Comparison Overview

Orbital Education

VS

Secretaria de Educação do Estado de Pernambuco

Orbital Education

Station Road, Cheadle, England, SK8 7BS, GB
Last Update: 2025-03-06 (UTC)
View Profile
Between 750 and 799
https://orbitaled.com

The Orbital Education school community spans several continents. Orbital Education schools celebrate diversity with each school rooted in its local culture and language, with an international student base, multi-language approach and global vision. All Orbital Education schools are unwavering in their commitment to deliver an internationally acclaimed education that reaches beyond academic achievement and excellent exam results, enabling students to access high-quality universities. Orbital's educational ethos takes a wellbeing-centred approach with a rich co-curricular programme where students are supported to fulfil their potential and enjoy their school days. Everyone in the Orbital school community, from the central team to the youngest Orbital student is encouraged to live by strong core values. With this approach, we work together to provide the best outcomes for every single student. Values: Excellence, Respect, Responsibility, Integrity, Compassion

NAICS: None
NAICS Definition:
Employees: 55
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0
View Profile

Secretaria de Educação do Estado de Pernambuco

undefined, undefined, undefined, undefined, BR
Last Update: 2025-03-05 (UTC)
Between 750 and 799
http://www.educacao.pe.gov.br

For 52 years, the Department of Education of Pernambuco was linked to the health department of the State. The disconnect between the two bodies and the consequent acquisition of autonomy of the SE came through Law 466, on 22 April 1949, during the administration of then Governor Alexandre José Barbosa Lima Sobrinho. The regulation of the Secretary of State for Education and Culture was approved by Decree No. 75, June 8, 1949. At that time, the first secretary, Silvio de Lira Rabelo, had assumed the folder for a month and a half. After the regulation, the Department had changed the nomenclature four times: - Decree 3197 of August 13, 1974 - approves the rules of the Department of Education and Culture; - Decree 15,717 of April 27, 1992 - approves the rules of the Department of Education, Culture and Sports; - Decree 18,594 of July 17, 1995 - approves the rules of the Department of Education and Sports; - Decree 21,682 of September 1, 1999 - approves the rules of the Department of Education to the present day.

NAICS: None
NAICS Definition: Others
Employees: 13,694
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/orbital-education-ltd-.jpeg
Orbital Education
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/secretaria-de-educa-o-do-estado-de-pernambuco.jpeg
Secretaria de Educação do Estado de Pernambuco
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Orbital Education
100%
Compliance Rate
0/4 Standards Verified
Secretaria de Educação do Estado de Pernambuco
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Education Management Industry Average (This Year)

No incidents recorded for Orbital Education in 2025.

Incidents vs Education Management Industry Average (This Year)

No incidents recorded for Secretaria de Educação do Estado de Pernambuco in 2025.

Incident History — Orbital Education (X = Date, Y = Severity)

Orbital Education cyber incidents detection timeline including parent company and subsidiaries

Incident History — Secretaria de Educação do Estado de Pernambuco (X = Date, Y = Severity)

Secretaria de Educação do Estado de Pernambuco cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/orbital-education-ltd-.jpeg
Orbital Education
Incidents

No Incident

https://images.rankiteo.com/companyimages/secretaria-de-educa-o-do-estado-de-pernambuco.jpeg
Secretaria de Educação do Estado de Pernambuco
Incidents

No Incident

FAQ

Secretaria de Educação do Estado de Pernambuco company demonstrates a stronger AI Cybersecurity Score compared to Orbital Education company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Secretaria de Educação do Estado de Pernambuco company has disclosed a higher number of cyber incidents compared to Orbital Education company.

In the current year, Secretaria de Educação do Estado de Pernambuco company and Orbital Education company have not reported any cyber incidents.

Neither Secretaria de Educação do Estado de Pernambuco company nor Orbital Education company has reported experiencing a ransomware attack publicly.

Neither Secretaria de Educação do Estado de Pernambuco company nor Orbital Education company has reported experiencing a data breach publicly.

Neither Secretaria de Educação do Estado de Pernambuco company nor Orbital Education company has reported experiencing targeted cyberattacks publicly.

Neither Orbital Education company nor Secretaria de Educação do Estado de Pernambuco company has reported experiencing or disclosing vulnerabilities publicly.

