Comparison Overview

Stone Creek Surfaces

VS

YDA Group

Stone Creek Surfaces

3520 Central Park Blvd, Louisville, Tennessee 37777-4752, US
Last Update: 2025-03-06 (UTC)
Between 900 and 1000
http://www.stonecreeksurfaces.com/

Excellent

Stone Creek Surfaces, located in the Knoxville area is proud to showcase East Tennessee’s widest array of counter top materials available. We carry many different colors of both granite and marble and also offer six brands of quartz. We offer surface materials for kitchen countertops, bathroom vanities, tables, fireplaces, and more.

NAICS: 23
NAICS Definition:
Employees: 8
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

YDA Group

Kızılırmak Mahallesi Dumlupınar Bulvarı No:9 YDA Center A Blok Kat:33 Ankara, Çankaya, TR
Last Update: 2025-03-14 (UTC)

Excellent

Between 900 and 1000
http://www.yda.com.tr

Temelleri 1954 yılına dayanan YDA Group; bünyesindeki ilk inşaat & taahhüt firması olan AKSA İnşaat ile 47 yılı; Group’un Onursal Başkanı ve Kurucusu rahmetli Yaşar Dede Arslan’ın adına ithafen kurulan YDA İnşaat ile de 27 yılı geride bırakarak yarım asrı aşan tecrübesiyle istikrarlı büyüme ivmesini sürdürmektedir. Ana faaliyet alanı olan inşaat sektöründe; anahtar teslimi projeler, Yap-İşlet-Devret (Y.İ.D) ve KamuÖzel İşbirliği (KÖİ / PPP) modelleri ile havalimanları ve sağlık kampüsleri yatırım projeleri, yüksek teknolojik binalar, endüstriyel tesisler, çimento fabrikaları, altyapı projeleri, yollar, köprüler, kavşaklar, yüksek katlı binalar, toplu konut projeleri, iş merkezleri, alışveriş merkezleri, hastaneler, okul kompleksleri, apartmanlar, lüks konutlar, villalar, gayrimenkul geliştirme projeleri gerçekleştiren YDA Group; planlı ve istikrarlı büyüme politikasıyla, inşaat sektörünün yanı sıra pazarın gelişen ihtiyaçlarını ve müşterilerinin beklentilerini karşılamak için yan sanayi ve hizmet dalları oluşturarak geniş bir faaliyet yelpazesinde hizmet vermeye devam etmektedir. Bu doğrultuda; İnşaat & Taahhüt, Gayrimenkul Geliştirme, Havacılık, Medikal & Sağlık, Enerji, Destek Hizmetleri (Sağlık, Catering, Tesis Yönetimi), Madencilik, Tarım, Bilgi Teknolojileri (IT) ve Açık Hava Dijital Reklamcılık sektörleri olmak üzere on temel alanda faaliyette bulunan YDA Group; faaliyet gösterdiği her sektörde dünya standartlarında hizmet sunmayı ilke edinmiştir. Şirket, kalitesini ve güvenilirliğini, ISO 9001:2000 Kalite Yönetimi Standardı, ISO 14001:2004 Çevre Standardı ve OHSAS 18001 İşçi Sağlığı ve Kalite Yönetim Sistemleri Standardı ve ISO 15504 (SPICE) gibi uluslararası belgelerle ispatlamaktadır. 2000’li yılların başından itibaren uluslararası pazarlara açılarak, Kazakistan, Ukrayna, Birleşik Arap Emirlikleri, Rusya, Suudi Arabistan, Afganistan ve Moldova gibi pek çok ülkede başarılı projelere imza atmış olan YDA Group; gayrimenkul geliştirme projelerinin yanı sıra

NAICS: 23
NAICS Definition:
Employees: 10,001+
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/defaultcompany.jpeg
Stone Creek Surfaces
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
https://images.rankiteo.com/companyimages/yda-group.jpeg
YDA Group
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
Compliance Summary
Stone Creek Surfaces
100%
Compliance Rate
0/4 Standards Verified
YDA Group
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Construction Industry Average (This Year)

No incidents recorded for Stone Creek Surfaces in 2025.

