What is the official website of Yandex Cloud ?

The official website of Yandex Cloud is https://cloud.yandex.com/en.

What is Yandex Cloud's cybersecurity risk score?

Yandex Cloud has an AI-generated cybersecurity risk score of 754 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Yandex Cloud experienced?

According to Rankiteo, Yandex Cloud currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Yandex Cloud been affected by any supply chain cyber incidents ?

According to Rankiteo, Yandex Cloud has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Yandex Cloud have SOC 2 Type 1 certification ?

According to Rankiteo, Yandex Cloud is not certified under SOC 2 Type 1.

Does Yandex Cloud have SOC 2 Type 2 certification ?

According to Rankiteo, Yandex Cloud does not hold a SOC 2 Type 2 certification.

Does Yandex Cloud comply with GDPR ?

According to Rankiteo, Yandex Cloud is not listed as GDPR compliant.

Does Yandex Cloud have PCI DSS certification ?

According to Rankiteo, Yandex Cloud does not currently maintain PCI DSS compliance.

Does Yandex Cloud comply with HIPAA ?

According to Rankiteo, Yandex Cloud is not compliant with HIPAA regulations.

Does Yandex Cloud have ISO 27001 certification ?

According to Rankiteo,Yandex Cloud is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Yandex Cloud operate in ?

Yandex Cloud operates primarily in the IT Services and IT Consulting industry.

How many employees does Yandex Cloud have ?

Yandex Cloud employs approximately 514 people worldwide.

Does Yandex Cloud own any subsidiaries ?

Yandex Cloud presently has no subsidiaries across any sectors.

How many LinkedIn followers does Yandex Cloud have ?

Yandex Cloud's official LinkedIn profile has approximately 8,937 followers.

What is the NAICS classification code for Yandex Cloud ?

Yandex Cloud is classified under the NAICS code 5415, which corresponds to Computer Systems Design and Related Services.

Does Yandex Cloud have a Crunchbase profile ?

No, Yandex Cloud does not have a profile on Crunchbase.

Does Yandex Cloud have a LinkedIn profile ?

Yes, Yandex Cloud maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/yandexcloud.

How many cybersecurity incidents has Yandex Cloud experienced ?

As of October 6, 2026, Rankiteo reports that Yandex Cloud has experienced 3 cybersecurity incidents.

How many peer or competitor companies does Yandex Cloud have ?

Yandex Cloud has an estimated 41,844 peer or competitor companies worldwide.

What types of cybersecurity incidents has Yandex Cloud faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach and Data Leak.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Yandex Cloud

Boost Score +25 with badge (5 left)

754

/1000

Fair

779

/1000

Fair

Yandex Cloud Vendor Cyber Rating & Cyber Score

yandex.com

Add Your Compliance Badge

Yandex Cloud is a public cloud platform where companies can create and develop projects using Yandex's scalable computing power, advanced technologies, and infrastructure.

Yandex Cloud

Yandex Cloud CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Yandex Cloud

Breach

100

8/2024

YAN000081124

Yandex Cloud

Breach

01/2023

YAN224381023

Yandex Cloud

Data Leak

2/2022

YAN21827123

Loading…

A.I.

Yandex Cloud Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Yandex Cloud

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for Yandex Cloud in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Yandex Cloud in 2026.

Incident Types Yandex Cloud vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for Yandex Cloud in 2026.

Incident History - Yandex Cloud (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Yandex Cloud Subsidiaries

