What is the official website of YTL Power International ?

The official website of YTL Power International is https://www.ytlpowerinternational.com/.

What is YTL Power International's cybersecurity risk score?

YTL Power International has an AI-generated cybersecurity risk score of 776 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has YTL Power International experienced?

According to Rankiteo, YTL Power International currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has YTL Power International been affected by any supply chain cyber incidents ?

According to Rankiteo, YTL Power International has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does YTL Power International have SOC 2 Type 1 certification ?

According to Rankiteo, YTL Power International is not certified under SOC 2 Type 1.

Does YTL Power International have SOC 2 Type 2 certification ?

According to Rankiteo, YTL Power International does not hold a SOC 2 Type 2 certification.

Does YTL Power International comply with GDPR ?

According to Rankiteo, YTL Power International is not listed as GDPR compliant.

Does YTL Power International have PCI DSS certification ?

According to Rankiteo, YTL Power International does not currently maintain PCI DSS compliance.

Does YTL Power International comply with HIPAA ?

According to Rankiteo, YTL Power International is not compliant with HIPAA regulations.

Does YTL Power International have ISO 27001 certification ?

According to Rankiteo,YTL Power International is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does YTL Power International operate in ?

YTL Power International operates primarily in the Utilities industry.

How many employees does YTL Power International have ?

YTL Power International employs approximately 99 people worldwide.

Does YTL Power International own any subsidiaries ?

YTL Power International presently has no subsidiaries across any sectors.

How many LinkedIn followers does YTL Power International have ?

YTL Power International's official LinkedIn profile has approximately 11,151 followers.

What is the NAICS classification code for YTL Power International ?

YTL Power International is classified under the NAICS code 22, which corresponds to Utilities.

Does YTL Power International have a Crunchbase profile ?

No, YTL Power International does not have a profile on Crunchbase.

Does YTL Power International have a LinkedIn profile ?

Yes, YTL Power International maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/ytl-power.

How many cybersecurity incidents has YTL Power International experienced ?

As of June 20, 2026, Rankiteo reports that YTL Power International has not experienced any cybersecurity incidents.

How many peer or competitor companies does YTL Power International have ?

YTL Power International has an estimated 4,416 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

YPI

Boost Score +25 with badge (5 left)

776

/1000

Fair

801

/1000

Good

YTL Power International Vendor Cyber Rating & Cyber Score

ytlpowerinternational.com

Add Your Compliance Badge

YTL Power International Berhad [199601034332 (4066684-H)] is an international multi-utility owner and operator, active across key segments of the utilities industry, with operations, investments and projects under development in Malaysia, Singapore, the United Kingdom, Indonesia, Jordan and the Netherlands. Our key business segments are power generation, water and sewerage, telecommunications, digital technologies and investment holding activities. As of 28 Feb 2025, our total assets stands at RM66.7 billion (approximately USD15 billion).

YPI A.I CyberSecurity Scoring

Scoring History

YPI

YTL Power International CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

YPI Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for YPI

Incidents vs Utilities Industry Avg (This Year)

No incidents recorded for YTL Power International in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for YTL Power International in 2026.

Incident Types YPI vs Utilities Industry Avg (This Year)

No incidents recorded for YTL Power International in 2026.

Incident History - YPI (X = Date, Y = Severity)

Loading…

SUBSIDIARY

YTL Power International Subsidiaries

Parent Company

YPI

Utilities

Website: https://www.ytlpowerinternational.com/

Company Size: 99

No subsidiary data available for this company.

Loading…

YTL Power International Similar Companies

Dominion Energy

cb dominionenergy.com

Dominion Energy (NYSE: D), headquartered in Richmond, Va., provides regulated electricity service to 3.6 million homes and businesses in Virginia, North Carolina, and South Carolina, and regulated natural gas service to 500,000 customers in South Carolina. The company is one of the nation’s leading developers and operators of regulated offshore wind and solar power and the largest producer of carbon-free electricity in New England. The company’s mission is to provide the reliable, affordable, and increasingly clean energy that powers its customers every day. Please visit DominionEnergy.com to learn more.

