ISO 27001 Certificate
SOC 1 Type I Certificate
SOC 2 Type II Certificate
PCI DSS
HIPAA
RGPD
Internal validation & live display
Multiple badges & continuous verification
Faster underwriting decisions
ISOSOC2 Type 1SOC2 Type 2PCI DSSHIPAAGDPR

Turning Point Brands, Inc. (NYSE: TPB) is a leading, manufacturer, marketer and distributor of branded consumer products with active ingredients. We sell a wide range of products exclusively to adult consumers, from our iconic brands to our next generation products to fulfill evolving consumer preferences. Our three focus segments are led by our core, proprietary brands including Zig-Zag® (rolling papers and wraps), Stoker’s® (looseleaf chew and moist snuff) along with our distribution platforms (VaporBeast®, VaporFi® and Direct Vapor®) in NewGen. Our products are sold in over 215,000 retail outlets in North America and through our e-commerce platforms such as www.zigzag.com. Our businesses generate solid cash flow which we use to finance acquisitions, increase brand support, expand our distribution infrastructure, and strengthen our capital position. The world-famous Zig-Zag® brand has a proud heritage of leadership dating to 1879. Zig-Zag® is the leading premium paper in both the U.S. and Canada. Over the past decade, Zig-Zag® has successfully expanded its consumer base into new product categories such as cigar wraps, hemp paper and paper cones. In 2022, we entered into an exclusive distribution agreement for CLIPPER® lighters (the world's leading reusable lighter) in the U.S. and Canada. The Stoker’s® brand has a proud heritage dating to 1940. Stoker’s competes in the chewing tobacco segment, where it has grown to the #1 position, and in the moist snuff segment, where it remains one of the fastest-growing brands. The portfolio also includes Beech-Nut®, launched in 1897, and a diverse collection of other chewing tobacco brands that offer a variety of consumer choices and tastes. Our NewGen vapor portfolio includes our B2B (Vapor Beast®), B2C (International Vapor Group®) vape distribution platforms.

Turning Point Brands, Inc. A.I CyberSecurity Scoring

TPBI

Company Details

Linkedin ID:

turning-point-brands-inc.

Employees number:

234

Number of followers:

5,275

NAICS:

30

Industry Type:

Manufacturing

Homepage:

turningpointbrands.com

IP Addresses:

0

Company ID:

TUR_1389942

Scan Status:

In-progress

AI scoreTPBI Risk Score (AI oriented)

Between 700 and 749

https://images.rankiteo.com/companyimages/turning-point-brands-inc..jpeg
TPBI Manufacturing
Updated:
  • Powered by our proprietary A.I cyber incident model
  • Insurance preferes TPRM score to calculate premium
globalscoreTPBI Global Score (TPRM)

XXXX

https://images.rankiteo.com/companyimages/turning-point-brands-inc..jpeg
TPBI Manufacturing
  • Instant access to detailed risk factors
  • Benchmark vs. industry & size peers
  • Vulnerabilities
  • Findings

TPBI Company CyberSecurity News & History

Past Incidents
2
Attack Types
2
EntityTypeSeverityImpactSeenBlog DetailsIncident DetailsView
International Vapor GroupBreach8546/2018
Rankiteo Explanation :
Attack with significant impact with customers data leaks

Description: The California Office of the Attorney General reported a data breach involving International Vapor Group on March 12, 2019. The breach occurred on June 30, 2018, resulting in the compromise of customers' names and credit or debit card information due to unauthorized access to their e-commerce site.

Vaporfi.comCyber Attack6029/2020
Rankiteo Explanation :
Attack limited on finance or reputation

Description: The Maine Office of the Attorney General disclosed a data breach affecting **Vaporfi.com** (and its associated platform, Directvapor.com) on **December 21, 2020**. The incident stemmed from **unauthorized access to the company’s online payment platform**, discovered on **September 23, 2020**. The breach exposed **credit and debit card information** of **10,544 individuals**, including **3 Maine residents**. While the exact method of intrusion remains undisclosed, the compromise of financial data suggests a targeted cyber intrusion aimed at exploiting payment processing vulnerabilities. The exposed information poses risks of **fraudulent transactions, identity theft, and financial losses** for affected customers. The breach underscores the critical need for robust payment system security, particularly in e-commerce platforms handling sensitive financial data. No evidence suggests broader data exfiltration beyond payment details, but the incident highlights vulnerabilities in third-party payment integrations or internal security controls.

