What is the official website of Variety ?

The official website of Variety is http://www.variety.com/.

What is Variety's cybersecurity risk score?

Variety has an AI-generated cybersecurity risk score of 831 out of 1000, indicating a Good security posture according to Rankiteo's assessment.

How many security incidents has Variety experienced?

According to Rankiteo, Variety currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Variety been affected by any supply chain cyber incidents ?

According to Rankiteo, Variety has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Variety have SOC 2 Type 1 certification ?

According to Rankiteo, Variety is not certified under SOC 2 Type 1.

Does Variety have SOC 2 Type 2 certification ?

According to Rankiteo, Variety does not hold a SOC 2 Type 2 certification.

Does Variety comply with GDPR ?

According to Rankiteo, Variety is not listed as GDPR compliant.

Does Variety have PCI DSS certification ?

According to Rankiteo, Variety does not currently maintain PCI DSS compliance.

Does Variety comply with HIPAA ?

According to Rankiteo, Variety is not compliant with HIPAA regulations.

Does Variety have ISO 27001 certification ?

According to Rankiteo,Variety is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Variety operate in ?

Variety operates primarily in the Entertainment industry.

How many employees does Variety have ?

Variety employs approximately 755 people worldwide.

Does Variety own any subsidiaries ?

Variety presently has no subsidiaries across any sectors.

How many LinkedIn followers does Variety have ?

Variety's official LinkedIn profile has approximately followers.

Does Variety have a Crunchbase profile ?

No, Variety does not have a profile on Crunchbase.

Does Variety have a LinkedIn profile ?

Yes, Variety maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/variety.

How many cybersecurity incidents has Variety experienced ?

As of July 29, 2026, Rankiteo reports that Variety has experienced 1 cybersecurity incidents.

How many peer or competitor companies does Variety have ?

Variety has an estimated 2,197 peer or competitor companies worldwide.

What types of cybersecurity incidents has Variety faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Variety

Boost Score +25 with badge (5 left)

831

/1000

Good

856

/1000

Very Good

Variety Vendor Cyber Rating & Cyber Score

variety.com

Add Your Compliance Badge

Variety is the #1 entertainment business news brand. Now celebrating its 119th year, Variety remains the most read showbiz publication in the world with over 30MM unique users/month and 14MM social followers. Featuring award-winning breaking news reporting, insightful award-season coverage, must-read feature spotlights and intelligent analysis of the industry’s most prominent players, Variety is the trusted source for the business of global entertainment. Read by a highly engaged audience of industry insiders, Variety’s multi-platform content coverage expands across digital, mobile, social, print and branded content, events and summits. For more, visit www.variety.com

Variety A.I CyberSecurity Scoring

Scoring History

Variety

Variety CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Variety

Breach

09/2016

VAR173618622

Loading…

A.I.

Variety Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Variety

Incidents vs Entertainment Industry Avg (This Year)

No incidents recorded for Variety in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Variety in 2026.

Incident Types Variety vs Entertainment Industry Avg (This Year)

No incidents recorded for Variety in 2026.

Incident History - Variety (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Variety Subsidiaries

Variety

Entertainment

Website: http://www.variety.com/

Company Size: 51-200 employees

Variety VIP+Research Services

Loading…

Variety Similar Companies

Cinépolis

cinepolis.com

Leading global entertainment company born in Latin America, with over 6,000 screens, 3rd largest in the world. Cinépolis has operations in Mexico, Central and South America, Asia, Spain, India and United States of America. With more than 40k cinepolites delivering the "Cinepolis" experience based in the vision of "Illuminating your life movie with smiles & unforgettable moments". #youarethestar

DIRECTV

direc.tv

At DIRECTV, we believe TV is meant to be enjoyed. Everything we do is focused on delivering an entertainment experience above and beyond expectations and industry standards and advocating for excellence on behalf of our customers. A shared passion for the joy of television defines our mission to offer the content, service, and reliability that allows our customers to connect, unwind, and indulge their inner superfan by watching what they love on any screen, anywhere.    We never stop innovating and continue to embrace emerging technologies. We’re constantly evolving our products, including best-in-class content and personalized services to provide our customers with industry-leading video offerings.    Learn more about our offerings at DIRECTV.COM and follow us @DIRECTV on Instagram, TikTok, Facebook and X. To learn more about DIRECTV's culture and what it's like to be an employee, follow us at @WeAreDIRECTV on X and Instagram. And stay up to date with our @DIRECTVNews handle on X.

