What is the official website of TSMC ?

The official website of TSMC is http://www.tsmc.com.

What is TSMC's cybersecurity risk score?

TSMC has an AI-generated cybersecurity risk score of 798 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has TSMC experienced?

According to Rankiteo, TSMC currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has TSMC been affected by any supply chain cyber incidents ?

According to Rankiteo, TSMC has been affected by a supply chain cyber incident involving NA, with the incident ID TATTSMQUA1782491371.

Does TSMC have SOC 2 Type 1 certification ?

According to Rankiteo, TSMC is not certified under SOC 2 Type 1.

Does TSMC have SOC 2 Type 2 certification ?

According to Rankiteo, TSMC does not hold a SOC 2 Type 2 certification.

Does TSMC comply with GDPR ?

According to Rankiteo, TSMC is not listed as GDPR compliant.

Does TSMC have PCI DSS certification ?

According to Rankiteo, TSMC does not currently maintain PCI DSS compliance.

Does TSMC comply with HIPAA ?

According to Rankiteo, TSMC is not compliant with HIPAA regulations.

Does TSMC have ISO 27001 certification ?

According to Rankiteo,TSMC is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does TSMC operate in ?

TSMC operates primarily in the Semiconductor Manufacturing industry.

How many employees does TSMC have ?

TSMC employs approximately 26,129 people worldwide.

Does TSMC own any subsidiaries ?

TSMC presently has no subsidiaries across any sectors.

How many LinkedIn followers does TSMC have ?

TSMC's official LinkedIn profile has approximately 880,547 followers.

What is the NAICS classification code for TSMC ?

TSMC is classified under the NAICS code 3344, which corresponds to Semiconductor and Other Electronic Component Manufacturing.

Does TSMC have a Crunchbase profile ?

Yes, TSMC has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/tsmc.

Does TSMC have a LinkedIn profile ?

Yes, TSMC maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/tsmc.

How many cybersecurity incidents has TSMC experienced ?

As of August 3, 2026, Rankiteo reports that TSMC has experienced 5 cybersecurity incidents.

How many peer or competitor companies does TSMC have ?

TSMC has an estimated 1,348 peer or competitor companies worldwide.

What types of cybersecurity incidents has TSMC faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach and Data Leak.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

TSMC

Boost Score +25 with badge (5 left)

798

/1000

Fair

823

/1000

Good

TSMC Vendor Cyber Rating & Cyber Score

tsmc.com

cb in

Add Your Compliance Badge

Established in 1987, TSMC is the world's first dedicated semiconductor foundry. As the founder and a leader of the Dedicated IC Foundry segment, TSMC has built its reputation by offering advanced and "More-than-Moore" wafer production processes and unparalleled manufacturing efficiency. From its inception, TSMC has consistently offered the foundry segment's leading technologies and TSMC COMPATIBLE® design services. TSMC has consistently experienced strong growth by building solid partnerships with its customers, large and small. IC suppliers from around the world trust TSMC with their manufacturing needs, thanks to its unique integration of cutting-edge process technologies, pioneering design services, manufacturing productivity and

TSMC A.I CyberSecurity Scoring

Scoring History

TSMC

TSMC CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

TSMC

Breach

100

8/2025

TSM232080925

TSMC

Breach

1/2025

TATTSMQUA178249...

TSMC

Breach

100

1/2025

TSM1774419953

TSMC

Breach

100

07/2023

TSM21112723

TSMC

Data Leak

05/2023

TSM223728523

Loading…

A.I.

TSMC Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for TSMC

Incidents vs Semiconductor Manufacturing Industry Avg (This Year)

No incidents recorded for TSMC in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for TSMC in 2026.

Incident Types TSMC vs Semiconductor Manufacturing Industry Avg (This Year)

No incidents recorded for TSMC in 2026.