International Vapor Group
Breach
Severity: 85
Impact: 4
Seen: 6/2018
Blog:
Rankiteo Explanation
Attack with significant impact with customers data leaks

Description: The California Office of the Attorney General reported a data breach involving International Vapor Group on March 12, 2019. The breach occurred on June 30, 2018, resulting in the compromise of customers' names and credit or debit card information due to unauthorized access to their e-commerce site.

Vaporfi.com
Cyber Attack
Severity: 60
Impact: 2
Seen: 9/2020
Blog:
Rankiteo Explanation
Attack limited on finance or reputation

Description: The Maine Office of the Attorney General disclosed a data breach affecting **Vaporfi.com** (and its associated platform, Directvapor.com) on **December 21, 2020**. The incident stemmed from **unauthorized access to the company’s online payment platform**, discovered on **September 23, 2020**. The breach exposed **credit and debit card information** of **10,544 individuals**, including **3 Maine residents**. While the exact method of intrusion remains undisclosed, the compromise of financial data suggests a targeted cyber intrusion aimed at exploiting payment processing vulnerabilities. The exposed information poses risks of **fraudulent transactions, identity theft, and financial losses** for affected customers. The breach underscores the critical need for robust payment system security, particularly in e-commerce platforms handling sensitive financial data. No evidence suggests broader data exfiltration beyond payment details, but the incident highlights vulnerabilities in third-party payment integrations or internal security controls.

Ailogo

TPBI Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

🔒
Incident Predictions locked
Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

🔒
A.I. Risk Score Predictions locked
Access Monitoring Plan
statics

Underwriter Stats for TPBI

Incidents vs Manufacturing Industry Average (This Year)

No incidents recorded for Turning Point Brands, Inc. in 2025.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Turning Point Brands, Inc. in 2025.

Incident Types TPBI vs Manufacturing Industry Avg (This Year)

No incidents recorded for Turning Point Brands, Inc. in 2025.

Incident History — TPBI (X = Date, Y = Severity)

TPBI cyber incidents detection timeline including parent company and subsidiaries

TPBI Company Subsidiaries

SubsidiaryImage

Turning Point Brands, Inc. (NYSE: TPB) is a leading, manufacturer, marketer and distributor of branded consumer products with active ingredients. We sell a wide range of products exclusively to adult consumers, from our iconic brands to our next generation products to fulfill evolving consumer preferences. Our three focus segments are led by our core, proprietary brands including Zig-Zag® (rolling papers and wraps), Stoker’s® (looseleaf chew and moist snuff) along with our distribution platforms (VaporBeast®, VaporFi® and Direct Vapor®) in NewGen. Our products are sold in over 215,000 retail outlets in North America and through our e-commerce platforms such as www.zigzag.com. Our businesses generate solid cash flow which we use to finance acquisitions, increase brand support, expand our distribution infrastructure, and strengthen our capital position. The world-famous Zig-Zag® brand has a proud heritage of leadership dating to 1879. Zig-Zag® is the leading premium paper in both the U.S. and Canada. Over the past decade, Zig-Zag® has successfully expanded its consumer base into new product categories such as cigar wraps, hemp paper and paper cones. In 2022, we entered into an exclusive distribution agreement for CLIPPER® lighters (the world's leading reusable lighter) in the U.S. and Canada. The Stoker’s® brand has a proud heritage dating to 1940. Stoker’s competes in the chewing tobacco segment, where it has grown to the #1 position, and in the moist snuff segment, where it remains one of the fastest-growing brands. The portfolio also includes Beech-Nut®, launched in 1897, and a diverse collection of other chewing tobacco brands that offer a variety of consumer choices and tastes. Our NewGen vapor portfolio includes our B2B (Vapor Beast®), B2C (International Vapor Group®) vape distribution platforms.

