Comparison Overview

Université de Sherbrooke

VS

The Johns Hopkins University

Université de Sherbrooke

2500, boulevard de l'Université, Sherbrooke, Québec, CA, J1K 2R1
Last Update: 2025-12-01
View Profile
Between 750 and 799
http://www.usherbrooke.ca/

Located in Canada, in the Province of Quebec, the Université de Sherbrooke is a French-speaking institution that offers you the opportunity to benefit from an academic education that is recognized and valued around the world. The Université de Sherbrooke is host to more than 40,000 students, of which 10000 are registered at the University of the Third Age. The Université de Sherbrooke has been welcoming international students ever since it was founded and each year the numbers increase. Currently, more than 1600 foreign students from 120 countries worldwide attend the Université de Sherbrooke. More than 82% of the students enrolled at the Université are from outside Sherbrooke. There are 6634 employees at the Université de Sherbrooke. LinkedIn Company Page : www.linkedin.com/company/universite-de-sherbrooke

NAICS: 6113
NAICS Definition: Colleges, Universities, and Professional Schools
Employees: 6,935
Subsidiaries: 12
12-month incidents
0
Known data breaches
0
Attack type number
1
View Profile

The Johns Hopkins University

3400 N Charles St, Mason Hall, Baltimore, MD, US, 21218-2688
Last Update: 2025-12-01
Between 800 and 849
http://jhu.edu

We are America’s first research university, founded in 1876 on the principle that by pursuing big ideas and sharing what we learn, we can make the world a better place. For more than 140 years, our faculty and students have worked side by side in pursuit of discoveries that improve lives. Johns Hopkins enrolls more than 24,000 full- and part-time students throughout nine academic divisions. Our faculty and students study, teach, and learn across more than 260 programs in the arts and music, the humanities, the social and natural sciences, engineering, international studies, education, business, and the health professions.The university has four campuses in Baltimore; one in Washington, D.C.; one in Montgomery County, Maryland; and facilities throughout the Baltimore-Washington region as well as in China and Italy. The university takes its name from 19th-century Maryland philanthropist Johns Hopkins, an entrepreneur who believed in improving public health and education in Baltimore and beyond.

NAICS: 6113
NAICS Definition: Colleges, Universities, and Professional Schools
Employees: 17,394
Subsidiaries: 19
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/universite-de-sherbrooke.jpeg
Université de Sherbrooke
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/johns-hopkins-university.jpeg
The Johns Hopkins University
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Université de Sherbrooke
100%
Compliance Rate
0/4 Standards Verified
The Johns Hopkins University
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Higher Education Industry Average (This Year)

No incidents recorded for Université de Sherbrooke in 2025.

Incidents vs Higher Education Industry Average (This Year)

No incidents recorded for The Johns Hopkins University in 2025.

Incident History — Université de Sherbrooke (X = Date, Y = Severity)

Université de Sherbrooke cyber incidents detection timeline including parent company and subsidiaries

Incident History — The Johns Hopkins University (X = Date, Y = Severity)

The Johns Hopkins University cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/universite-de-sherbrooke.jpeg
Université de Sherbrooke
Incidents

Date Detected: 12/2023
Type:Cyber Attack
Blog: Blog
https://images.rankiteo.com/companyimages/johns-hopkins-university.jpeg
The Johns Hopkins University
Incidents

No Incident

FAQ

The Johns Hopkins University company demonstrates a stronger AI Cybersecurity Score compared to Université de Sherbrooke company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Université de Sherbrooke company has historically faced a number of disclosed cyber incidents, whereas The Johns Hopkins University company has not reported any.

In the current year, The Johns Hopkins University company and Université de Sherbrooke company have not reported any cyber incidents.

Neither The Johns Hopkins University company nor Université de Sherbrooke company has reported experiencing a ransomware attack publicly.

Neither The Johns Hopkins University company nor Université de Sherbrooke company has reported experiencing a data breach publicly.