Incident History - TSMC (X = Date, Y = Severity)

Loading…

SUBSIDIARY

TSMC Subsidiaries

TSMC

Semiconductor Manufacturing

Website: http://www.tsmc.com

Company Size: 10,001+ employees

ESMCSemiconductor Manufacturing

JASMSemiconductor Manufacturing

Loading…

TSMC Similar Companies

Intel Corporation

cb intel.com

Our mission is to shape the future of technology to help create a better future for the entire world, that’s the power of Intel Inside. With more ingenuity and creativity inside, our work is at the heart of countless innovations. From major breakthroughs to things that make everyday life better— they’re all powered by Intel technology. With a career at Intel, you can help make the future more wonderful for everyone. • Need help or have a support question? Visit Intel Support: http://ms.spr.ly/6054tmaop

KLA

kla.com

KLA develops industry-leading equipment and services that enable innovation throughout the electronics industry. We provide advanced process control and process-enabling solutions for manufacturing wafers and reticles, integrated circuits, packaging and printed circuit boards. In close collaboration with leading customers across the globe, our expert teams of physicists, engineers, data scientists and problem-solvers design solutions that move the world forward. Visit us at: www.kla.com Statements made on LinkedIn may constitute forward-looking statements under federal securities laws. These forward-looking statements involve risks and uncertainties that could significantly affect the expected results and are based on certain key assumptions. Due to such uncertainties and risks, no assurances can be given that such expectations will prove to have been correct, and readers are cautioned not to place undue reliance on such forward-looking statements, which speak only as of the date indicated. Other risks that KLA faces include those detailed in KLA filings with the Securities and Exchange Commission, including KLA's annual report on Form 10-K and quarterly reports on Form 10-Q. Forward-looking statements made by third parties do not necessarily reflect the opinion of KLA, are outside of KLA’s control and have not been verified or otherwise vetted by KLA.

GlobalFoundries

cb gf.com

GlobalFoundries (GF) is one of the world’s leading semiconductor manufacturers. GF is redefining innovation and semiconductor manufacturing by developing and delivering feature-rich process technology solutions that provide leadership performance in pervasive high growth markets. GF offers a unique mix of design, development, and fabrication services. With a talented and diverse workforce and an at-scale manufacturing footprint spanning the U.S., Europe and Asia, GF is a trusted technology source to its worldwide customers. For more information, visit www.gf.com. GlobalFoundries is an Equal Employment Opportunity/Affirmative Action (EEO/AA) employer.

Analog Devices

analog.com

Analog Devices, Inc. (NASDAQ: ADI) is a global semiconductor leader that bridges the physical and digital worlds to enable breakthroughs at the Intelligent Edge. ADI combines analog, digital, AI, and software technologies into solutions that help drive advancements in automation and robotics, mobility, energy and data centers, and healthcare, combat climate change, and reliably connect humans and the world. With revenue of more than $11 billion in FY25, ADI ensures today's innovators stay Ahead of What's Possible. Learn more at www.analog.com and on LinkedIn and X (formerly Twitter).

Applied Materials

appliedmaterials.com

Applied Materials is the leader in materials engineering solutions that are at the foundation of virtually every new semiconductor and advanced display in the world. The technology we create is essential to advancing AI and accelerating the commercialization of next-generation chips. At Applied, we push the boundaries of science and engineering to deliver material innovation that changes the world. We look forward to engaging with you on compelling topics about the semiconductor industry. We want to hear from you, but offensive comments that create an unpleasant environment for our community will be removed. Thanks for your understanding.

AMD

cb amd.com

We care deeply about transforming lives with AMD technology to enrich our industry, our communities, and the world. Our mission is to build great products that accelerate next-generation computing experiences – the building blocks for the data center, artificial intelligence, PCs, gaming and embedded. Underpinning our mission is the AMD culture. We push the limits of innovation to solve the world’s most important challenges. We strive for execution excellence while being direct, humble, collaborative, and inclusive of diverse perspectives. AMD together we advance_

Arm

Arm.com

Arm’s foundational technology is defining the future of computing. A future built by the greatest technology ecosystem in the world. A future built on Arm. Arm is everywhere technology matters. Technology matters everywhere. Together, we’ll power every technology revolution moving forward, including cloud computing, automotive and autonomous systems, IoT, the metaverse, and beyond. Changing the world. Again. On Arm.

