What is the official website of Thiess ?

The official website of Thiess is http://www.thiess.com.

What is Thiess's cybersecurity risk score?

Thiess has an AI-generated cybersecurity risk score of 781 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Thiess experienced?

According to Rankiteo, Thiess currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Thiess been affected by any supply chain cyber incidents ?

According to Rankiteo, Thiess has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Thiess have SOC 2 Type 1 certification ?

According to Rankiteo, Thiess is not certified under SOC 2 Type 1.

Does Thiess have SOC 2 Type 2 certification ?

According to Rankiteo, Thiess does not hold a SOC 2 Type 2 certification.

Does Thiess comply with GDPR ?

According to Rankiteo, Thiess is not listed as GDPR compliant.

Does Thiess have PCI DSS certification ?

According to Rankiteo, Thiess does not currently maintain PCI DSS compliance.

Does Thiess comply with HIPAA ?

According to Rankiteo, Thiess is not compliant with HIPAA regulations.

Does Thiess have ISO 27001 certification ?

According to Rankiteo,Thiess is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Thiess operate in ?

Thiess operates primarily in the Mining industry.

How many employees does Thiess have ?

Thiess employs approximately 7,683 people worldwide.

Does Thiess own any subsidiaries ?

Thiess presently has no subsidiaries across any sectors.

How many LinkedIn followers does Thiess have ?

Thiess's official LinkedIn profile has approximately 339,801 followers.

What is the NAICS classification code for Thiess ?

Thiess is classified under the NAICS code 212, which corresponds to Mining (except Oil and Gas).

Does Thiess have a Crunchbase profile ?

No, Thiess does not have a profile on Crunchbase.

Does Thiess have a LinkedIn profile ?

Yes, Thiess maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/thiess.

How many cybersecurity incidents has Thiess experienced ?

As of August 5, 2026, Rankiteo reports that Thiess has not experienced any cybersecurity incidents.

How many peer or competitor companies does Thiess have ?

Thiess has an estimated 3,811 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Thiess

Boost Score +25 with badge (5 left)

781

/1000

Fair

806

/1000

Good

Thiess Vendor Cyber Rating & Cyber Score

thiess.com

Add Your Compliance Badge

Thiess works with clients in Australia, Asia and the Americas in the dynamic field of open-cut and underground mining. In 2024, Thiess celebrates 90 years. Since 1934, our pioneering spirit has driven our success – the ambition to do more, be better, reach further. To pioneer a brighter tomorrow. We’ve always thrived amid change. Today, that includes rising to the challenges of climate risk and the opportunities abounding in the global energy transition. We recognise the world needs mined commodities to achieve the economic, social and environmental transformation it desires. That’s why Thiess is committed to being at the forefront of sustainable mining, leveraging the power of our people and technology to support our clients and

Thiess A.I CyberSecurity Scoring

Scoring History

Thiess

Thiess CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

Thiess Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Thiess

Incidents vs Mining Industry Avg (This Year)

No incidents recorded for Thiess in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Thiess in 2026.

Incident Types Thiess vs Mining Industry Avg (This Year)

No incidents recorded for Thiess in 2026.

Incident History - Thiess (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Thiess Subsidiaries

Thiess

Mining

Website: http://www.thiess.com

Company Size: 7,683

CIMIC Group LimitedCivil Engineering

CPB ContractorsConstruction

UGLEngineering Services

Pacific PartnershipsConstruction

Leighton AsiaConstruction

EIC ActivitiesCivil Engineering

Sedgman Pty LimitedMining

Sedgman Onyx Pty LtdDesign Services

CIMIC Group GraduatesCivil Engineering

Loading…

Thiess Similar Companies

Jindal Steel Ltd.

jindalsteel.in

Jindal Steel is one of India’s foremost integrated steel producers, renowned for its scale, efficiency, and commitment to excellence. Operating on a robust mine-to-metal model, the Company leverages captive resources, advanced manufacturing capabilities, and a global distribution network to deliver high-performance steel solutions. With an investment footprint exceeding USD 12 billion, Jindal Steel runs state-of-the-art facilities in Angul, Raigarh, and Patratu, and maintains strategic operations across India and Africa. Its diversified and future-ready product portfolio underpins core sectors such as infrastructure, construction, and manufacturing, powering progress through strength and sustainability. Take the next step in your career with Jindal Steel by submitting your application to our Talent Acquisition team at "[email protected]"

ArcelorMittal

arcelormittal.com

ArcelorMittal is the world's leading steel and mining company, with a presence in more than 60 countries and an industrial footprint in 18 countries. Guided by a philosophy to produce safe, sustainable steel, we are the leading supplier of quality steel in the major global steel markets including automotive, construction, household appliances and packaging, with world-class research and development and outstanding distribution networks. Through our core values of sustainability, quality and leadership, we operate responsibly with respect to the health, safety and wellbeing of our employees, contractors and the communities in which we operate. For us, steel is the fabric of life, as it is at the heart of the modern world from railways to cars and washing machines. We are actively researching and producing steel-based technologies and solutions that make many of the products and components we use in our everyday lives more energy-efficient. We are one of the world’s five largest producers of iron ore and metallurgical coal and our mining business is an essential part of our growth strategy. With a geographically diversified portfolio of iron ore and coal assets, we are strategically positioned to serve our network of steel plants and the external global market.