Yandex Cloud

IT Services and IT Consulting

Website: https://cloud.yandex.com/en

Company Size: 201-500 employees

YandexTechnology, Information and Internet

Yandex.MetricaTechnology, Information and Internet

Yandex 360IT Services and IT Consulting

AppMetricaТехнологии, информационные средства и Интернет

Yandex.TaxiTechnology, Information and Internet

Loading…

Yandex Cloud Similar Companies

Oracle

cb oracle.com

Oracle is a global leader in AI, delivering the cloud infrastructure, data, and applications that organizations across the world trust to successfully achieve business outcomes at scale. Oracle Cloud Infrastructure (OCI) provides fast, flexible, scalable AI infrastructure. With superior compute performance and network design, a comprehensive choice of AI services for developing and orchestrating agentic AI workflows at scale, and unrivaled data control, security, privacy, and governance, OCI is designed for AI workloads. It also gives customers the flexibility to run their workloads wherever they need by supporting public cloud, multicloud, hybrid cloud, sovereign, and on-premises deployments. The Oracle AI Database is the only database with AI natively built in everywhere. By bringing AI to where data lives, the Oracle AI Database delivers enterprise-grade AI securely, cost-effectively, and at scale. In-database machine learning and vector search enable AI models to run where data resides. Support for multi-modal data (structured, unstructured, graph, vector) enables richer AI use cases. The Oracle AI Data Platform enables organizations to build, deploy, and govern AI agents and applications on top of private, secure, and distributed enterprise data. This enables organizations to operationalize AI without compromising data security or control. Oracle Applications embed AI directly into business workflows and industry processes to ensure AI is delivered in context, where work happens. They include the only applications suite that brings AI to every aspect of a business, with AI-powered ERP, HCM, and CX applications, and the Oracle Health Suite which provides applications for managing the entire healthcare ecosystem. Oracle also provides industry-specific cloud application suites for more than two dozen industries and NetSuite, the world’s first cloud computing company. This LinkedIn page serves as Oracle’s official global company page.

Infosys

infosys.com

Infosys is a global leader in next-generation digital services and consulting. We enable clients in more than 50 countries to navigate their digital transformation. With over three decades of experience in managing the systems and workings of global enterprises, we expertly steer our clients through their digital journey. We do it by enabling the enterprise with an AI-powered core that helps prioritize the execution of change. We also empower the business with agile digital at scale to deliver unprecedented levels of performance and customer delight. Our always-on learning agenda drives their continuous improvement through building and transferring digital skills, expertise, and ideas from our innovation ecosystem. Visit www.infosys.com to see how Infosys (NYSE: INFY) can help your enterprise navigate your next.

GFT Technologies

gft.com

GFT Technologies is an AI-centric global digital transformation company. We design advanced data and AI transformation solutions, modernize technology architectures and develop next-generation core systems for industry leaders in Banking, Insurance, Manufacturing and Robotics. Partnering closely with our clients, we push boundaries to unlock their full potential. With deep industry expertise, cutting-edge technology, and a strong partner ecosystem, GFT delivers responsible AI-centric solutions that combine engineering excellence, high-performance delivery and cost efficiency. Our team of 12,000+ technology experts operate in 20+ countries worldwide offering career opportunities at the forefront of software innovation. Let’s Go Beyond_ Legal Disclaimer: https://www.gft.com/int/en/legal-disclaimer

Expleo Group

expleo.com

Expleo is a global engineering, technology and consulting service provider that partners with leading organisations to guide them through their business transformation, helping them achieve operational excellence and future-proof their businesses. Expleo benefits from more than 50 years of experience developing complex products, optimising manufacturing processes, and ensuring the quality of information systems. Leveraging its deep sector knowledge and wide-ranging expertise in fields including AI engineering, digitalisation, hyper-automation, cybersecurity and data science, the group’s mission is to fast-track innovation through each step of the value chain. As a responsible and diverse organisation, Expleo is committed to doing business with integrity and working towards a more sustainable and secure society. Expleo boasts an extensive global footprint, powered by 18,000 highly-skilled experts delivering value in 29 countries and generating more than €1.4 billion in revenue.

Carelon Global Solutions India

carelonglobal.in

Carelon Global Solutions makes healthcare operations more practical, effective, and efficient. Our global team of more than 25K innovators drives growth, delivers exceptional support, and develops digital tools specifically for health plans, providers, and systems. Each day, our partners and experts from across the globe implement new ways to save time and money — so doctors can focus on care. Formerly known as Legato Health Technologies, Carelon Global Solutions is part of the Carelon family of brands and is a fully owned subsidiary of Elevance Health. Headquartered in the United States, Carelon Global Solutions has talented teams in India, Ireland, the Philippines, and Puerto Rico. Want to be part of something meaningful? Join our growing team. We believe that when bold talent meets limitless thinking, the possibilities are endless. As part of our India team, you’ll work alongside some of the best minds in the business to solve healthcare’s most complex challenges. You’ll be part of an exciting, fast-paced, and supportive company culture, where all associates receive: • Competitive pay. • Generous benefits. • Training, mentorship, and growth. • Hybrid workplace flexibility. • The opportunity to help others and make a difference. Follow our Carelon Global Solutions India LinkedIn page for the latest job postings and timely company news.