Eskom Holdings SOC Ltd

cb eskom.co.za

Company profile Eskom Holdings generates, transports and distributes approximately 95% of South Africa’s electricity – making up 60% of the total electricity consumed on the African continent. Eskom is the world’s eleventh-largest power utility in terms of generating capacity, ranks ninth in terms of sales, and boasts the world's largest dry-cooling power station. Eskom Holdings’ Enterprises Division designs, builds and refurbishes Eskom’s assets, and acts as a catalyst for project development for the group. Eskom Enterprises’ main focus is to support Eskom Holdings and be the custodian of non-regulated businesses and offer strategic and commercial lifecycle services to the line divisions.

K-Electric

cb ke.com.pk

KE (formerly Karachi Electric Supply Company) is the only vertically integrated power utility in Pakistan that generates, transmits and distributes electricity to industrial, commercial, agricultural and residential consumers of Karachi (and its outskirts), a metropolis of 20 million people - Pakistan’s largest city. K-Electric (KE) is a public listed company incorporated in Pakistan in 1913 as KESC. Privatized in 2005 KE is the only vertically integrated utility in Pakistan supplying electricity within a 6500 km square territory including Karachi and its adjoining areas. The majority shares (66.4%) of the company are listed in the PSX owned by KES Power, a consortium of investors including Aljomaih Power Limited of Saudi Arabia, National Industries Group (Holding), Kuwait, and the Infrastructure and Growth Capital Fund (IGCF). The Government of Pakistan is also a minority shareholder (24.36%) in the company. KE is one of the county’s largest employers: with a workforce of around 11,000 employees. It is one of the only 12 companies in Pakistan’s industrial sector that have been included in the esteemed list of ‘Approved, Training Employer' by the ICAEW and is also the recipient of the Platinum Employer Status by the ACCA. KE secured a level ‘A’ rating from the Global Reporting Initiative (GRI) for its Integrated Sustainability Report for the year 2012. This makes K-Electric the first power utility in Pakistan to achieve the level ‘A’ rating for an integrated report. Visit our official Facebook and Twitter handles for 24/7 support.

Enel Group

cb enel.com

We are a multinational company changing the face of energy, one of the world’s leading integrated utilities. As the largest private player in producing clean energy with renewable sources we have more than 92 GW of total capacity, including around 67 GW of renewables. Distributing electricity through a network of 1.9 million kilometers to 69 million end users, being the first private network operator globally, and proudly bringing energy to approximately 54 million homes and businesses. People are the heart of our energy: our Group is made up of more than 60,000 people operating in 28 countries and our work is based on our values of Trust, Innovation, Proactivity, Flexibility and Respect. Diversity and inclusion play a key role for us, leading to our being recognized in all three of the most prestigious indices and rankings that assess corporate performance on gender diversity at the workplace and beyond: the Refinitiv Diversity Inclusion Index, the Bloomberg Gender Equality Index, and the Equileap Gender Equality Global Report & Ranking. Let’s shape the energy of the future together.

Hitachi Energy

cb hitachienergy.com

Hitachi Energy is a global technology leader in electrification, powering a sustainable energy future with innovative power grid technologies with digital at the core. Over three billion people depend on our technologies to power their daily lives. With over a century in pioneering mission-critical technologies like high-voltage, transformers, automation, and power electronics, we are addressing the most urgent energy challenge of our time – balancing soaring electricity demand, while decarbonizing the power system. With an unparalleled installed base in over 140 countries, we co-create and build long-term partnerships across the utility, industry, transportation, data centers, and infrastructure sectors. Headquartered in Switzerland, we employ over 50,000 people in 60 countries and generate revenues of around $16 billion USD.