Université de Sherbrooke company has reported targeted cyberattacks, while The Johns Hopkins University company has not reported such incidents publicly.

Neither Université de Sherbrooke company nor The Johns Hopkins University company has reported experiencing or disclosing vulnerabilities publicly.

Neither Université de Sherbrooke nor The Johns Hopkins University holds any compliance certifications.

Neither company holds any compliance certifications.

The Johns Hopkins University company has more subsidiaries worldwide compared to Université de Sherbrooke company.

The Johns Hopkins University company employs more people globally than Université de Sherbrooke company, reflecting its scale as a Higher Education.

Neither Université de Sherbrooke nor The Johns Hopkins University holds SOC 2 Type 1 certification.

Neither Université de Sherbrooke nor The Johns Hopkins University holds SOC 2 Type 2 certification.

Neither Université de Sherbrooke nor The Johns Hopkins University holds ISO 27001 certification.

Neither Université de Sherbrooke nor The Johns Hopkins University holds PCI DSS certification.

Neither Université de Sherbrooke nor The Johns Hopkins University holds HIPAA certification.

Neither Université de Sherbrooke nor The Johns Hopkins University holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Prior to 2.0.3, Function api.ParseJSONRequest currently splits (via a call to strings.Split) an optionally-provided OID (which is untrusted data) on periods. Similarly, function api.getContentType splits the Content-Type header (which is also untrusted data) on an application string. As a result, in the face of a malicious request with either an excessively long OID in the payload containing many period characters or a malformed Content-Type header, a call to api.ParseJSONRequest or api.getContentType incurs allocations of O(n) bytes (where n stands for the length of the function's argument). This vulnerability is fixed in 2.0.3.

Published
Date
2025-12-04
Updated
Date
2025-12-04
Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
Description

Monkeytype is a minimalistic and customizable typing test. In 25.49.0 and earlier, there is improper handling of user input which allows an attacker to execute malicious javascript on anyone viewing a malicious quote submission. quote.text and quote.source are user input, and they're inserted straight into the DOM. If they contain HTML tags, they will be rendered (after some escaping using quotes and textarea tags).

Published
Date
2025-12-04
Updated
Date
2025-12-04
Risk Information
cvss4
Base: 7.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

SysReptor is a fully customizable pentest reporting platform. Prior to 2025.102, there is a Stored Cross-Site Scripting (XSS) vulnerability allows authenticated users to execute malicious JavaScript in the context of other logged-in users by uploading malicious JavaScript files in the web UI. This vulnerability is fixed in 2025.102.

Published
Date
2025-12-04
Updated
Date
2025-12-04
Risk Information
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
References
Description

Taiko Alethia is an Ethereum-equivalent, permissionless, based rollup designed to scale Ethereum without compromising its fundamental properties. In 2.3.1 and earlier, TaikoInbox._verifyBatches (packages/protocol/contracts/layer1/based/TaikoInbox.sol:627-678) advanced the local tid to whatever transition matched the current blockHash before knowing whether that batch would actually be verified. When the loop later broke (e.g., cooldown window not yet passed or transition invalidated), the function still wrote that newer tid into batches[lastVerifiedBatchId].verifiedTransitionId after decrementing batchId. Result: the last verified batch could end up pointing at a transition index from the next batch (often zeroed), corrupting the verified chain pointer.

Published
Date
2025-12-04
Updated
Date
2025-12-04
Risk Information
cvss4
Base: 8.0
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A flaw has been found in youlaitech youlai-mall 1.0.0/2.0.0. Affected is the function getById/updateAddress/deleteAddress of the file /mall-ums/app-api/v1/addresses/. Executing manipulation can lead to improper control of dynamically-identified variables. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2025-12-04
Updated
Date
2025-12-04
Risk Information
cvss2
Base: 6.5
Severity: LOW
AV:N/AC:L/Au:S/C:P/I:P/A:P
cvss3
Base: 6.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References