Gerdau

gerdau.com.br

With a history spanning 122 years, Gerdau is Brazil's largest steel producer, one of the leading producers of long steel in the Americas and of special steel in the world. In Brazil, Gerdau also produces flat steel and iron ore for its own use. Gerdau also has a new business division, Gerdau Next, which fosters entrepreneurship in segments adjacent to the steel industry. Guided by its purpose of empowering people who build the future, Gerdau has operations in nine countries and over 30,000 direct and indirect employees. Gerdau is the largest recycling company in Latin America and uses scrap as an important input, with 73% of the steel it produces made from scrap. Every year, Gerdau transforms 11 million tonnes of scrap into a variety of steel products. Gerdau also is the world’s largest charcoal producer, with over 250 hectares of planted forests in the state of Minas Gerais. As a result of its sustainable production matrix, Gerdau currently has one of the industry’s lowest average greenhouse gas emissions (CO₂e), of 0.86t/CO₂e per tonne of steel, which is about half the global industry average of 1.91 t/CO₂e per tonne of steel (worldsteel). By 2031, Gerdau’s target is to reduce its carbon emissions to 0.83 t/CO₂e per tonne of steel. Gerdau’s shares are listed on the São Paulo (B3), New York (NYSE) and Madrid (Latibex) stock exchanges.

AngloGold Ashanti

cb anglogoldashanti.com

AngloGold Ashanti plc is a global gold mining company with a diverse, high-quality portfolio of operations, projects and exploration activities across 10 countries on four continents. We pursue value-creating opportunities involving other minerals, where we can leverage our existing assets, shareholdings, skills and experience. AngloGold Ashanti Limited was formed in June 1998 with the consolidation of the gold mining interests of Anglo American plc. Following the combination of AngloGold and Ashanti Goldfields Company Limited, the company was renamed AngloGold Ashanti Ltd in April 2004. It became AngloGold Ashanti plc in September 2023 after implementing a corporate restructure which included a change in domicile to the United Kingdom. AngloGold Ashanti has a portfolio of assets in the world’s key gold producing regions: Tanzania, the DRC, Ghana, Guinea, Egypt, Australia, the USA, Brazil, Argentina and Colombia. It has a track record of greenfields and brownfields exploration success. The company's primary listing is on the New York Stock Exchange and its headquarters are in Denver, Colorado in the USA. It is also listed on the South Africa and Ghana stock exchanges.

Norsk Hydro

hydro.com

Hydro is a leading industrial company that builds businesses and partnerships for a more sustainable future. We develop industries that matter to people and society. Since 1905, Hydro has turned natural resources into valuable products for people and businesses, creating a safe and secure workplace for our 31,000 employees in more than 140 locations and 40 countries. Today, we own and operate various businesses and have investments with a base in sustainable industries. Hydro is through its businesses present in a broad range of market segments for aluminium, energy, metal recycling, renewables and batteries, offering a unique wealth of knowledge and competence. Hydro is committed to leading the way towards a more sustainable future, creating more viable societies by developing natural resources into products and solutions in innovative and efficient ways.

Anglo American

cb angloamerican.com

Anglo American is a leading global mining company and our products are the essential ingredients in almost every aspect of modern life. Our portfolio of world-class competitive operations, with a broad range of future development options, provides many of the future-enabling metals and minerals for a cleaner, greener, more sustainable world and that meet the fast growing every day demands of billions of consumers. With our people at the heart of our business, we use innovative practices and the latest technologies to discover new resources and to mine, process, move and market our products to our customers – safely and sustainably.

Glencore

cb glencore.com

Glencore is one of the world’s largest global diversified natural resource companies and a major producer and marketer of more than 60 commodities that advance everyday life. Through a network of assets, customers and suppliers that spans the globe, we produce, process, recycle, source, market and distribute the commodities that support decarbonisation while meeting the energy needs of today.