Incidents vs Construction Industry Average (This Year)

No incidents recorded for YDA Group in 2025.

Incident History — Stone Creek Surfaces (X = Date, Y = Severity)

Stone Creek Surfaces cyber incidents detection timeline including parent company and subsidiaries

Incident History — YDA Group (X = Date, Y = Severity)

YDA Group cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/defaultcompany.jpeg
Stone Creek Surfaces
Incidents

No Incident

https://images.rankiteo.com/companyimages/yda-group.jpeg
YDA Group
Incidents

No Incident

FAQ

Both Stone Creek Surfaces company and YDA Group company demonstrate a comparable AI risk posture, with strong governance and monitoring frameworks in place.

Historically, YDA Group company has disclosed a higher number of cyber incidents compared to Stone Creek Surfaces company.

In the current year, YDA Group company and Stone Creek Surfaces company have not reported any cyber incidents.

Neither YDA Group company nor Stone Creek Surfaces company has reported experiencing a ransomware attack publicly.

Neither YDA Group company nor Stone Creek Surfaces company has reported experiencing a data breach publicly.

Neither YDA Group company nor Stone Creek Surfaces company has reported experiencing targeted cyberattacks publicly.

Neither Stone Creek Surfaces company nor YDA Group company has reported experiencing or disclosing vulnerabilities publicly.

Neither Stone Creek Surfaces company nor YDA Group company has publicly disclosed detailed information about the number of their subsidiaries.

Stone Creek Surfaces company employs more people globally than YDA Group company, reflecting its scale as a Construction.

Latest Global CVEs (Not Company-Specific)

Description

An issue was discovered in chinabugotech hutool before 5.8.4 allowing attackers to execute arbitrary expressions that lead to arbitrary method invocation and potentially remote code execution (RCE) via the QLExpressEngine class.

Published
Date
2025-09-25
Updated
Date
2025-09-25
References
Description

A weakness has been identified in JeecgBoot up to 3.8.2. The impacted element is an unknown function of the file /sys/role/exportXls. This manipulation causes improper authorization. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2025-09-25
Updated
Date
2025-09-25
Risk Information
cvss2
Base: 4.0
Severity: LOW
AV:N/AC:L/Au:S/C:P/I:N/A:N
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A security flaw has been discovered in JeecgBoot up to 3.8.2. The affected element is an unknown function of the file /sys/user/exportXls of the component Filter Handler. The manipulation results in improper authorization. The attack may be performed from remote. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2025-09-25
Updated
Date
2025-09-25
Risk Information
cvss2
Base: 4.0
Severity: LOW
AV:N/AC:L/Au:S/C:P/I:N/A:N
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability was identified in JeecgBoot up to 3.8.2. Impacted is an unknown function of the file /sys/tenant/deleteBatch. The manipulation of the argument ids leads to improper authorization. The attack is possible to be carried out remotely. The complexity of an attack is rather high. The exploitability is considered difficult. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2025-09-25
Updated
Date
2025-09-25
Risk Information
cvss2
Base: 2.1
Severity: HIGH
AV:N/AC:H/Au:S/C:P/I:N/A:N
cvss3
Base: 3.1
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
cvss4
Base: 2.3
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability was determined in JeecgBoot up to 3.8.2. This issue affects some unknown processing of the file /api/getDepartUserList. Executing manipulation of the argument departId can lead to improper authorization. The attack can be executed remotely. This attack is characterized by high complexity. The exploitability is assessed as difficult. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2025-09-25
Updated
Date
2025-09-25
Risk Information
cvss2
Base: 2.1
Severity: HIGH
AV:N/AC:H/Au:S/C:P/I:N/A:N
cvss3
Base: 3.1
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
cvss4
Base: 2.3
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References