Dubai Electricity & Water Authority - DEWA

dewa.gov.ae

Dubai Electricity and Water Authority (DEWA), established on 1 January 1992, stands at the forefront of sustainable energy and water management. With a dedicated workforce of over 11,000 employees, we ensure reliable services across the entire chain of electricity and water production, transmission, and distribution. Aligned with Dubai’s 8 Guiding Principles and the 50-Year Charter, DEWA supports the UAE’s vision by delivering globally leading services and innovative energy and potable water solutions. Our purpose is to provide sustainable, efficient, and reliable power and water services, along with related innovative smart solutions, towards a Net-Zero future. Our commitment to excellence and innovation enriches lives and ensures the happiness of our stakeholders as we strive for a sustainable Net-Zero carbon future by 2050. Join DEWA in pioneering innovation and achieving excellence for a sustainable future.

ACCIONA

cb acciona.com

ACCIONA champions a different way of doing business: Business as Unusual, delivering benefits far beyond the corporate realm. Driven by the ambition to leave a positive legacy for society and design a better planet, we lead in developing solutions in renewable energy, sustainable water management, and sustainable infrastructure. We cover the entire value chain, from design and construction to operation and maintenance. With a presence in over 40 countries, we conduct our business with a commitment to positively contribute to the economic and social development of the communities where we operate. #ACCIONAteam #BusinessAsUnusual

Saudi Electricity Company

se.com.sa

The Saudi Electricity Company was established on the 5th of April in the year 2000, incorporated in accordance with Council of Ministers Mandate No. 169 dated November 30th, 1998, the Saudi Electricity Company was born out of the merger of smaller regional power company in the central, eastern, western and southern regions, as well as 10 small companies in the north of the Kingdom run by what was formerly known as the General Electricity Company. Vision To provide world-class energy services to our nation and our customers. Mission To empower the nation power the world.

Southern California Edison (SCE)

cb sce.com

As one of the nation’s largest electric utilities, we’re bringing more clean and renewable sources of energy to Southern California. From energy storage to transportation electrification, our employees are working on innovative projects that will help cut emissions and greenhouse gases to provide cleaner air for everyone. We have diverse teams, made up of inventors, doers and problem solvers. The people here at SCE don't just keep the lights on. The mission is so much bigger. We are fueling the kind of innovation that is changing an entire industry, and quite possibly the planet. Follow us on LinkedIn and visit www.edisoncareers.com to learn more about who we are and how we’re working together to create a better tomorrow.

Loading…

NEWS

YTL Power International CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

November 09, 2025 08:00 AM

Public companies account for 52% of YTL Power International Berhad's (KLSE:YTLPOWR) ownership, while institutions account for 19%

YTL Power International Berhad's significant public companies ownership suggests that the key decisions are influenced by shareholders from...

Read Article

November 05, 2025 08:00 AM

The Asian Billionaires Riding The Data Center Boom

The buildout of AI infrastructure in the Asia-Pacific is in high gear. Masayoshi Son and Mukesh Ambani are among the region's wealthiest...

Read Article

November 03, 2025 08:00 AM

Trading ideas: CIMB, YTK Power, Supermax, Rexit, Bina Puri, SCIB, Enproserve, Parkson, L&P, Mega Fortris, Digistar, NexG, Careplus, Nova MSC, Country Heights, Unisem, Frontken

KUALA LUMPUR: Here is a recap of the announcements that made headlines in Corporate Malaysia.

Read Article

November 01, 2025 07:00 AM

Malaysia backs AI adoption but stresses ethical, environmental safeguards

Prime Minister Anwar Ibrahim highlights the nation's push for AI-driven growth, stressing that technology must serve humanity and...

Read Article

October 20, 2025 07:00 AM

YTL Power International Berhad (KLSE:YTLPOWR) Delivered A Better ROE Than Its Industry

One of the best investments we can make is in our own knowledge and skill set. With that in mind, this article will work through how we can...