Reply

reply.com

Reply [EXM, STAR: REY] specialises in the design and implementation of solutions based on new communication channels and digital media. As a network of highly specialised companies, Reply defines and develops business models enabled by the new models of AI, big data, cloud computing, digital media and the internet of things. Reply delivers consulting, system integration and digital services to organisations across the telecom and media; industry and services; banking and insurance; and public sectors.

TIVIT

tivit.com

TIVIT is a Brazil-based multinational company that offers enterprise-level digital solutions, and operates in ten countries in Latin America. We help our clients develop their businesses by offering industry-leading digital solutions divided into four main categories: Digital Business, Cloud Solutions, Digital Payments, and Technology Platforms. For over 19 years, we have been developing cutting-edge technology, digital solutions and hybrid-cloud-based services to help companies overcome their most demanding challenges. With proven expertise in several areas, such as payments, financial services, utilities, retail and infrastructure, TIVIT is a technologically independent company that integrates different platforms, bringing forth innovative solutions that improve our clients’ competitiveness. Eight out of Brazil’s ten biggest companies, and 100 out of the biggest 500 in Latin America rely on TIVIT’s technological expertise to bring efficiency and innovation to their businesses.

EPAM Systems

epam.com

Since 1993, EPAM Systems, Inc. (NYSE: EPAM) has used its software engineering expertise to become a leading global provider of digital engineering, cloud and AI-enabled transformation services, and a leading business and experience consulting partner for global enterprises and ambitious startups. We address our clients’ transformation challenges by fusing EPAM Continuum’s integrated strategy, experience and technology consulting with our 30+ years of engineering execution to speed our clients’ time to market and drive greater value from their innovations and digital investments. We leverage AI and GenAI to deliver transformative solutions that accelerate our clients’ digital innovation and enhance their competitive edge. Through platforms like EPAM AI/RUN™ and initiatives like DIALX Lab, we integrate advanced AI technologies into tailored business strategies, driving significant industry impact and fostering continuous innovation. We deliver globally, but engage locally with our expert teams of consultants, architects, designers and engineers, making the future real for our clients, our partners and our people around the world. We believe the right solutions are the ones that improve people’s lives and fuel competitive advantage for our clients across diverse industries. Our thinking comes to life in the experiences, products and platforms we design and bring to market. Added to the S&P 500 and the Forbes Global 2000 in 2021 and recognized by Glassdoor and Newsweek as Most Loved Workplace, our multidisciplinary teams serve customers across six continents. We are proud to be among the top 15 companies in Information Technology Services in the Fortune 1000 and to be recognized as a leader in the IDC MarketScapes for Worldwide Experience Build Services, Worldwide Experience Design Services and Worldwide Software Engineering Services. Learn more at www.epam.com.

Akkodis

akkodis.com

Akkodis is a global digital engineering company and Smart Industry leader. We enable clients to advance in their digital transformation with Talent, Academy, Consulting, and Solutions services. Our 50,000 experts combine best-in-class technologies, R&D, and deep sector know-how for purposeful innovation. We are passionate about Engineering a Smarter Future Together. With a shared passion for technology and talent, 50,000 engineers and digital experts deliver deep cross-sector expertise in 30 countries across North America, EMEA and APAC. Akkodis offers broad industry experience, and strong know-how in key technology sectors such as mobility, software & technology services, robotics, testing, simulations, data security, AI & data analytics. The combined IT and engineering expertise brings a unique end-to-end solution offering, with four service lines – Consulting, Solutions, Talents and Academy – to support clients in rethinking their product development and business processes, improve productivity, minimize time to market and shape a smarter and more sustainable tomorrow. Akkodis is part of the Adecco Group. The Adecco Group is a leader in delivering expertise in talent and technology, enabling organizations to succeed and people to thrive. www.akkodis.com

Loading…

NEWS

Yandex Cloud CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 25, 2026 08:00 AM

Malicious NuGet Packages Stole ASP.NET Data; npm Package Dropped Malware

Cybersecurity researchers have discovered four malicious NuGet packages that are designed to target ASP.NET web application developers to...