OCP Group

ocpgroup.ma

Headquartered in Morocco, OCP Group is one of the world’s largest custodian and supplier of phosphate-based plant nutrition solutions and associated products for soil health and a leader in applied science and education. Our mission is to provide customized plant nutrition solutions for healthy food production. As an African business, we are committed to accelerating Africa’s development and south-to-south cooperation and making agriculture and food systems globally sustainable and resilient. We put farmers at the center of everything we do. Join us to help ensure a more sustainable and food secure future for all.

Alcoa

alcoa.com

Recruitment Fraud Alert: Alcoa has become aware of some fraudulent employment offers being sent to candidates via social media channels. Alcoa never makes job offers or asks for bank details through social media. Always verify the authenticity of any recruitment communication directly through our official channels. Alcoa (NYSE: AA, ASX: AAI) is a global industry leader in bauxite, alumina, and aluminum products with a vision to build a legacy of excellence for future generations. With a values-based approach that encompasses integrity, operating excellence, care for people and courageous leadership, our purpose is to Turn Raw Potential into Real Progress. Since developing the process that made aluminum an affordable and vital part of modern life, our talented Alcoans have developed breakthrough innovations and best practices that have led to greater efficiency, safety, sustainability, and stronger communities wherever we operate.

Loading…

NEWS

Thiess CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-45537

SUMMARY

OpenSIPS is a Session Initiation Protocol (SIP) server implementation. In versions prior to 3.6.6 and 4.0.0-rc1, the construct_uri() function concatenates multiple URI components (protocol, username, domain, port, params) into a fixed 1024-byte global BSS buffer without any bounds checking. When a routing script calls construct_uri() with an attacker-controlled username, a combined component length exceeding 1024 bytes overflows the buffer, corrupting adjacent global data with attacker-controlled content. The overflow reaches disable_503_translation, a global flag controlling SIP 503 response handling, allowing an attacker to deterministically set the flag via the URI username and alter the server's routing behavior for subsequent messages. Because the same buffer is shared with contact_builder(), the overflow also corrupts that function's data, and without a memory sanitizer the adjacent globals are silently overwritten on every request containing a long username. This issue has been fixed in versions 3.6.6 and 4.0.0-rc1.

Published

Date2026-08-04

Updated

Date2026-08-04

RISK INFORMATION (Score: 9.1)

cvss3

Base Score: 9.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Impact Score

5.2

Exploitability

3.9

REFERENCES

CVE-2026-18819

SUMMARY

A security vulnerability has been detected in RackTables up to 0.22.0/e5fff9f8aab339798ed47e8c6d7d977ed97a82bd. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The project maintainer confirms: "[I]t seems plausible, in that RackTables does not at this time have any CSRF prevention. You may assign a CVE ID to this, but there is no guarantee it will be handled in urgent, or even timely, manner, or at all."

Published

Date2026-08-04

Updated

Date2026-08-04

RISK INFORMATION (Score: 4.3)

cvss2

Base Score: 5.0

Complexity: LOW

AV:N/AC:L/Au:N/C:N/I:P/A:N

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.8

REFERENCES

CVE-2026-18818

SUMMARY

A weakness has been identified in Ehco1996 django-sspanel up to 2023.12.26. This affects the function TicketDetailView of the file apps/sspanel/views.py of the component Support Ticket Handler. Executing a manipulation can lead to authorization bypass. The attack can be executed remotely. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.

Published

Date2026-08-04

Updated

Date2026-08-04

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-70620

SUMMARY

Odysseus before commit 87babb5 contains a server-side request forgery vulnerability that allows admin-privileged attackers to direct the server to probe internal network resources by supplying arbitrary URLs to the embedding endpoint configuration without scheme, host, IP range, or DNS rebind validation. Attackers can submit loopback addresses, RFC 1918 ranges, or link-local addresses through the embedding endpoint API to partially read responses from cloud instance metadata services, internal APIs, and other hosts reachable from the server.

Published

Date2026-08-04

Updated

Date2026-08-04

RISK INFORMATION (Score: 6.8)

cvss3

Base Score: 6.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

cvss4

Base Score: 6.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

2.3

REFERENCES

CVE-2026-70619

SUMMARY

Odysseus before commit bf325f6 contains a missing authorization vulnerability that allows authenticated non-admin users to manage server-wide embedding backend configuration by invoking endpoint management routes that verify session authentication but omit the admin authorization guard. Attackers can supply an attacker-controlled URL to overwrite the embedding backend persisted in the endpoint configuration file and process environment, causing all subsequent embedding operations including chat messages, RAG queries, memory entries, and vault text to be transmitted in plaintext to the attacker-controlled destination, or delete the endpoint configuration to deny embedding service to all users.

Published

Date2026-08-04

Updated

Date2026-08-04

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…