Read Article

October 15, 2025 07:00 AM

Stock Today: YTL Power Dips Slightly Amid Steady Trading

YTL Power International Bhd closed at RM4.060 today, down RM0.010 or 0.25% from its previous close, as of 4.15 pm. The stock, listed on the...

Read Article

September 04, 2025 07:00 AM

Government Exit Paves Way for Private-Led 5G in Malaysia

Malaysia's 5G rollout is entering a new chapter as CelcomDigi, Maxis, and YTL Power International prepare to take full ownership of Digital...

Read Article

August 18, 2025 07:00 AM

CelcomDigi, Maxis and YTL invest another US$82.8m in DNB

CelcomDigi, Maxis and YTL Power International have injected an additional MYR350 million (US$82.8 million) into 5G wholesale network Digital...

Read Article

August 02, 2025 07:00 AM

NVIDIA (NVDA) Strikes $2.36B AI Data Center Deal With Malaysia’s YTL Power

NVIDIA Corporation (NASDAQ:NVDA) ranks among the best stocks to buy for the next 6 months. On July 29, NVIDIA Corporation (NASDAQ:NVDA) and...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-56082

SUMMARY

Capgo (Cap-go/capgo) before 12.128.2 contains an improper access control vulnerability in the SECURITY DEFINER PostgREST RPC function public.record_build_time, which is granted to the anon role and callable with only the public Supabase publishable (sb_publishable_*) anon key. An unauthenticated attacker can insert rows into public.build_logs for arbitrary organizations and, because the function uses ON CONFLICT (build_id, org_id) DO UPDATE, can overwrite existing usage/billing records by reusing the same build_id for a target org. This enables cross-tenant tampering of billing build logs and financial-impact denial of service by inflating billable build time.

Published

Date2026-06-19

Updated

Date2026-06-19

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

3.9

REFERENCES

CVE-2026-56081

SUMMARY

Cap-go before 12.128.2 contains an authentication logic flaw that lets an attacker register and control an account bound to a victim's email address before that email is verified. By enabling two-factor authentication on the pre-registered account, the attacker gains control over the account claimed under the victim's identity, allowing them to read and modify its state and enforce organization-level policies, while the legitimate user is denied access to the account tied to their own email.

Published

Date2026-06-19

Updated

Date2026-06-19

RISK INFORMATION (Score: 9.1)

cvss3

Base Score: 9.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.2

Exploitability

3.9

REFERENCES

CVE-2026-56080

SUMMARY

Capgo before 12.128.2 contains a flaw in the Enforce Password Policy feature: after a Super Admin enables the policy and successfully changes their password to a compliant one, the backend does not update the password-compliance state. As a result, the backend continues to treat the account as non-compliant and repeatedly forces password-reset prompts, permanently locking the Super Admin out of organization access (organization lockout / denial of service) despite valid authentication.

Published

Date2026-06-19

Updated

Date2026-06-19

RISK INFORMATION (Score: 4.9)

cvss3

Base Score: 4.9

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

1.2

REFERENCES

CVE-2026-56079

SUMMARY

Capgo before 12.128.2 contains a cross-tenant authorization bypass vulnerability in PostgREST endpoints that allows org-scoped read API keys to access other tenants' webhook secrets and delivery logs. Attackers can query the webhooks and webhook_deliveries endpoints to exfiltrate HMAC signing secrets and delivery payloads, enabling forged webhook events against victim organizations.

Published

Date2026-06-19

Updated

Date2026-06-19

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

2.8

REFERENCES

CVE-2026-56073

SUMMARY

Cap-go before 12.128.2 contains an authentication bypass vulnerability in OTP verification that allows attackers to bypass email verification by modifying server responses. Attackers can intercept OTP verification requests and manipulate HTTP responses to falsely mark verification successful, enabling unauthorized 2FA enablement and account takeover.

Published

Date2026-06-19

Updated

Date2026-06-19

RISK INFORMATION (Score: 9.4)

cvss3

Base Score: 9.4

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.5

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…