What is the official website of HNA Holding 海航实业 ?

The official website of HNA Holding 海航实业 is http://www.hnaholding.net/.

What is HNA Holding 海航实业's cybersecurity risk score?

HNA Holding 海航实业 has an AI-generated cybersecurity risk score of 750 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has HNA Holding 海航实业 experienced?

According to Rankiteo, HNA Holding 海航实业 currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has HNA Holding 海航实业 been affected by any supply chain cyber incidents ?

According to Rankiteo, HNA Holding 海航实业 has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does HNA Holding 海航实业 have SOC 2 Type 1 certification ?

According to Rankiteo, HNA Holding 海航实业 is not certified under SOC 2 Type 1.

Does HNA Holding 海航实业 have SOC 2 Type 2 certification ?

According to Rankiteo, HNA Holding 海航实业 does not hold a SOC 2 Type 2 certification.

Does HNA Holding 海航实业 comply with GDPR ?

According to Rankiteo, HNA Holding 海航实业 is not listed as GDPR compliant.

Does HNA Holding 海航实业 have PCI DSS certification ?

According to Rankiteo, HNA Holding 海航实业 does not currently maintain PCI DSS compliance.

Does HNA Holding 海航实业 comply with HIPAA ?

According to Rankiteo, HNA Holding 海航实业 is not compliant with HIPAA regulations.

Does HNA Holding 海航实业 have ISO 27001 certification ?

According to Rankiteo,HNA Holding 海航实业 is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does HNA Holding 海航实业 operate in ?

HNA Holding 海航实业 operates primarily in the Investment Management industry.

How many employees does HNA Holding 海航实业 have ?

HNA Holding 海航实业 employs approximately 569 people worldwide.

Does HNA Holding 海航实业 own any subsidiaries ?

HNA Holding 海航实业 presently has no subsidiaries across any sectors.

How many LinkedIn followers does HNA Holding 海航实业 have ?

HNA Holding 海航实业's official LinkedIn profile has approximately 5,679 followers.

What is the NAICS classification code for HNA Holding 海航实业 ?

HNA Holding 海航实业 is classified under the NAICS code 5239, which corresponds to Other Financial Investment Activities.

Does HNA Holding 海航实业 have a Crunchbase profile ?

No, HNA Holding 海航实业 does not have a profile on Crunchbase.

Does HNA Holding 海航实业 have a LinkedIn profile ?

Yes, HNA Holding 海航实业 maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/海航实业集团有限公司.

How many cybersecurity incidents has HNA Holding 海航实业 experienced ?

As of June 29, 2026, Rankiteo reports that HNA Holding 海航实业 has not experienced any cybersecurity incidents.

How many peer or competitor companies does HNA Holding 海航实业 have ?

HNA Holding 海航实业 has an estimated 5,363 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Boost Score +25 with badge (5 left)

750

/1000

Fair

775

/1000

Fair

HNA Holding 海航实业 Vendor Cyber Rating & Cyber Score

http://www.hnaholding.net/

Add Your Compliance Badge

HNA Holding is an international group dedicated to the real estate financial industry. It has developed steadily during the past 20 years of HNA Group’s rapid growth. As a leader in promoting the construction of the Hainan International Tourism Island in early 2010. HNA Holding comprehensively integrated HNA Group’s investment in real estate and infrastructure to develop resources and actively conduct businesses including reclamation, CBD construction, real estate development and commercial operations. Due to the diligent efforts of our colleagues, HNA Holding has implemented an admirable business plan, characterized by the coordinated development of multiple industries. This expansion of its businesses into numerous industries includes

HH A.I CyberSecurity Scoring

Scoring History

HNA Holding 海航实业 CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

HH Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for HH

Incidents vs Investment Management Industry Avg (This Year)

No incidents recorded for HNA Holding 海航实业 in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for HNA Holding 海航实业 in 2026.

Incident Types HH vs Investment Management Industry Avg (This Year)

No incidents recorded for HNA Holding 海航实业 in 2026.

Incident History - HH (X = Date, Y = Severity)

Loading…

SUBSIDIARY

HNA Holding 海航实业 Subsidiaries

Parent Company

HH

Investment Management

Website: http://www.hnaholding.net/

Company Size: 569

No subsidiary data available for this company.

Loading…

HNA Holding 海航实业 Similar Companies

Essar

essar.com

Essar, with an entrepreneurial track record spanning 50+ years, specialises in investing and developing assets to create value in core sectors such as Energy, Infrastructure, Metals & Mining, and Technology & Retail. With a presence in eight countries, Essar generates revenues of US$15 billion and provides employment for over 7,000 people. Over the past five years, Essar has strategically rebalanced its portfolio by monetising some world-class assets. Essar is now positioned to transition its existing assets to a greener regime and invest in businesses driving the transformation of sector landscapes from carbon-centric to a clean energy ecosystem, both nationally and globally. The Group is developing sustainable assets and industry ecosystems, with a particular focus on hydrogen, green mobility, and green steel. Essar Foundation, the CSR arm of Essar, has a rich 50-year heritage of service across India, focusing on areas such as health, education, livelihood, women empowerment, sports, environment, and infrastructure.

Sonae

sonae.pt

Sonae exists to create a lasting positive impact on businesses, people, communities and on the planet. Managing a diverse portfolio of businesses in retail, financial services, technology, investments, real estate and telecommunications, Sonae makes the most of its expertise and pushes itself to create the future we all want and need. Creating today a better tomorrow, for all.