Loading…

NEWS

Variety CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 02, 2026 06:47 PM

As generative AI expands, governance and cybersecurity face new tests

Artificial intelligence continues to reshape how organizations operate, make decisions and use data. Less visible, however, is how quickly...

Read Article

March 02, 2026 04:55 AM

Hackers hit Iranian apps, websites after US-Israeli strikes

Cyber operations ‌also struck a variety of Iranian government services and military targets to limit a coordinated Iranian response.

Read Article

February 02, 2026 08:00 AM

Dealerships will find AI embedded in cybersecurity tools at NADA Show

Dealerships seeking new cybersecurity tools at the 2026 NADA Show should be ready for one inescapable trend: Artificial intelligence is...

Read Article

December 03, 2025 08:00 AM

Former Israeli spies now overseeing US government cybersecurity

The Pentagon, Treasury Department, DHS, and a variety of other US government agencies have begun relying on a firm launched by former...

Read Article

November 18, 2025 08:00 AM

X Goes Down: Thousands of Users Report Outages, Error Messages After Cloudflare Issues

Problems were related to technical issues at cybersecurity services provider Cloudflare. By Todd Spangler. Plus Icon...

Read Article

November 10, 2025 08:00 AM

UAH moves forward on cybersecurity renovation of Bevill Center, new Track and Field Complex

Two significant construction projects at The University of Alabama in Huntsville (UAH) – the renovation of the Bevill Center for the new...

Read Article

October 15, 2025 07:00 AM

Scouting America launches merit badges in Cybersecurity and Artificial Intelligence

Scouting America's merit badge program continues to expand, this time with the launch of two badges aimed at giving Scouts some of the...

Read Article

September 29, 2025 07:00 AM

CISA confirms it’s ending MS-ISAC support

The Center for Internet Security's agreement with the Cybersecurity and Infrastructure Security Agency will not be renewed at the end of the...

Read Article

September 24, 2025 07:00 AM

Cybersecurity Enforcement Intensifies: DoD Issues Final CMMC Rule and Updates DFARS

As cybersecurity enforcement ramps up under the False Claims Act (FCA), the latest Cybersecurity Maturity Model Certification (CMMC) update...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-66064

SUMMARY

goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.5, the httpserver/handler.go sendFile handler opened files using a cleaned path but derived the authorization filename from raw req.URL.Path, so a trailing slash could bypass .goshs ACL-file protection and block-list checks. This issue is fixed in version 2.1.5.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Impact Score

1.4

Exploitability

3.9

REFERENCES

CVE-2026-66063

SUMMARY

goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.5, the httpserver/updown.go multipart upload handler split part.FileName() on / but did not reject .., allowing an unauthenticated upload with filename .. to create a file outside the served tree. This issue is fixed in version 2.1.5.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Impact Score

2.5

Exploitability

3.9

REFERENCES

CVE-2026-64863

SUMMARY

goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.4, the httpserver/server.go wdGuard handled WebDAV MOVE as a write-only method and did not enforce --no-delete, allowing WebDAV clients to delete or overwrite files via MOVE with Overwrite: T. This issue is fixed in version 2.1.4.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 9.1)

cvss3

Base Score: 9.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Impact Score

5.2

Exploitability

3.9

REFERENCES

CVE-2026-62325

SUMMARY

goshs is a feature-rich single-binary file server for red teamers and developers. From 2.1.3 until 2.1.4, the sftpserver/sftpserver.go password handler used Username != "" && Password != "", so running goshs with -b 'admin:' -sftp and no -fkf left both SFTP authentication handlers unset and allowed unauthenticated file access. This issue is fixed in version 2.1.4.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 9.1)

cvss3

Base Score: 9.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Impact Score

5.2

Exploitability

3.9

REFERENCES

CVE-2026-59921

SUMMARY

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, HttpPostRequestEncoder constructs multipart HTTP request bodies by directly concatenating user-supplied filenames and field names into Content-Disposition MIME headers without validating or sanitizing CRLF characters (\r\n). Since MIME headers are delimited by CRLF, an attacker who controls the filename can inject arbitrary MIME headers into the multipart body part. The root cause is that neither the encoder nor the FileUpload implementations' setFilename() methods, which only check for null, neutralize CRLF characters before the filename is embedded into the header. This issue has been fixed in versions 4.1.136.Final and 4.2.16.Final.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 5.7)

cvss3

Base Score: 5.7

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

2.1

REFERENCES

https://github.com/netty/netty/security/advisories/GHSA-gcjf-9mgh-3p7g

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…