Company Details
uc-rusal
1,536
20,758
212
rusal.com
0
UC _3277891
In-progress


UC RUSAL Vendor Cyber Rating & Cyber Score
rusal.comRUSAL is a leading global producer of low-carbon aluminium. More than 90% of the Company's aluminium is produced from renewable electricity, and by implementing innovative and energy-saving technologies RUSAL is able to reduce greenhouse gas emissions at all production stages. This has enabled RUSAL to become one of the first in the world to master the production of 'green' metal under the ALLOW brand. Less than 4 t of CO2 equivalent per 1 tonne of aluminium is the carbon footprint of ALLOW aluminium brand (scope 1 and scope 2) RUSAL operates in 20 countries on 5 continents. The company employs 50,000 people across the globe. In 2020, RUSAL accounted for approximately 5.8% of global production of aluminium and 6.5% of alumina. The Company’s key sales markets are Europe, Russia and the CIS countries, North America, South-East Asia, Japan and South Korea. The major end users are transport, construction, power and packaging industries. RUSAL owns proprietary smelting technologies and is developing new ones, including a revolutionary inert anode technology.
Company Details
uc-rusal
1,536
20,758
212
rusal.com
0
UC _3277891
In-progress
Between 750 and 799

UC RUSAL Global Score (TPRM)XXXX



No incidents recorded for UC RUSAL in 2026.
No incidents recorded for UC RUSAL in 2026.
No incidents recorded for UC RUSAL in 2026.
UC RUSAL cyber incidents detection timeline including parent company and subsidiaries

RUSAL is a leading global producer of low-carbon aluminium. More than 90% of the Company's aluminium is produced from renewable electricity, and by implementing innovative and energy-saving technologies RUSAL is able to reduce greenhouse gas emissions at all production stages. This has enabled RUSAL to become one of the first in the world to master the production of 'green' metal under the ALLOW brand. Less than 4 t of CO2 equivalent per 1 tonne of aluminium is the carbon footprint of ALLOW aluminium brand (scope 1 and scope 2) RUSAL operates in 20 countries on 5 continents. The company employs 50,000 people across the globe. In 2020, RUSAL accounted for approximately 5.8% of global production of aluminium and 6.5% of alumina. The Company’s key sales markets are Europe, Russia and the CIS countries, North America, South-East Asia, Japan and South Korea. The major end users are transport, construction, power and packaging industries. RUSAL owns proprietary smelting technologies and is developing new ones, including a revolutionary inert anode technology.

AngloGold Ashanti plc is a global gold mining company with a diverse, high-quality portfolio of operations, projects and exploration activities across 10 countries on four continents. We pursue value-creating opportunities involving other minerals, where we can leverage our existing assets, sharehol

Hydro is a leading industrial company that builds businesses and partnerships for a more sustainable future. We develop industries that matter to people and society. Since 1905, Hydro has turned natural resources into valuable products for people and businesses, creating a safe and secure workplace
Our story began in 1874, when we first supplied explosives to the Victorian goldfields in Australia. Since then, we have grown to become one of the world’s leading mining and infrastructure solutions providers. From the production and supply of explosives, blasting systems, mining chemicals and g

With a history spanning 122 years, Gerdau is Brazil's largest steel producer, one of the leading producers of long steel in the Americas and of special steel in the world. In Brazil, Gerdau also produces flat steel and iron ore for its own use. Gerdau also has a new business division, Gerdau Next, w

First Quantum Minerals Ltd. is a global mining company producing copper and nickel, as well as gold and cobalt. Our growing portfolio of operations and projects spans four continents and employs around 20,000 people. We are well-known for our ‘can do’ attitude and specialist technical, project mana

Tata Steel group is among the top global steel companies with an annual crude steel capacity of 34 million tonnes per annum. It is one of the world's most geographically-diversified steel producers, with operations and commercial presence across the world. The group (excluding SEA operations) record

Over the last 35 years, we have partnered the country in its journey to self-reliance, by embracing sustainability, adopting cutting-edge technology and having innovation and R&D initiatives at the heart of our culture. From humble beginnings with a single plant in 1982, we are now India's leading m

