Company Details
timbrasil
19,694
660,355
517
tim.com.br
0
TIM_2920391
In-progress


TIM Brasil Company CyberSecurity Posture
tim.com.brA TIM é a empresa de telefonia móvel que mais cresce no Brasil. Atualmente, possui mais de 13 mil colaboradores em todo o país que trabalham entregando serviços inovadores e de qualidade em telefonia móvel, fixa e internet banda larga. É uma companhia feita de pessoas criativas, com energia realizadora e foco no cliente. Transparência, qualidade e inovação para que os consumidores brasileiros possam fazer cada vez mais e ir mais longe. Conheça as oportunidades na aba de Carreiras!
Company Details
timbrasil
19,694
660,355
517
tim.com.br
0
TIM_2920391
In-progress
Between 750 and 799

TIM Brasil Global Score (TPRM)XXXX



No incidents recorded for TIM Brasil in 2026.
No incidents recorded for TIM Brasil in 2026.
No incidents recorded for TIM Brasil in 2026.
TIM Brasil cyber incidents detection timeline including parent company and subsidiaries

A TIM é a empresa de telefonia móvel que mais cresce no Brasil. Atualmente, possui mais de 13 mil colaboradores em todo o país que trabalham entregando serviços inovadores e de qualidade em telefonia móvel, fixa e internet banda larga. É uma companhia feita de pessoas criativas, com energia realizadora e foco no cliente. Transparência, qualidade e inovação para que os consumidores brasileiros possam fazer cada vez mais e ir mais longe. Conheça as oportunidades na aba de Carreiras!

Huawei is a leading global provider of information and communications technology (ICT) infrastructure and smart devices. With integrated solutions across four key domains – telecom networks, IT, smart devices, and cloud services – we are committed to bringing digital to every person, home and organi
Since its establishment in 1854, Telecom Egypt has played a pivotal role in driving growth within the local ICT market capitalizing on its vast infrastructure, which is one of the largest in the region. Its vast domestic and international infrastructure has helped it serve various customer groups in

Zain Group is a leading provider of innovative ICT technologies & digital lifestyle communications operating in 8 markets across the Middle East & Africa, serving 50.9 million active customers as of 30 June 2025. Zain provides mobile voice, data and B2B services in: Kuwait, Bahrain, Iraq, Jordan, Sa
About Motorola Solutions | Solving for safer Safety and security are at the heart of everything we do at Motorola Solutions. We build and connect technologies to help protect people, property and places. Our solutions foster the collaboration that’s critical for safer communities, safer schools, sa
Airtel Africa is a leading provider of telecommunications and mobile money services, with a presence in 14 countries in Africa, primarily in East Africa and Central and West Africa. Airtel Africa offers an integrated suite of telecommunications solutions to its subscribers, including mobile voice a

TELMEX, la empresa líder de telecomunicaciones y servicios TI en México, ha realizado importantes inversiones para desarrollar la plataforma tecnológica más robusta y vanguardista del país, que le permite ofrecer la más amplia gama de soluciones, con los mayores estándares de calidad, seguridad, con

We’re the people that make the net work. As the nation’s largest wholesale broadband network, we’re rolling out Ultrafast Full Fibre broadband across the UK. It’s our fastest and most reliable broadband yet, and we’re well on our way to making it available to 25m homes and businesses – building the
Cox Communications is committed to creating more moments of real human connection. We bring people closer to family and friends through technology that’s inspired by a culture that puts people first, and we’re always working to improve life in the communities we serve. Our world-class broadband appl
We understand that our customers want an easier, less complicated life. We’re using our network, labs, products, services, and people to create a world where everything works together seamlessly, and life is better as a result. How will we continue to drive for this excellence in innovation?
.png)
Data is the new strategic resource of the digital economy, but relying on non-European infrastructures means exposing ourselves to real...
At TIM, cybersecurity is a shared mission: every day, thanks to the skills and passion of our people, we protect the data, infrastructure,...
The first report produced by TIM with the Cyber Security Foundation and the contribution of TIM Research Centre, which analyses the main risk trends in Italy.
The qualifying round of the SAS CTF 2025 competition has determined eight teams of cybersecurity experts from around the world that will test their skills in...
Explore AI's transformative role in cybersecurity, focusing on threat detection, incident response automation, and human-AI collaboration.
Telecom Italia (TIM) will finalise on July 1 the landmark sale of its fixed-line domestic access network to U.S. fund KKR , a deal that...
The TIM Cybersecurity Made in Italy Challenge, is underway, the Open Innovation initiative aimed at Italian and international companies, SMEs, start-ups and...
The website for TIM Enterprise, the new TIM business unit offering innovative, sustainable, and secure comprehensive integrated digital solutions to...
CVC wants Noovle, Telsy, and Olivetti units, as TIM considers KKR bid for whole company.

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of TIM Brasil is http://www.tim.com.br.
According to Rankiteo, TIM Brasil’s AI-generated cybersecurity score is 793, reflecting their Fair security posture.
According to Rankiteo, TIM Brasil currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, TIM Brasil has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.
According to Rankiteo, TIM Brasil is not certified under SOC 2 Type 1.
According to Rankiteo, TIM Brasil does not hold a SOC 2 Type 2 certification.
According to Rankiteo, TIM Brasil is not listed as GDPR compliant.
According to Rankiteo, TIM Brasil does not currently maintain PCI DSS compliance.
According to Rankiteo, TIM Brasil is not compliant with HIPAA regulations.
According to Rankiteo,TIM Brasil is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
TIM Brasil operates primarily in the Telecommunications industry.
TIM Brasil employs approximately 19,694 people worldwide.
TIM Brasil presently has no subsidiaries across any sectors.
TIM Brasil’s official LinkedIn profile has approximately 660,355 followers.
TIM Brasil is classified under the NAICS code 517, which corresponds to Telecommunications.
No, TIM Brasil does not have a profile on Crunchbase.
Yes, TIM Brasil maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/timbrasil.
As of January 21, 2026, Rankiteo reports that TIM Brasil has not experienced any cybersecurity incidents.
TIM Brasil has an estimated 9,783 peer or competitor companies worldwide.
Total Incidents: According to Rankiteo, TIM Brasil has faced 0 incidents in the past.
Incident Types: The types of cybersecurity incidents that have occurred include .
.png)
SummaryA command injection vulnerability (CWE-78) has been found to exist in the `wrangler pages deploy` command. The issue occurs because the `--commit-hash` parameter is passed directly to a shell command without proper validation or sanitization, allowing an attacker with control of `--commit-hash` to execute arbitrary commands on the system running Wrangler. Root causeThe commitHash variable, derived from user input via the --commit-hash CLI argument, is interpolated directly into a shell command using template literals (e.g., execSync(`git show -s --format=%B ${commitHash}`)). Shell metacharacters are interpreted by the shell, enabling command execution. ImpactThis vulnerability is generally hard to exploit, as it requires --commit-hash to be attacker controlled. The vulnerability primarily affects CI/CD environments where `wrangler pages deploy` is used in automated pipelines and the --commit-hash parameter is populated from external, potentially untrusted sources. An attacker could exploit this to: * Run any shell command. * Exfiltrate environment variables. * Compromise the CI runner to install backdoors or modify build artifacts. Credits Disclosed responsibly by kny4hacker. Mitigation * Wrangler v4 users are requested to upgrade to Wrangler v4.59.1 or higher. * Wrangler v3 users are requested to upgrade to Wrangler v3.114.17 or higher. * Users on Wrangler v2 (EOL) should upgrade to a supported major version.
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle VM VirtualBox accessible data as well as unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L).
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.