Renesas Electronics

renesas.com

Renesas is an embedded semiconductor solution provider driven by its Purpose ‘To Make Our Lives Easier.’ As the industry’s leading expert in embedded processing with unmatched quality and system-level know-how, we have evolved to provide scalable and comprehensive semiconductor solutions for automotive, industrial, infrastructure, and IoT industries based on the broadest product portfolio, including High Performance Computing, Embedded Processing, Analog & Connectivity, and Power. With a diverse team of over 21,000 professionals in more than 30 countries, we continue to expand our boundaries to offer enhanced user experiences through digitalization and usher into a new era of innovation. We design and develop sustainable, power-efficient solutions today that help people and communities thrive tomorrow, ‘To Make Our Lives Easier.’

Samsung Semiconductor

samsung.com

Established in 1974 as a subsidiary of Samsung Electronics, we’re proud to be recognized as one of the leading chip manufacturers in the world. Using our knowledge in semiconductor technology, our ambition is to spark the imagination of device manufacturers with top-of-the-line building blocks and, through that, enrich the lives of people around the world with transformative solutions.

Loading…

NEWS

TSMC CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

June 27, 2026 07:51 AM

Tata Tightens Security After Major Data Leak Investigation

Tata Electronics, a key Apple supplier in India, has tightened internal security controls after a major cybersecurity incident exposed...

Read Article

June 27, 2026 03:41 AM

Apple supplier Tata Electronics steps up cybersecurity after alleged leak of client files

The Apple supplier has launched a forensic investigation, informed government authorities and clients, and introduced stricter access...

Read Article

June 26, 2026 02:33 PM

Massive data breach hits Apple supplier Tata Electronics

The compromised data, which totals more than 630 gigabytes, allegedly contains highly confidential component designs and blueprints from...

Read Article

June 26, 2026 11:03 AM

Tata Electronics Tightens Systems After Major Data Breach

Tata Electronics has tightened security after a data breach reportedly exposed client files. Here is what this means for the company's...

Read Article

June 26, 2026 11:02 AM

Apple supplier Tata tightens internal controls after data breach

A data breach at Tata has emerged as a fresh challenge for Apple's India supply chain, with the leaked data purportedly including documents...

Read Article

June 25, 2026 02:25 AM

China's 360 unveils AI cybersecurity tools claimed to rival Anthropic's Mythos

Chinese cybersecurity company 360 Security Technology has unveiled a pair of AI-powered cybersecurity tools that it says can match the...

Read Article

June 16, 2026 07:00 AM

TSMC and Amkor sign 10-year deal to expand semiconductor packaging in Arizona

The partnership will bring advanced chip packaging to a $7 billion facility in Peoria, with production expected by 2028.

Read Article

June 05, 2026 07:00 AM

AI: TSMC's 'AI Fed' 30% Target, Nvidia AI PCs, Anthropic Files IPO & More. AI-RTZ #1109.

TSMC is still the Fed of the Global AI Economy: Taiwan Semiconductor (TSMC) CEO C.C. Wei did his best Fed chairman impersonation and bounded...

Read Article

June 04, 2026 07:00 AM

TSMC chairman dismisses rival cluster pushes, says Taiwan's supply chain remains unmatched

TSMC chairman C.C. Wei spoke at a media briefing on June 4, 2026, after the company's shareholders' meeting. South Korea's push to build a...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18577

SUMMARY

An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:L/SA:L/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-10848