Loading...
similarCompanies

TPBI Similar Companies

Electrolux Group is a leading global appliance company that has shaped living for the better for more than 100 years. We reinvent taste, care and wellbeing experiences for millions of people, always striving to be at the forefront of sustainability in society through our solutions and operations. Un

Almunajem Foods Company

Almunajem Foods, is a Saudi Group of companies, established in 1950 by late Abdullah Ali Al Munajem, having succeeded in the food import and distribution business, other subsidiary companies that are all engaged in different activities related to food service, food industry and refrigeration. The co

DS Smith

DS Smith provides innovative packaging solutions, paper products and recycling services with a commitment to sustainability and a circular economy. Our core purpose is to Redefine Packaging for a Changing World, and our expert teams work closely with like-minded partners to incorporate renewable re

Philip Morris International

Philip Morris International (PMI) is a leading international consumer goods company working to deliver a smoke-free future and evolving its portfolio for the long term to include products outside of the tobacco and nicotine sector. Since 2008, PMI has invested more than USD 14 billion to develop, sc

Reckitt

Every day, in everything we do, our purpose is to protect, heal and nurture in the relentless pursuit of a cleaner, healthier world. And we have a fight on our hands. A fight to make access to the highest quality hygiene, wellness and nourishment a right and not a privilege. Each of our products is

Henkel

Henkel operates worldwide with leading innovations, brands and technologies in two business areas: Adhesive Technologies and Consumer Brands. Founded in 1876, Henkel looks back on more than 145 years of success. The company holds leading positions with its two business units in both industrial and

SNEF

Group Snef is a French leader in the field of electrical installation and, more broadly, the management of finishing turnkey projects and operations. Group Snef operates in the fields of high- and low-voltage installations, industrial processes, HVAC and maintenance. Its services cover technic

Steel Authority of India Limited

Steel Authority of India Limited (SAIL) traces its origin to the formative years of an emerging nation - India. After independence, the steel sector was to propel the economic growth and rapid industrialization of the country, and since 1973, SAIL steel has played a pivotal role in transforming the

Stanley Black & Decker, Inc.

For the builders and protectors, for the makers and explorers, for those shaping and reshaping our world through hard work and inspiration, Stanley Black & Decker provides the tools and innovative solutions you can trust to get the job done—and we have since 1843. You repair your home and car with

newsone

TPBI CyberSecurity News

November 21, 2025 11:17 AM
Did TPB’s Expanded ATM Program and Nicotine Pouch Push Just Shift Turning Point Brands’ Investment Narrative?

Turning Point Brands recently announced an expansion of its at-the-market sales agreement by US$200 million, coupled with ongoing retail...

November 18, 2025 02:42 PM
Nicotine Pouches Hit 55.7% of Oral Tobacco: Where Does Altria Stand?

Altria Group, Inc. (MO) is facing a pivotal moment as nicotine pouches surge to 55.7% of the U.S. oral tobacco market in the third quarter...

November 14, 2025 08:35 AM
Turning Point Brands Insider Sold Shares Worth $4,635,682, According to a Recent SEC Filing

Lawrence Wexler, Director, on November 11, 2025, sold 46470 shares in Turning Point Brands for $4635682. Following the Form 4 filing with...

November 14, 2025 08:00 AM
Is Turning Point Brands Stock a Buy After Investment Firm Cannell Capital Raises Its Stake to Nearly $20 Million?

Key Points Cannell Capital increased its position in Turning Point Brands by 119821 shares, representing a value change of $13.24 million.

November 12, 2025 08:00 AM
We Think That There Are Some Issues For Turning Point Brands (NYSE:TPB) Beyond Its Promising Earnings

Turning Point Brands, Inc. ( NYSE:TPB ) just released a solid earnings report, and the stock displayed some strength...

November 05, 2025 08:00 AM
Earnings Flash (TPB) Turning Point Brands, Inc. Reports Q3 Revenue $119.0M, vs. FactSet Est of $110.2M

Earnings Flash (TPB) Turning Point Brands, Inc. Reports Q3 Revenue $119.0M, vs. FactSet Est of $110.2M. Published on 11/05/2025 at 07:41 am...

November 05, 2025 08:00 AM
Turning Point Brands Announces Third Quarter 2025 Results

LOUISVILLE, Ky., November 05, 2025--Turning Point Brands, Inc. ("TPB" or the "Company") (NYSE: TPB), a manufacturer, marketer and...

November 05, 2025 08:00 AM
Earnings Flash (TPB) Turning Point Brands, Inc. Posts Q3 Adjusted EPS $1.27 per Share, vs. FactSet Est of $0.77

Earnings Flash (TPB) Turning Point Brands, Inc. Posts Q3 Adjusted EPS $1.27 per Share, vs. FactSet Est of $0.77.

November 05, 2025 08:00 AM
Turning Point Brands (TPB) Q3 Earnings and Revenues Beat Estimates

Turning Point Brands (TPB) delivered earnings and revenue surprises of +29.63% and +5.90%, respectively, for the quarter ended September...

faq

Frequently Asked Questions

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.