Read Article

February 18, 2026 08:00 AM

Yandex.Disk Review 2026 [Is It Safe For File-Backup?]

Yandex is a cloud storage service and fully fledged workstation. Read this Yandex.disk review to see if it's on par with the competition.

Read Article

February 09, 2026 08:00 AM

ScarCruft Abuses Legitimate Cloud Services for C2 and OLE-based Chain to Drop Malware

ScarCruft shifted from LNK attacks to OLE-based HWP documents to deploy ROKRAT in memory, using cloud services for C2.

Read Article

February 09, 2026 08:00 AM

ScarCruft Exploits Trusted Cloud Services and OLE Documents to Deliver Malware

The North Korean-backed advanced persistent threat (APT) group known as ScarCruft has significantly evolved its attack techniques.

Read Article

December 19, 2025 08:00 AM

Cloud Atlas Exploits Office Vulnerabilities to Execute Malicious Code

The Cloud Atlas threat group, active since 2014, continues to pose a significant risk to organizations in Eastern Europe and Central Asia...

Read Article

December 18, 2025 08:00 AM

China-Aligned Threat Group Uses Windows Group Policy to Deploy Espionage Malware

ESET reports China-aligned LongNosedGoblin spying on government networks in Southeast Asia & Japan using Group Policy and cloud-based...

Read Article

November 24, 2025 08:00 AM

APT31 sets sights on Russian IT sector

Russian IT firms, particularly those contracted by the government, have been subjected to a stealthy wave of attacks from Chinese...

Read Article

November 22, 2025 08:00 AM

China-Linked APT31 Launches Stealthy Cyberattacks on Russian IT Using Cloud Services

The China-linked advanced persistent threat (APT) group known as APT31 has been attributed to cyber attacks targeting the Russian...

Read Article

November 21, 2025 08:00 AM

China’s APT31 linked to hacks on Russian tech firms

The China-linked hacking group known as APT31 infiltrated Russia's technology sector for years and quietly exfiltrated data from companies...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-105761

SUMMARY

Dify is an open-source LLM app development platform. Prior to 1.16.0, the PUT /console/api/apps/<app_id>/server endpoint in api/controllers/console/app/mcp_server.py used AppMCPServerController.put() to retrieve an AppMCPServer by the client-supplied server ID without verifying that the server belonged to the requested application and tenant. An authenticated workspace member could therefore change another application's MCP server status and parameters, potentially redirecting data or disabling the service. This issue is fixed in version 1.16.0.

Published

Date2026-10-05

Updated

Date2026-10-05

RISK INFORMATION (Score: 7.1)

cvss3

Base Score: 7.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

Impact Score

4.2

Exploitability

2.8

REFERENCES

CVE-2026-105760

SUMMARY

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, a caller can use the request-level media_io_kwargs field to select the GLMGA video backend and supply large values for the fps and max_frames options without a strict work ceiling. GLMGA constructs and deduplicates an attacker-sized pre-decode frame-index list, allowing a compact request and tiny valid video to consume disproportionate CPU time and memory in the shared media-loading executor. This issue is fixed in version 0.30.0.

Published

Date2026-10-05

Updated

Date2026-10-05

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

3.9

REFERENCES

CVE-2026-105759

SUMMARY

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, the Rust frontend's track_http_metrics middleware records the raw HTTP method token as a Prometheus label for requests reaching registered routes. An unauthenticated attacker can send unique arbitrary method tokens to unguarded routes such as /tokenize, causing Prometheus's Family::get_or_create function to permanently create counter and histogram label sets. Those label sets increase process memory usage and enlarge the /metrics response until the service or monitoring path is exhausted. This issue is fixed in version 0.30.0.