Neither Orbital Education nor Secretaria de Educação do Estado de Pernambuco holds any compliance certifications.

Neither company holds any compliance certifications.

Neither Orbital Education company nor Secretaria de Educação do Estado de Pernambuco company has publicly disclosed detailed information about the number of their subsidiaries.

Secretaria de Educação do Estado de Pernambuco company employs more people globally than Orbital Education company, reflecting its scale as a Education Management.

Neither Orbital Education nor Secretaria de Educação do Estado de Pernambuco holds SOC 2 Type 1 certification.

Neither Orbital Education nor Secretaria de Educação do Estado de Pernambuco holds SOC 2 Type 2 certification.

Neither Orbital Education nor Secretaria de Educação do Estado de Pernambuco holds ISO 27001 certification.

Neither Orbital Education nor Secretaria de Educação do Estado de Pernambuco holds PCI DSS certification.

Neither Orbital Education nor Secretaria de Educação do Estado de Pernambuco holds HIPAA certification.

Neither Orbital Education nor Secretaria de Educação do Estado de Pernambuco holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Deck Mate 1 executes firmware directly from an external EEPROM without verifying authenticity or integrity. An attacker with physical access can replace or reflash the EEPROM to run arbitrary code that persists across reboots. Because this design predates modern secure-boot or signed-update mechanisms, affected systems should be physically protected or retired from service. The vendor has not indicated that firmware updates are available for this legacy model.

Published
Date
2025-10-24
Updated
Date
2025-10-24
Risk Information
cvss4
Base: 7.0
Severity: LOW
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Deck Mate 2 lacks a verified secure-boot chain and runtime integrity validation for its controller and display modules. Without cryptographic boot verification, an attacker with physical access can modify or replace the bootloader, kernel, or filesystem and gain persistent code execution on reboot. This weakness allows long-term firmware tampering that survives power cycles. The vendor indicates that more recent firmware updates strengthen update-chain integrity and disable physical update ports to mitigate related attack avenues.

Published
Date
2025-10-24
Updated
Date
2025-10-24
Risk Information
cvss4
Base: 7.0
Severity: LOW
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Deck Mate 2's firmware update mechanism accepts packages without cryptographic signature verification, encrypts them with a single hard-coded AES key shared across devices, and uses a truncated HMAC for integrity validation. Attackers with access to the update interface - typically via the unit's USB update port - can craft or modify firmware packages to execute arbitrary code as root, allowing persistent compromise of the device's integrity and deck randomization process. Physical or on-premises access remains the most likely attack path, though network-exposed or telemetry-enabled deployments could theoretically allow remote exploitation if misconfigured. The vendor confirmed that firmware updates have been issued to correct these update-chain weaknesses and that USB update access has been disabled on affected units.

Published
Date
2025-10-24
Updated
Date
2025-10-24
Risk Information
cvss4
Base: 7.0
Severity: LOW
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java FIPS bc-fips on All (API modules), Legion of the Bouncy Castle Inc. Bouncy Castle for Java LTS bcprov-lts8on on All (API modules) allows Excessive Allocation. This vulnerability is associated with program files core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeCFB.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeGCM.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/fips/SHA256NativeDigest.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeEngine.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeCBC.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeCTR.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeCFB.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeGCM.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeEngine.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeCBC.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeGCMSIV.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeCCM.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeCTR.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA256NativeDigest.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA224NativeDigest.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA3NativeDigest.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHAKENativeDigest.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA512NativeDigest.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA384NativeDigest.Java. This issue affects Bouncy Castle for Java FIPS: from 2.1.0 through 2.1.1; Bouncy Castle for Java LTS: from 2.73.0 through 2.73.7.

Published
Date
2025-10-24
Updated
Date
2025-10-24
Risk Information
cvss4
Base: 5.9
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:N/R:U/V:C/RE:M/U:Amber
References
Description

Wasmtime is a runtime for WebAssembly. In versions from 38.0.0 to before 38.0.3, the implementation of component-model related host-to-wasm trampolines in Wasmtime contained a bug where it's possible to carefully craft a component, which when called in a specific way, would crash the host with a segfault or assert failure. Wasmtime 38.0.3 has been released and is patched to fix this issue. There are no workarounds.

Published
Date
2025-10-24
Updated
Date
2025-10-24
Risk Information
cvss4
Base: 2.1
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References