Comparison Overview

Asteron Life

VS

New York Life Insurance Company

Asteron Life

undefined, undefined, undefined, undefined, AU
Last Update: 2025-03-06 (UTC)

Strong

At Asteron Life weโ€™ve been making a positive difference since 1833 when we wrote the first Australian policy. Itโ€™s driven us on a path to make better products and services year after year โ€“ from introducing tele-claims, driving new commission structures and discounts, to offering notable products like Asteron Life Complete and supporting the ongoing education of advisers with The Sophisticated Adviser program. As a life risk specialist, we are committed to protecting Australians and whatโ€™s dear to them. Thatโ€™s why weโ€™ve continually grown with the times and evolved to support advisers and their clients in times of rapid change. Today weโ€™re proud to be part of the TAL Group, one of Australiaโ€™s leading life insurers for over 140 years. Together with its partners TAL protect over 4 million Australians and their families, helping them look after what matters most. The most important part of its business is claims and in 2017 TAL paid over $1 billion in claims, equivalent to over $19 million every week. By choosing to partner with us, advisers can rely on Asteron Life to deliver positive difference to their clients and themselves so they can do and achieve more. Thereโ€™s more to Asteron Life.

NAICS: 52
NAICS Definition:
Employees: 173
Subsidiaries: 7
12-month incidents
0
Known data breaches
0
Attack type number
0

New York Life Insurance Company

51 Madison Avenue, None, New York, New York, US, 10010
Last Update: 2025-07-25 (UTC)

Strong

Between 800 and 900

For over 175 years, we've been helping people put love into action. As a mutual company we hold ourselves to the highest standards of transparency, objectivity, and integrity. Weโ€™re committed to improving local communities through a culture of giving and volunteerism, supported by our own New York Life Foundation. Join a company that values development, career growth, collaboration, innovation, and diversity & inclusion. Through various resources and programs, you can grow your career while developing personally and professionally. We invite you to bring your talents here, so we can continue the good to help families and businesses โ€œBe Good at Life.โ€ New York Life is an Equal Opportunity Employer M/F/Disability/Veteran/Sexual Orientation/Gender Identity Read our disclaimers: http://nyl.co/socialmedia

NAICS: 52
NAICS Definition: Finance and Insurance
Employees: 40,277
Subsidiaries: 6
12-month incidents
0
Known data breaches
3
Attack type number
2

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/asteron.jpeg
Asteron Life
โ€”
ISO 27001
Not verified
โ€”
SOC 2
Not verified
โ€”
GDPR
No public badge
โ€”
PCI DSS
No public badge
https://images.rankiteo.com/companyimages/newyorklife.jpeg
New York Life Insurance Company
โ€”
ISO 27001
Not verified
โ€”
SOC 2
Not verified
โ€”
GDPR
No public badge
โ€”
PCI DSS
No public badge
Compliance Summary
Asteron Life
100%
Compliance Rate
0/4 Standards Verified
New York Life Insurance Company
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Financial Services Industry Average (This Year)

No incidents recorded for Asteron Life in 2025.

Incidents vs Financial Services Industry Average (This Year)

No incidents recorded for New York Life Insurance Company in 2025.

Incident History โ€” Asteron Life (X = Date, Y = Severity)

Asteron Life cyber incidents detection timeline including parent company and subsidiaries

Incident History โ€” New York Life Insurance Company (X = Date, Y = Severity)

New York Life Insurance Company cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/asteron.jpeg
Asteron Life
Incidents

No Incident

https://images.rankiteo.com/companyimages/newyorklife.jpeg
New York Life Insurance Company
Incidents

Date Detected: 2/2024
Type:Cyber Attack
Attack Vector: Malware
Blog: Blog

Date Detected: 5/2023
Type:Breach
Attack Vector: Unauthorized Access
Blog: Blog

Date Detected: 4/2021
Type:Breach
Attack Vector: Phishing
Blog: Blog

FAQ

Both Asteron Life company and New York Life Insurance Company company demonstrate a comparable AI risk posture, with strong governance and monitoring frameworks in place.

New York Life Insurance Company company has historically faced a number of disclosed cyber incidents, whereas Asteron Life company has not reported any.

In the current year, New York Life Insurance Company company and Asteron Life company have not reported any cyber incidents.

Neither New York Life Insurance Company company nor Asteron Life company has reported experiencing a ransomware attack publicly.

New York Life Insurance Company company has disclosed at least one data breach, while Asteron Life company has not reported such incidents publicly.

New York Life Insurance Company company has reported targeted cyberattacks, while Asteron Life company has not reported such incidents publicly.

Neither Asteron Life company nor New York Life Insurance Company company has reported experiencing or disclosing vulnerabilities publicly.

Asteron Life company has more subsidiaries worldwide compared to New York Life Insurance Company company.

New York Life Insurance Company company employs more people globally than Asteron Life company, reflecting its scale as a Financial Services.

Latest Global CVEs (Not Company-Specific)

Description

A weakness has been identified in bftpd up to 6.2. Impacted is the function expand_groups of the file options.c of the component Configuration File Handler. Executing manipulation can lead to heap-based buffer overflow. It is possible to launch the attack on the local host. Attacks of this nature are highly complex. The exploitability is considered difficult. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.

Risk Information
cvss2
Base: 3.5
Severity: HIGH
AV:L/AC:H/Au:S/C:P/I:P/A:P
cvss3
Base: 4.5
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 2.0
Severity: HIGH
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A security flaw has been discovered in LogicalDOC Community Edition up to 9.2.1. This issue affects some unknown processing of the file /frontend.jsp of the component Add Contact Page. Performing manipulation of the argument First Name/Last Name/Company/Address/Phone/Mobile results in cross site scripting. Remote exploitation of the attack is possible. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way.

Risk Information
cvss2
Base: 4.0
Severity: LOW
AV:N/AC:L/Au:S/C:N/I:P/A:N
cvss3
Base: 3.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
cvss4
Base: 5.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A vulnerability was identified in toeverything AFFiNE up to 0.24.1. This vulnerability affects unknown code of the component Avatar Upload Image Endpoint. Such manipulation leads to cross site scripting. The attack may be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Risk Information
cvss2
Base: 4.0
Severity: LOW
AV:N/AC:L/Au:S/C:N/I:P/A:N
cvss3
Base: 3.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
cvss4
Base: 5.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A vulnerability was determined in givanz Vvveb up to 1.0.7.3. This affects the function Import of the file admin/controller/tools/import.php of the component Raw SQL Handler. This manipulation causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. Patch name: 52204b4a106b2fb02d16eee06a88a1f2697f9b35. It is recommended to apply a patch to fix this issue.

Risk Information
cvss2
Base: 5.8
Severity: LOW
AV:N/AC:L/Au:M/C:P/I:P/A:P
cvss3
Base: 4.7
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A vulnerability has been found in 70mai X200 up to 20251010. Affected by this vulnerability is an unknown functionality of the component HTTP Web Server. The manipulation leads to use of default credentials. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X