TPBI CyberSecurity History Information

Official Website of Turning Point Brands, Inc.

The official website of Turning Point Brands, Inc. is http://www.turningpointbrands.com.

Turning Point Brands, Inc.’s AI-Generated Cybersecurity Score

According to Rankiteo, Turning Point Brands, Inc.’s AI-generated cybersecurity score is 748, reflecting their Moderate security posture.

How many security badges does Turning Point Brands, Inc.’ have ?

According to Rankiteo, Turning Point Brands, Inc. currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Does Turning Point Brands, Inc. have SOC 2 Type 1 certification ?

According to Rankiteo, Turning Point Brands, Inc. is not certified under SOC 2 Type 1.

Does Turning Point Brands, Inc. have SOC 2 Type 2 certification ?

According to Rankiteo, Turning Point Brands, Inc. does not hold a SOC 2 Type 2 certification.

Does Turning Point Brands, Inc. comply with GDPR ?

According to Rankiteo, Turning Point Brands, Inc. is not listed as GDPR compliant.

Does Turning Point Brands, Inc. have PCI DSS certification ?

According to Rankiteo, Turning Point Brands, Inc. does not currently maintain PCI DSS compliance.

Does Turning Point Brands, Inc. comply with HIPAA ?

According to Rankiteo, Turning Point Brands, Inc. is not compliant with HIPAA regulations.

Does Turning Point Brands, Inc. have ISO 27001 certification ?

According to Rankiteo,Turning Point Brands, Inc. is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Industry Classification of Turning Point Brands, Inc.

Turning Point Brands, Inc. operates primarily in the Manufacturing industry.

Number of Employees at Turning Point Brands, Inc.

Turning Point Brands, Inc. employs approximately 234 people worldwide.

Subsidiaries Owned by Turning Point Brands, Inc.

Turning Point Brands, Inc. presently has no subsidiaries across any sectors.

Turning Point Brands, Inc.’s LinkedIn Followers

Turning Point Brands, Inc.’s official LinkedIn profile has approximately 5,275 followers.

NAICS Classification of Turning Point Brands, Inc.

Turning Point Brands, Inc. is classified under the NAICS code 30, which corresponds to Manufacturing.

Turning Point Brands, Inc.’s Presence on Crunchbase

Yes, Turning Point Brands, Inc. has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/turning-point-brands.

Turning Point Brands, Inc.’s Presence on LinkedIn

Yes, Turning Point Brands, Inc. maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/turning-point-brands-inc..

Cybersecurity Incidents Involving Turning Point Brands, Inc.

As of November 27, 2025, Rankiteo reports that Turning Point Brands, Inc. has experienced 2 cybersecurity incidents.

Number of Peer and Competitor Companies

Turning Point Brands, Inc. has an estimated 7,594 peer or competitor companies worldwide.

What types of cybersecurity incidents have occurred at Turning Point Brands, Inc. ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach and Cyber Attack.

How does Turning Point Brands, Inc. detect and respond to cybersecurity incidents ?

Detection and Response: The company detects and responds to cybersecurity incidents through an communication strategy with public disclosure via maine attorney general..

Incident Details

Can you provide details on each incident ?

Incident : Data Breach

Title: Data Breach at International Vapor Group

Description: The California Office of the Attorney General reported a data breach involving International Vapor Group on March 12, 2019. The breach occurred on June 30, 2018, resulting in the compromise of customers' names and credit or debit card information due to unauthorized access to their e-commerce site.

Date Detected: 2019-03-12

Date Publicly Disclosed: 2019-03-12

Type: Data Breach

Attack Vector: Unauthorized Access

Incident : Data Breach

Title: Data Breach at Vaporfi.com and Directvapor.com

Description: The Maine Office of the Attorney General reported a data breach involving Vaporfi.com and Directvapor.com on December 21, 2020. The breach was discovered on September 23, 2020, due to unauthorized access to the online payment platform, potentially affecting 3 Maine residents and a total of 10,544 individuals, exposing credit and debit card information.

Date Detected: 2020-09-23

Date Publicly Disclosed: 2020-12-21

Type: Data Breach

What are the most common types of attacks the company has faced ?

Common Attack Types: The most common types of attacks the company has faced is Breach.

Impact of the Incidents

What was the impact of each incident ?

