Company Details
ust-global
36,536
1,554,891
5415
ust.com
0
UST_6143653
In-progress

UST Company CyberSecurity Posture
ust.comUST is a global digital transformation solutions provider. For more than 20 years, UST has worked side by side with the world’s best companies to make a real impact through transformation. Powered by technology, inspired by people and led by purpose, UST partners with their clients from design to operation. With deep domain expertise and a future-proof philosophy, UST embeds innovation and agility into their clients’ organizations. With over 30K+ employees in 30+ countries, UST builds for boundless impact—touching billions of lives in the process.
Company Details
ust-global
36,536
1,554,891
5415
ust.com
0
UST_6143653
In-progress
Between 800 and 849

UST Global Score (TPRM)XXXX



No incidents recorded for UST in 2025.
No incidents recorded for UST in 2025.
No incidents recorded for UST in 2025.
UST cyber incidents detection timeline including parent company and subsidiaries

UST is a global digital transformation solutions provider. For more than 20 years, UST has worked side by side with the world’s best companies to make a real impact through transformation. Powered by technology, inspired by people and led by purpose, UST partners with their clients from design to operation. With deep domain expertise and a future-proof philosophy, UST embeds innovation and agility into their clients’ organizations. With over 30K+ employees in 30+ countries, UST builds for boundless impact—touching billions of lives in the process.


Tech Mahindra offers technology consulting and digital solutions to global enterprises across industries, enabling transformative scale at unparalleled speed. With 150,000+ professionals across 90+ countries helping 1100+ clients, TechM provides a full spectrum of services including consulting, info

Akkodis is a global digital engineering company and Smart Industry leader. We enable clients to advance in their digital transformation with Talent, Academy, Consulting, and Solutions services. Our 50,000 experts combine best-in-class technologies, R&D, and deep sector know-how for purposeful innova

Infosys BPM Ltd., the business process management subsidiary of Infosys Ltd. (NYSE: INFY), was set up in April 2002. Infosys BPM focuses on integrated end-to-end outsourcing and delivers transformational benefits to its clients through reduced costs, ongoing productivity improvements, and process re
A leading applied technology services company, we innovate to deliver service excellence and successful outcomes across sales, delivery and development. With our strategy to be agile, nimble and customer-centric, we anticipate the future of applied technology and predict tomorrow’s trends to keep ou

At Orange Business, our ambition is to become the leading European Network and Digital Integrator by leveraging our proven expertise in next-generation connectivity solutions, the cloud and cybersecurity. Our 30,000 women and men are present in 65 countries, where every voice counts. Together, we

Part of the Capgemini Group, Sogeti makes business value through technology for organizations that need to implement innovation at speed and want a local partner with global scale. With a hands-on culture and close proximity to its clients, Sogeti implements solutions that will help organizations wo

Nagarro helps future-proof your business through a forward-thinking, fluidic, and CARING mindset. We excel at digital engineering and help our clients become human-centric, digital-first organizations, augmenting their ability to be responsive, efficient, intimate, creative, and sustainable. Today,
Bring teams together, reimagine workspaces, engage new audiences, and delight your customers –– all on the Zoom platform you know and love. 💙 Zoomies help people stay connected so they can get more done together. We set out on a mission to make video communications frictionless and secure by buildi
At Globant, we create the digitally-native products that people love. We bridge the gap between businesses and consumers through technology and creativity, leveraging our experience as an AI powerhouse. We dare to digitally transform organizations and strive to delight their customers. - We have mo
.png)
University of St. Thomas data breach exposed student information, reports on misconduct complaints, expunged criminal records and...
SRM University wins UST's GenCyS 2025 CTF, a national cybersecurity competition with 1000+ participants, highlighting future-ready...
Thiruvananthapuram, Kerala, India – Business Wire India • Over 1000 participants registered nationwide, with the top 50 teams competing in...
Over 1000 students and professionals registered; winning team secures ₹1.5 lakh prize and conditional job offer at UST.
UST hosted the GenCyS 2025 CTF Finale in Thiruvananthapuram, where 1000+ participants tackled real-world cybersecurity challenges.
Thiruvananthapuram (Kerala) [India], September 16: UST, a leading AI and technology transformation solutions company, successfully concluded...
The top 50 teams will move on to the final, a 24-hour in-person competition at UST's Thiruvananthapuram campus. The challenges will focus on...
UST will host a global virtual cybersecurity conference 'GenCyS 2025' on August 23 and 24 to showcase its cyber security capabilities as also advancing AI...
PRNewswire/ -- UST, a leading digital transformation solutions company, has announced its upcoming global virtual cybersecurity conference,...

