). Because the note was stored in the database, the impact survived process restarts until the note was removed. toobusy-js did not reliably mitigate the worst cases, as the event loop was saturated before the middleware could respond. This issue was fixed in version 1.11.0.

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: )

cvss4

Base Score: 8.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-58102

SUMMARY

Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a heap out-of-bounds read via a long certificate extension OID in hv_exts. When building the extension hash (via extensions(), extensions_by_long_name(), extensions_by_oid(), or has_extension_oid()), the code passes OBJ_obj2txt()'s return value as the hash-key length; because that value is the OID's full text length rather than the bytes written to the fixed-size buffer (129 bytes), an OID whose text is longer than the 129-byte buffer causes a read past the allocation, exposing adjacent heap memory as the returned hash key. extensions_by_name() uses the static shortname path and is not affected.

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2026-58101

SUMMARY

Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference. X509V3_EXT_d2i(ext) returns NULL when an extension's DER value fails to parse. basicC, ia5string, and auth_att dereference its result without a NULL check. keyid_data also dereferences akid->keyid, which is NULL for an empty AKI SEQUENCE (DER 30 00) even when the parse succeeds. A caller invoking an affected helper on an extension from an untrusted certificate triggers a SIGSEGV that crashes the Perl process.

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2026-57856

SUMMARY

Cockpit CMS contains a path traversal vulnerability in the Bucket file storage API (/system/buckets/api). The api() method in modules/System/Controller/Buckets.php sanitizes the bucket name with preg_replace('/[^a-zA-Z0-9-_\\.]/','', $bucket), which permits '..' and '../' sequences. The sanitized value is interpolated into a Flysystem path as uploads://buckets/{bucket}. Flysystem's WhitespacePathNormalizer resolves 'buckets/..' to the empty string (the uploads storage root) without raising PathTraversalDetected because the '..' has a preceding component to consume. An authenticated low-privileged user can send a crafted request with a '../' bucket name to list, upload, and delete files across all buckets, including those belonging to other users or roles

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…