Fundada em 1941, a CSN representa um marco no processo de industrialização do Brasil. O seu aço viabilizou a implantação das primeiras indústrias nacionais, núcleo do atual parque fabril brasileiro. Ao longo de mais de oito décadas, a CSN segue fazendo história, sendo hoje um dos mais eficientes com

Recruitment Fraud Alert: Alcoa has become aware of some fraudulent employment offers being sent to candidates via social media channels. Alcoa never makes job offers or asks for bank details through social media. Always verify the authenticity of any recruitment communication directly through our of
.png)

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of UC RUSAL is http://www.rusal.com.
According to Rankiteo, UC RUSAL’s AI-generated cybersecurity score is 762, reflecting their Fair security posture.
According to Rankiteo, UC RUSAL currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, UC RUSAL has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.
According to Rankiteo, UC RUSAL is not certified under SOC 2 Type 1.
According to Rankiteo, UC RUSAL does not hold a SOC 2 Type 2 certification.
According to Rankiteo, UC RUSAL is not listed as GDPR compliant.
According to Rankiteo, UC RUSAL does not currently maintain PCI DSS compliance.
According to Rankiteo, UC RUSAL is not compliant with HIPAA regulations.
According to Rankiteo,UC RUSAL is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
UC RUSAL operates primarily in the Mining industry.
UC RUSAL employs approximately 1,536 people worldwide.
UC RUSAL presently has no subsidiaries across any sectors.
UC RUSAL’s official LinkedIn profile has approximately 20,758 followers.
UC RUSAL is classified under the NAICS code 212, which corresponds to Mining (except Oil and Gas).
No, UC RUSAL does not have a profile on Crunchbase.
Yes, UC RUSAL maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/uc-rusal.
As of April 04, 2026, Rankiteo reports that UC RUSAL has not experienced any cybersecurity incidents.
UC RUSAL has an estimated 3,778 peer or competitor companies worldwide.
Total Incidents: According to Rankiteo, UC RUSAL has faced 0 incidents in the past.
Incident Types: The types of cybersecurity incidents that have occurred include .
.png)
nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.3.0, two peer-facing consensus request handlers assume that the history index is always available and call blockchain.history_store.history_index().unwrap() directly. That assumption is false by construction. HistoryStoreProxy::history_index() explicitly returns None for the valid HistoryStoreProxy::WithoutIndex state. when a full node is syncing or otherwise running without the history index, a remote peer can send RequestTransactionsProof or RequestTransactionReceiptsByAddress and trigger an Option::unwrap() panic on the request path. This issue has been patched in version 1.3.0.
PraisonAI is a multi-agent teams system. Prior to version 1.5.95, FileTools.download_file() in praisonaiagents validates the destination path but performs no validation on the url parameter, passing it directly to httpx.stream() with follow_redirects=True. An attacker who controls the URL can reach any host accessible from the server including cloud metadata services and internal network services. This issue has been patched in version 1.5.95.
PraisonAI is a multi-agent teams system. Prior to version 4.5.97, OAuthManager.validate_token() returns True for any token not found in its internal store, which is empty by default. Any HTTP request to the MCP server with an arbitrary Bearer token is treated as authenticated, granting full access to all registered tools and agent capabilities. This issue has been patched in version 4.5.97.
PraisonAI is a multi-agent teams system. Prior to version 4.5.97, the PraisonAI Gateway server accepts WebSocket connections at /ws and serves agent topology at /info with no authentication. Any network client can connect, enumerate registered agents, and send arbitrary messages to agents and their tool sets. This issue has been patched in version 4.5.97.
PraisonAI is a multi-agent teams system. Prior to version 4.5.90, MCPToolIndex.search_tools() compiles a caller-supplied string directly as a Python regular expression with no validation, sanitization, or timeout. A crafted regex causes catastrophic backtracking in the re engine, blocking the Python thread for hundreds of seconds and causing a complete service outage. This issue has been patched in version 4.5.90.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.