SUMMARY

The OCPP 1.6 client in subsys/net/lib/ocpp parsed inbound WAMP RPC frames in parse_rpc_msg() (subsys/net/lib/ocpp/ocpp_j.c) using a hand-rolled helper, extract_string_field(), that copied the message's uid and action fields with strncpy(out_buf, token + 1, outlen - 1) and then scanned the result with strchr(out_buf, '"'). Because strncpy does not NUL-terminate the destination when the source is at least outlen - 1 (127) bytes long, the subsequent strchr reads past the 128-byte destination buffer into adjacent stack memory; if a " byte is found beyond the buffer, a one-byte out-of-bounds NUL write also occurs. A related defect in extract_payload() runs strchr/strrchr over the receive buffer, which may not be NUL-terminated when a maximal-length frame fills it. The parsed bytes come directly from the OCPP central-system server over a websocket: the reader thread fills recv_buf via websocket_recv_msg() and calls parse_rpc_msg() on each inbound DATA frame (subsys/net/lib/ocpp/ocpp.c). A malicious or compromised central server, or an on-path attacker (OCPP is commonly deployed over plain ws://), can send an RPC frame whose uid or action field is 127+ bytes with no closing quote, triggering the out-of-bounds access. The primary impact is a remotely triggerable denial of service: the unbounded scan can fault on an unmapped page, and the stray NUL write can corrupt adjacent stack state. The over-read data is not reflected to the peer, so disclosure is limited. The feature is EXPERIMENTAL and must be explicitly enabled (CONFIG_OCPP). The fix replaces the manual parser with the bounds-respecting json_mixed_arr_parse() and copies the extracted uid with an explicitly NUL-terminated buffer, eliminating both over-reads.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 7)

cvss3

Base Score: 7.0

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Impact Score

4.7

Exploitability

2.2

REFERENCES

CVE-2026-9856

SUMMARY

A vulnerability in huggingface/transformers versions <=5.8.0.dev0 allows an attacker to perform arbitrary file writes via path traversal. The issue resides in the `save_pretrained()` methods of `PreTrainedTokenizerBase` and `ProcessorMixin`, where keys from the `chat_template` dictionary are used directly as filenames without proper validation. An attacker can exploit this by publishing a malicious Hugging Face Hub repository with a crafted `tokenizer_config.json` file. When a victim downloads and saves the tokenizer or processor, the attacker-controlled keys can escape the intended save directory, enabling arbitrary file writes with attacker-controlled content. This vulnerability affects multiple processors inheriting from `ProcessorMixin`, including Idefics, Florence, Gemma, Phi, and Qwen-VL.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 7.1)

cvss3

Base Score: 7.1

Complexity: LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L

Impact Score

4.2

Exploitability

2.8

REFERENCES

CVE-2026-65321

SUMMARY

PyAthena prior to 3.35.4 contains a sql injection vulnerability that allows unauthenticated attackers to inject arbitrary SQL by exploiting improper quote-escaping in DefaultParameterFormatter.format(), which routes DELETE and CTAS statements to the _escape_hive function that backslash-escapes single quotes rather than doubling them. Because Athena and Trino do not treat backslashes as escape characters inside string literals, attacker-supplied input such as a single quote followed by SQL syntax causes the parser to terminate the string literal prematurely, enabling data exfiltration via UNION SELECT, execution of destructive statements, and attacker-controlled CTAS destination and content.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-10774

SUMMARY

Zephyr's Bluetooth Mesh subnet key management leaks one PSA Crypto key slot on every subnet-key teardown. In subsys/bluetooth/mesh/subnet.c, net_keys_create() imports the Private Beacon Key into a PSA key slot under CONFIG_BT_MESH_PRIV_BEACONS (enabled by default), but subnet_keys_destroy() guarded the matching psa_destroy_key() with CONFIG_BT_MESH_V1d1. That Kconfig symbol was removed when explicit Mesh 1.0.1 support was dropped, so the destroy branch became permanently dead code and the import is never balanced by a destroy. The imbalanced teardown is reached every time subnet keys are destroyed: deleting a subnet (Config Server NetKey Delete), completing a Key Refresh Procedure (which retires the old key set), and resetting/re-provisioning the node. The over-the-air triggers are processed only under the node's device key, so they are exercisable by the provisioner or network administrator that owns the node, reachable over the Bluetooth Mesh network. With the default CONFIG_MBEDTLS_PSA_KEY_SLOT_COUNT of 16, repeated add/delete or key-refresh cycles exhaust the shared PSA key-slot pool after roughly a dozen rounds. Once exhausted, bt_mesh_private_beacon_key() and thus subnet creation fail: the node can no longer add subnets or complete key refresh, and other PSA crypto consumers on the device may be starved, until the device is rebooted. The fix aligns the destroy guard with the import guard (CONFIG_BT_MESH_PRIV_BEACONS) so each slot is freed.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 2.4)

cvss3

Base Score: 2.4

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

0.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…