Published

Date2026-10-05

Updated

Date2026-10-05

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-105758

SUMMARY

vLLM is an inference and serving engine for large language models. From 0.24.0 until 0.30.0, the Qwen2VLVideoBackend and Qwen3VLVideoBackend classes accept request-level values for the media_io_kwargs.video.max_frames and media_io_kwargs.video.fps fields without enforcing server-side ceilings. An unauthenticated caller can submit these values to the /tokenize endpoint, causing the sampler to decode every frame selected from attacker-controlled video input, consume disproportionate frontend memory, and potentially terminate the API process before scheduling or admission control. The Rust frontend is not affected because it rejects the media_io_kwargs field. This issue is fixed in version 0.30.0.

Published

Date2026-10-05

Updated

Date2026-10-05

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

3.9

REFERENCES

CVE-2026-105757

SUMMARY

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, structured-output request failures can escape request-scoped validation and reach the EngineCore fatal-error path. A per-request backend mismatch can re-raise a grammar compilation exception, padding produced by the ngram_gpu speculative-decoding mode can pass a negative token to guidance validation, and the Rust frontend can admit empty structured-output values that the Python frontend rejects, allowing ordinary constrained-generation requests to terminate the shared engine. This issue is fixed in version 0.30.0.

Published

Date2026-10-05

Updated

Date2026-10-05

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

Yandex Cloud Vendor Cyber Rating & Cyber Score

Yandex Cloud A.I CyberSecurity Scoring

Yandex Cloud CyberSecurity News & History

Yandex Cloud Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Yandex Cloud

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Yandex Cloud vs IT Services and IT Consulting Industry Avg (This Year)

Incident History - Yandex Cloud (X = Date, Y = Severity)

Yandex Cloud Subsidiaries

Yandex Cloud

Yandex Cloud Similar Companies

Oracle

Infosys

GFT Technologies

Expleo Group

Carelon Global Solutions India

Reply

TIVIT

EPAM Systems

Akkodis

Yandex Cloud CyberSecurity News

Malicious NuGet Packages Stole ASP.NET Data; npm Package Dropped Malware

Yandex.Disk Review 2026 [Is It Safe For File-Backup?]

ScarCruft Abuses Legitimate Cloud Services for C2 and OLE-based Chain to Drop Malware

ScarCruft Exploits Trusted Cloud Services and OLE Documents to Deliver Malware

Cloud Atlas Exploits Office Vulnerabilities to Execute Malicious Code

China-Aligned Threat Group Uses Windows Group Policy to Deploy Espionage Malware

APT31 sets sights on Russian IT sector

China-Linked APT31 Launches Stealthy Cyberattacks on Russian IT Using Cloud Services

China’s APT31 linked to hacks on Russian tech firms

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Yandex Cloud CyberSecurity News & History

Yandex Cloud Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Yandex Cloud

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Yandex Cloud vs IT Services and IT Consulting Industry Avg (This Year)

Incident History - Yandex Cloud (X = Date, Y = Severity)

Yandex Cloud Subsidiaries

Yandex Cloud

Yandex Cloud Similar Companies

Oracle

Infosys

GFT Technologies

Expleo Group

Carelon Global Solutions India

Reply

TIVIT

EPAM Systems

Akkodis

Yandex Cloud CyberSecurity News

Malicious NuGet Packages Stole ASP.NET Data; npm Package Dropped Malware

Yandex.Disk Review 2026 [Is It Safe For File-Backup?]

ScarCruft Abuses Legitimate Cloud Services for C2 and OLE-based Chain to Drop Malware

ScarCruft Exploits Trusted Cloud Services and OLE Documents to Deliver Malware

Cloud Atlas Exploits Office Vulnerabilities to Execute Malicious Code

China-Aligned Threat Group Uses Windows Group Policy to Deploy Espionage Malware

APT31 sets sights on Russian IT sector

China-Linked APT31 Launches Stealthy Cyberattacks on Russian IT Using Cloud Services

China’s APT31 linked to hacks on Russian tech firms

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo