What is the official website of Yandex Cloud ?

The official website of Yandex Cloud is https://cloud.yandex.com/en.

What is Yandex Cloud's cybersecurity risk score?

Yandex Cloud has an AI-generated cybersecurity risk score of 754 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Yandex Cloud experienced?

According to Rankiteo, Yandex Cloud currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Yandex Cloud been affected by any supply chain cyber incidents ?

According to Rankiteo, Yandex Cloud has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Yandex Cloud have SOC 2 Type 1 certification ?

According to Rankiteo, Yandex Cloud is not certified under SOC 2 Type 1.

Does Yandex Cloud have SOC 2 Type 2 certification ?

According to Rankiteo, Yandex Cloud does not hold a SOC 2 Type 2 certification.

Does Yandex Cloud comply with GDPR ?

According to Rankiteo, Yandex Cloud is not listed as GDPR compliant.

Does Yandex Cloud have PCI DSS certification ?

According to Rankiteo, Yandex Cloud does not currently maintain PCI DSS compliance.

Does Yandex Cloud comply with HIPAA ?

According to Rankiteo, Yandex Cloud is not compliant with HIPAA regulations.

Does Yandex Cloud have ISO 27001 certification ?

According to Rankiteo,Yandex Cloud is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Yandex Cloud operate in ?

Yandex Cloud operates primarily in the IT Services and IT Consulting industry.

How many employees does Yandex Cloud have ?

Yandex Cloud employs approximately 514 people worldwide.

Does Yandex Cloud own any subsidiaries ?

Yandex Cloud presently has no subsidiaries across any sectors.

How many LinkedIn followers does Yandex Cloud have ?

Yandex Cloud's official LinkedIn profile has approximately 8,937 followers.

What is the NAICS classification code for Yandex Cloud ?

Yandex Cloud is classified under the NAICS code 5415, which corresponds to Computer Systems Design and Related Services.

Does Yandex Cloud have a Crunchbase profile ?

No, Yandex Cloud does not have a profile on Crunchbase.

Does Yandex Cloud have a LinkedIn profile ?

Yes, Yandex Cloud maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/yandexcloud.

How many cybersecurity incidents has Yandex Cloud experienced ?

As of August 17, 2026, Rankiteo reports that Yandex Cloud has experienced 3 cybersecurity incidents.

How many peer or competitor companies does Yandex Cloud have ?

Yandex Cloud has an estimated 41,351 peer or competitor companies worldwide.

What types of cybersecurity incidents has Yandex Cloud faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Data Leak and Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Yandex Cloud

Boost Score +25 with badge (5 left)

754

/1000

Fair

779

/1000

Fair

Yandex Cloud Vendor Cyber Rating & Cyber Score

yandex.com

Add Your Compliance Badge

Yandex Cloud is a public cloud platform where companies can create and develop projects using Yandex's scalable computing power, advanced technologies, and infrastructure.

Yandex Cloud A.I CyberSecurity Scoring

Scoring History

Yandex Cloud

Yandex Cloud CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Yandex Cloud

Breach

100

8/2024

YAN000081124

Yandex Cloud

Breach

01/2023

YAN224381023

Yandex Cloud

Data Leak

2/2022

YAN21827123

Loading…

A.I.

Yandex Cloud Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Yandex Cloud

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for Yandex Cloud in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Yandex Cloud in 2026.

Incident Types Yandex Cloud vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for Yandex Cloud in 2026.

Incident History - Yandex Cloud (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Yandex Cloud Subsidiaries

Yandex Cloud

IT Services and IT Consulting

Website: https://cloud.yandex.com/en

Company Size: 201-500 employees

YandexTechnology, Information and Internet

Yandex.MetricaTechnology, Information and Internet

Yandex 360IT Services and IT Consulting

AppMetricaТехнологии, информационные средства и Интернет

Yandex.TaxiTechnology, Information and Internet

Loading…

Yandex Cloud Similar Companies

TransUnion

transunion.com

TransUnion is a global information and insights company that makes trust possible in the modern economy. We do this by providing an actionable picture of each person so they can be reliably represented in the marketplace. As a result, businesses and consumers can transact with confidence and achieve great things. This picture is grounded in our legacy as a credit reporting agency which enables us to tap into both credit and public record data; our data fusion methodology that helps us link, match and tap into the awesome combined power of that data; and our knowledgeable and passionate team, who stewards the information with expertise, and in accordance with local legislation around the world. A leading presence in more than 30 countries across five continents, TransUnion provides solutions that help create economic opportunity, great experiences and personal empowerment for hundreds of millions of people. We call this Information for Good® — it’s our purpose, and what drives us every day. Get Support / Contact Us Customer Support: https://transu.co/60024D64I Business Support: https://transu.co/60044D67G

Expleo Group

expleo.com

Expleo is a global engineering, technology and consulting service provider that partners with leading organisations to guide them through their business transformation, helping them achieve operational excellence and future-proof their businesses. Expleo benefits from more than 50 years of experience developing complex products, optimising manufacturing processes, and ensuring the quality of information systems. Leveraging its deep sector knowledge and wide-ranging expertise in fields including AI engineering, digitalisation, hyper-automation, cybersecurity and data science, the group’s mission is to fast-track innovation through each step of the value chain. As a responsible and diverse organisation, Expleo is committed to doing business with integrity and working towards a more sustainable and secure society. Expleo boasts an extensive global footprint, powered by 18,000 highly-skilled experts delivering value in 29 countries and generating more than €1.4 billion in revenue.

CenturyLink

centurylink.com

CenturyLink (NYSE: CTL) is a technology leader delivering hybrid networking, cloud connectivity, and security solutions to customers around the world. Through its extensive global fiber network, CenturyLink provides secure and reliable services to meet the growing digital demands of businesses and consumers. CenturyLink strives to be the trusted connection to the networked world and is focused on delivering technology that enhances the customer experience. Learn more at http://news.centurylink.com/.

NTT DATA Business Solutions

nttdata-solutions.com

We understand the business of our clients and know what it takes to transform it into the future. At NTT DATA Business Solutions, we drive innovation – from advisory and implementation to managed services and beyond. With SAP at our core and a powerful ecosystem of partners, we continuously improve solutions and technology to make them work for companies – and for their people. Aiming to transform, grow and become more successful? We provide you with more than in-depth expertise for SAP solutions: As your passionate partner, we connect your business opportunities with the latest technologies – and offer you a unique approach to get the job done as smoothly as possible. Our close ties to our partners give you access to innovative solutions and developments. Being part of the global NTT DATA group enables us to master any scope of project. With operations in more than 30 countries, we have enabled thousands of companies become more efficient and effective during the last three decades. Our more than 16,000 experts around the world will also accompany you on your journey toward a truly intelligent enterprise – wherever you want to start!

Amazon Web Services (AWS)

cb amazon.com

Launched in 2006, Amazon Web Services (AWS) began exposing key infrastructure services to businesses in the form of web services -- now widely known as cloud computing. The ultimate benefit of cloud computing, and AWS, is the ability to leverage a new business model and turn capital infrastructure expenses into variable costs. Businesses no longer need to plan and procure servers and other IT resources weeks or months in advance. Using AWS, businesses can take advantage of Amazon's expertise and economies of scale to access resources when their business needs them, delivering results faster and at a lower cost. Today, Amazon Web Services provides a highly reliable, scalable, low-cost infrastructure platform in the cloud that powers hundreds of thousands of businesses in 190 countries around the world. With data center locations in the U.S., Europe, Singapore, and Japan, customers across all industries are taking advantage of our low cost, elastic, open and flexible, secure platform.

Hexaware Technologies

hexaware.com

At Hexaware, we're not just a global technology and business process services company; we're a community of 31,600+ Hexawarians dedicated to one singular purpose: creating smiles through the power of great people and technology. With a presence in 58 offices across 28 countries, we empower enterprises worldwide to embark on their digital transformation journey with unparalleled scale and speed. As an employer, we're more than just a workplace. We put our people first, foster diversity and inclusivity, and prioritize their growth through robust learning and development programs. Our culture is a canvas for innovation as we work toward our shared vision of becoming the world’s most loved digital transformation partner. Exciting, isn’t it? Visit www.hexaware.com to join us in embracing the magic of technology, as we passionately advocate for its potential to transform lives today and shape a brighter future. Together, we'll make the digital world a better place.

HCLTech

hcltech.com

HCLTech is a global technology company, home to more than 223,000 people across 60 countries, delivering industry-leading capabilities centered around AI, digital, engineering, cloud and software, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Semiconductor, Telecom and Media, Retail and CPG, Mobility and Public Services. Consolidated revenues as of 12 months ending June 2026 totaled $14.8 billion. To learn how we can supercharge progress for you, visit hcltech.com.

Neobpo

www.neobpo

Somos especializados em integrar tecnologia com inteligência humana, oferecendo soluções digitais que promovem transformação e eficiência operacional. Nosso foco é gerar valor por meio de resultados reais, utilizando inteligência digital para atender às necessidades específicas de cada cliente. Mergulhamos nos desafios de empresas que buscam inovação, modernização e escalabilidade, oferecendo soluções seguras e personalizadas para impulsionar seu crescimento. Adotamos uma abordagem consultiva ao longo de toda a jornada, identificando oportunidades estratégicas desde o primeiro contato, proporcionando soluções sob medida que combinam dados, automação e atendimento dedicado. O impacto que geramos vai além da entrega de resultados. Transformamos a forma como nossos clientes operam, melhorando sua produtividade, segurança e escalabilidade, garantindo um crescimento sustentável e criando valor mensurável para seus negócios.