Incident : Data Breach TUR252072725

Data Compromised: Customers' names, Credit or debit card information

Systems Affected: E-commerce site

Incident : Data Breach TUR1006091725

Data Compromised: Credit card information, Debit card information

Systems Affected: online payment platform

Identity Theft Risk: High (payment card data exposed)

Payment Information Risk: High (credit/debit card data exposed)

What types of data are most commonly compromised in incidents ?

Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Customers' Names, Credit Or Debit Card Information, , Payment Card Data and .

Which entities were affected by each incident ?

Incident : Data Breach TUR252072725

Entity Name: International Vapor Group

Entity Type: Company

Industry: E-commerce

Incident : Data Breach TUR1006091725

Entity Name: Vaporfi.com

Entity Type: E-commerce

Industry: Vaping/Retail

Customers Affected: 10,544 (3 in Maine)

Incident : Data Breach TUR1006091725

Entity Name: Directvapor.com

Entity Type: E-commerce

Industry: Vaping/Retail

Customers Affected: 10,544 (3 in Maine)

Response to the Incidents

What measures were taken in response to each incident ?

Incident : Data Breach TUR1006091725

Communication Strategy: Public disclosure via Maine Attorney General

Data Breach Information

What type of data was compromised in each breach ?

Incident : Data Breach TUR252072725

Type of Data Compromised: Customers' names, Credit or debit card information

Incident : Data Breach TUR1006091725

Type of Data Compromised: Payment card data

Number of Records Exposed: 10,544

Sensitivity of Data: High

Data Exfiltration: Likely (unauthorized access to payment platform)

Personally Identifiable Information: Partial (payment card details)

Regulatory Compliance

Were there any regulatory violations and fines imposed for each incident ?

Incident : Data Breach TUR1006091725

Regulatory Notifications: Maine Attorney General

References

Where can I find more information about each incident ?

Incident : Data Breach TUR252072725

Source: California Office of the Attorney General

Date Accessed: 2019-03-12

Incident : Data Breach TUR1006091725

Source: Maine Office of the Attorney General

Where can stakeholders find additional resources on cybersecurity best practices ?

Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: California Office of the Attorney GeneralDate Accessed: 2019-03-12, and Source: Maine Office of the Attorney General.

Investigation Status

How does the company communicate the status of incident investigations to stakeholders ?

Communication of Investigation Status: The company communicates the status of incident investigations to stakeholders through Public disclosure via Maine Attorney General.

Initial Access Broker

How did the initial access broker gain entry for each incident ?

Incident : Data Breach TUR1006091725

High Value Targets: Payment Card Data,

Data Sold on Dark Web: Payment Card Data,

Additional Questions

Incident Details

What was the most recent incident detected ?

Most Recent Incident Detected: The most recent incident detected was on 2019-03-12.

What was the most recent incident publicly disclosed ?

Most Recent Incident Publicly Disclosed: The most recent incident publicly disclosed was on 2020-12-21.

Impact of the Incidents

What was the most significant data compromised in an incident ?

Most Significant Data Compromised: The most significant data compromised in an incident were Customers' names, Credit or debit card information, , credit card information, debit card information and .

What was the most significant system affected in an incident ?

Most Significant System Affected: The most significant system affected in an incident was E-commerce site and online payment platform.

Data Breach Information

What was the most sensitive data compromised in a breach ?

Most Sensitive Data Compromised: The most sensitive data compromised in a breach were Customers' names, credit card information, Credit or debit card information and debit card information.

What was the number of records exposed in the most significant breach ?

Number of Records Exposed in Most Significant Breach: The number of records exposed in the most significant breach was 10.5K.

References

What is the most recent source of information about an incident ?

Most Recent Source: The most recent source of information about an incident are Maine Office of the Attorney General and California Office of the Attorney General.

cve

Latest Global CVEs (Not Company-Specific)

Description

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.

Risk Information
cvss4
Base: 7.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.

Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.

Risk Information
cvss4
Base: 6.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Access Data Using Our API

SubsidiaryImage

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=turning-point-brands-inc.' -H 'apikey: YOUR_API_KEY_HERE'

What Do We Measure ?

revertimgrevertimgrevertimgrevertimg
Incident
revertimgrevertimgrevertimgrevertimg
Finding
revertimgrevertimgrevertimgrevertimg
Grade
revertimgrevertimgrevertimgrevertimg
Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network Security

Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)

Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)

Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat Intelligence

Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Top LeftTop RightBottom LeftBottom Right
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
Users Love Us Badge