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of UST is http://www.ust.com.
According to Rankiteo, UST’s AI-generated cybersecurity score is 807, reflecting their Good security posture.
According to Rankiteo, UST currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, UST is not certified under SOC 2 Type 1.
According to Rankiteo, UST does not hold a SOC 2 Type 2 certification.
According to Rankiteo, UST is not listed as GDPR compliant.
According to Rankiteo, UST does not currently maintain PCI DSS compliance.
According to Rankiteo, UST is not compliant with HIPAA regulations.
According to Rankiteo,UST is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
UST operates primarily in the IT Services and IT Consulting industry.
UST employs approximately 36,536 people worldwide.
UST presently has no subsidiaries across any sectors.
UST’s official LinkedIn profile has approximately 1,554,891 followers.
UST is classified under the NAICS code 5415, which corresponds to Computer Systems Design and Related Services.
No, UST does not have a profile on Crunchbase.
Yes, UST maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/ust-global.
As of December 11, 2025, Rankiteo reports that UST has not experienced any cybersecurity incidents.
UST has an estimated 37,490 peer or competitor companies worldwide.
Total Incidents: According to Rankiteo, UST has faced 0 incidents in the past.
Incident Types: The types of cybersecurity incidents that have occurred include .
.png)
FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions prior to 16.0.96 and 17.0.1 through 17.0.9 have a weak default password. By default, this is a 6 digit numeric value which can be brute forced. (This is the app_password parameter). Depending on local configuration, this password could be the extension, voicemail, user manager, DPMA or EPM phone admin password. This issue is fixed in versions 16.0.96 and 17.0.10.
Neuron is a PHP framework for creating and orchestrating AI Agents. In versions 2.8.11 and below, the MySQLWriteTool executes arbitrary SQL provided by the caller using PDO::prepare() + execute() without semantic restrictions. This is consistent with the name (“write tool”), but in an LLM/agent context it becomes a high-risk capability: prompt injection or indirect prompt manipulation can cause execution of destructive queries such as DROP TABLE, TRUNCATE, DELETE, ALTER, or privilege-related statements (subject to DB permissions). Deployments that expose an agent with MySQLWriteTool enabled to untrusted input and/or run the tool with a DB user that has broad privileges are impacted. This issue is fixed in version 2.8.12.
Neuron is a PHP framework for creating and orchestrating AI Agents. Versions 2.8.11 and below use MySQLSelectTool, which is vulnerable to Read-Only Bypass. MySQLSelectTool is intended to be a read-only SQL tool (e.g., for LLM agent querying, however, validation based on the first keyword (e.g., SELECT) and a forbidden-keyword list does not block file-writing constructs such as INTO OUTFILE / INTO DUMPFILE. As a result, an attacker who can influence the tool input (e.g., via prompt injection through a public agent endpoint) may write arbitrary files to the DB server if the MySQL/MariaDB account has the FILE privilege and server configuration permits writes to a useful location (e.g., a web-accessible directory). This issue is fixed in version 2.8.12.
Okta Java Management SDK facilitates interactions with the Okta management API. In versions 11.0.0 through 20.0.0, race conditions may arise from concurrent requests using the ApiClient class. This could cause a status code or response header from one request’s response to influence another request’s response. This issue is fixed in version 20.0.1.
The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. When using versions 4.11.0 through 4.11.2 and 4.12.0, simultaneous requests on the same client may result in improper lookups in the TokenRequestCache for the request results. This issue is fixed in versions 4.11.2 and 4.12.1.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.