ASGN Incorporated

asgn.com

ASGN Incorporated (NYSE: ASGN) is a leading provider of IT services and solutions across the commercial and government sectors. ASGN helps corporate enterprises and government organizations develop, implement and operate critical IT and business solutions through its integrated offerings. For more information, please visit asgn.com. *Please note: Our company does not use the Telegram app, Google Hangouts, or communicate using non-corporate email account addresses. For more about what we do and do not ask for in the hiring process, please visit: https://www.asgn.com/fraud-alert

Loading…

NEWS

Yandex Cloud CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 25, 2026 08:00 AM

Malicious NuGet Packages Stole ASP.NET Data; npm Package Dropped Malware

Cybersecurity researchers have discovered four malicious NuGet packages that are designed to target ASP.NET web application developers to...

Read Article

February 18, 2026 08:00 AM

Yandex.Disk Review 2026 [Is It Safe For File-Backup?]

Yandex is a cloud storage service and fully fledged workstation. Read this Yandex.disk review to see if it's on par with the competition.

Read Article

February 09, 2026 08:00 AM

ScarCruft Abuses Legitimate Cloud Services for C2 and OLE-based Chain to Drop Malware

ScarCruft shifted from LNK attacks to OLE-based HWP documents to deploy ROKRAT in memory, using cloud services for C2.

Read Article

February 09, 2026 08:00 AM

ScarCruft Exploits Trusted Cloud Services and OLE Documents to Deliver Malware

The North Korean-backed advanced persistent threat (APT) group known as ScarCruft has significantly evolved its attack techniques.

Read Article

December 19, 2025 08:00 AM

Cloud Atlas Exploits Office Vulnerabilities to Execute Malicious Code

The Cloud Atlas threat group, active since 2014, continues to pose a significant risk to organizations in Eastern Europe and Central Asia...

Read Article

December 18, 2025 08:00 AM

China-Aligned Threat Group Uses Windows Group Policy to Deploy Espionage Malware

ESET reports China-aligned LongNosedGoblin spying on government networks in Southeast Asia & Japan using Group Policy and cloud-based...

Read Article

November 24, 2025 08:00 AM

APT31 sets sights on Russian IT sector

Russian IT firms, particularly those contracted by the government, have been subjected to a stealthy wave of attacks from Chinese...

Read Article

November 22, 2025 08:00 AM

China-Linked APT31 Launches Stealthy Cyberattacks on Russian IT Using Cloud Services

The China-linked advanced persistent threat (APT) group known as APT31 has been attributed to cyber attacks targeting the Russian...

Read Article

November 21, 2025 08:00 AM

China’s APT31 linked to hacks on Russian tech firms

The China-linked hacking group known as APT31 infiltrated Russia's technology sector for years and quietly exfiltrated data from companies...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-19961

SUMMARY

A vulnerability was detected in Edimax EW-7478APC 1.04. Affected is the function formWlSiteSurvey of the file /goform/formWlSiteSurvey. Performing a manipulation of the argument selSSID results in buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Published

Date2026-08-16

Updated

Date2026-08-16

RISK INFORMATION (Score: 9.9)

cvss2

Base Score: 9.0

Complexity: LOW

AV:N/AC:L/Au:S/C:C/I:C/A:C

cvss3

Base Score: 9.9

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

cvss4

Base Score: 8.6

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

3.1

REFERENCES

CVE-2026-19960

SUMMARY

A security vulnerability has been detected in Edimax EW-7478APC 1.04. This impacts the function formWlbasic of the file /goform/formWlbasic. Such manipulation of the argument rootAPmac leads to command injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Published

Date2026-08-16

Updated

Date2026-08-16

RISK INFORMATION (Score: 7.4)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 7.4

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.7

Exploitability

3.1

REFERENCES

CVE-2026-19959

SUMMARY

A weakness has been identified in Edimax EW-7478APC 1.04. This affects the function formWanTcpipSetup of the file /goform/formWanTcpipSetup. This manipulation of the argument pppUserName causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Published

Date2026-08-16

Updated

Date2026-08-16

RISK INFORMATION (Score: 9.9)

cvss2

Base Score: 9.0

Complexity: LOW

AV:N/AC:L/Au:S/C:C/I:C/A:C

cvss3

Base Score: 9.9

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

cvss4

Base Score: 8.6

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

3.1

REFERENCES

CVE-2026-19958

SUMMARY

A security flaw has been discovered in iatsiuk pptr-mcp up to 0.2.7. The impacted element is the function executeCode of the file src/vm-executor.ts of the component execute Tool. The manipulation results in code injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-16

Updated

Date2026-08-16

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-19957

SUMMARY

A vulnerability was identified in graphlit graphlit-mcp-server 1.0.1. This affects the function fetch of the file src/tools.ts of the component ssrf-test Endpoint. Such manipulation of the argument url leads to server-side request forgery. The attack may be launched remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-16

Updated

Date2026-08-16

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…