Sabanci Holding

sabanci.com

Sabancı Holding is one of Turkey’s leading conglomerate, engaged in a wide variety of business activities through its subsidiaries and affiliates, mainly in the banking, financial services, energy, industrials, building materials and retail sectors. Our Group companies most of which are leaders in their respective sectors. As Sabancı Group, we position ourselves in new economy, with global partnerships, employment for 60 thousand, and reaching more than 40 million people on 5 continents. We invest in energy & climate, material and digital technologies, through an agile global footprint to design a sustainable future with a goal of achieving 'Net Zero' by 2050. We stride confidently towards the future through Sabancı of New Generation culture and our purpose driven, stakeholder oriented, agile and diverse organization. We are committed to ensuring equal rights and opportunities to foster a positive and an inclusive work environment and to contribute to the socio economic development of the community. With tens of thousands of talents, stakeholders and investments in multiple businesses worldwide, what connects us is our purpose: We unite Turkey and the World for a sustainable life with leading enterprises.

Ackermans & van Haaren

avh.be

Ackermans & van Haaren is a diversified group active in 4 core sectors: Marine Engineering & Contracting (DEME, one of the largest dredging companies in the world - CFE, a construction group with headquarters in Belgium), Private Banking (Delen Private Bank, one of the largest independent private asset managers in Belgium, and asset manager JM Finn in the UK - Bank J.Van Breda & C°, niche bank for entrepreneurs and liberal professions in Belgium), Real Estate & Senior Care (Nextensa, a Euronext-listed land and real estate developer focused on Belgium and Luxembourg) and Energy & Resources (SIPEF, an agro-industrial group in tropical agriculture). In 2023, through its share in its participations, the AvH group represented a turnover of 6.5 billion euros and employed 21,887 people. The group concentrates on a limited number of strategic participations with significant potential for growth. The AvH share is part of the BEL20 index, the BEL-ESG index of Euronext Brussels and the European DJ Stoxx 600.

Odebrecht

novonor.com.br

Founded in 1944, Odebrecht is a Brazilian group with diverse businesses and world-class standards of quality. Its Members, guided by the Group’s own philosophy, the Odebrecht Entrepreneurial Technology (TEO), provide services and manufacture products for clients on five continents. As part of their entrepreneurial responsibility while serving clients and local communities, they contribute to the development of economically prosperous, socially just, environmentally sustainable, politically inclusive and culturally rich societies and countries.

Loading…

NEWS

HNA Holding 海航实业 CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-13512

SUMMARY

A vulnerability was identified in Databend up to 1.2.881 on HTTP. This affects the function ClientSessionManager::state_key of the file src/query/service/src/servers/http/v1/session/client_session_manager.rs of the component Tenant Handler. The manipulation leads to authorization bypass. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The pull request to fix this issue awaits acceptance.

Published

Date2026-06-28

Updated

Date2026-06-28

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-13511

SUMMARY

A vulnerability was determined in VoltAgent up to 2.1.17. Affected by this issue is the function handleGetMemoryConversation of the file packages/server-core/src/handlers/memory.handlers.ts of the component Memory REST API. Executing a manipulation of the argument conversationId can lead to improper authorization. The attack may be performed from remote. This attack is characterized by high complexity. The exploitation is known to be difficult. The exploit has been publicly disclosed and may be utilized. The pull request to fix this issue awaits acceptance.

Published

Date2026-06-28

Updated

Date2026-06-28

RISK INFORMATION (Score: 3.1)

cvss2

Base Score: 2.1

Complexity: HIGH

AV:N/AC:H/Au:S/C:P/I:N/A:N

cvss3

Base Score: 3.1

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

cvss4

Base Score: 1.3

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

1.6

REFERENCES

CVE-2026-13510

SUMMARY

A vulnerability was found in SimStudioAI sim up to 0.6.92. Affected by this vulnerability is an unknown functionality in the library apps/sim/lib/core/security/deployment.ts of the component Password Protection Handler. Performing a manipulation results in use of weak hash. The attack is possible to be carried out remotely. The attack's complexity is rated as high. The exploitation appears to be difficult. The exploit has been made public and could be used. The pull request to fix this issue awaits acceptance.

Published

Date2026-06-28

Updated

Date2026-06-28

RISK INFORMATION (Score: 3.7)

cvss2

Base Score: 2.6

Complexity: HIGH

AV:N/AC:H/Au:N/C:P/I:N/A:N

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

cvss4

Base Score: 2.9

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.2

REFERENCES

CVE-2026-13509

SUMMARY

A vulnerability has been found in RAGapp up to 0.1.5. Affected is the function FileHandler.upload_file/FileHandler.remove_file of the file src/ragapp/backend/controllers/files.py of the component Knowledge File Handler. Such manipulation leads to path traversal. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The pull request to fix this issue awaits acceptance.

Published

Date2026-06-28

Updated

Date2026-06-28

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-13508

SUMMARY

A flaw has been found in khoj-ai khoj up to 2.0.0-beta.28. This impacts an unknown function of the file src/khoj/routers/api_chat.py of the component Conversation Sharing Handler. This manipulation of the argument conversation.agent causes incorrect authorization. Remote exploitation of the attack is possible. The exploit has been published and may be used. The pull request to fix this issue awaits acceptance.

Published

Date2026-06-28

Updated

Date2026-06-28

RISK INFORMATION (Score: 5.5)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.1

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…