Comparison Overview
Cardif
Cardif
8 rue du Port, Nanterre, 92720, FR
Last Update: 26/02/2026
Depuis 1983, BNP Paribas Cardif distribue sous la marque commerciale Cardif ses produits d’épargne, retraite, assurance de prêt et prévoyance, via notamment un réseau de conseillers en gestion de patrimoine, courtiers et sociétés de gestion privée. Notre entité de 180 c...
Marsh McLennan Agency
360 Hamilton Ave, White Plains, US
Last Update: 03/04/2026
Marsh McLennan Agency, a business of Marsh (NYSE: MRSH), is a leading provider of business insurance, employee health & benefits, retirement & wealth, and private client insurance solutions across the US and Canada. Marsh is a global leader in risk, reinsurance and capi...
Compliance Ranges Comparison
Cardif
Marsh McLennan Agency
Benchmark & Cyber Underwriting Signals
Incidents vs Insurance Industry Avg (This Year)
No incidents recorded for Cardif in 2026.
Incidents vs Insurance Industry Avg (This Year)
No incidents recorded for Marsh McLennan Agency in 2026.
Incident History - Cardif (X = Date, Y = Severity)
Cardif cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Marsh McLennan Agency (X = Date, Y = Severity)
Marsh McLennan Agency cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
Cardif
Marsh McLennan Agency
FAQ
Latest Global CVEs
Spinnaker is an open source, multi-cloud continuous delivery platform. Prior to versions 2026.1.1, 2026.0.3, 2025.4.4, and 2025.3.4 on their respective release lines, Kustomize bake operations allow unsafe YAML tag processing in rosco manifests. This can lead to remote code execution on rosco pods when performing Kustomize bakes. This issue is fixed in versions 2026.1.1, 2026.0.3, 2025.4.4, and 2025.3.4.
- https://github.com/spinnaker/spinnaker/commit/2d75818b85cc4c35144d5e5ed45e7340fcab5dfe
- https://github.com/spinnaker/spinnaker/commit/bbc30c9b9034a056e95f012fa1b34e9fd703cae7
- https://github.com/spinnaker/spinnaker/commit/de5a7a05af35aee19eb71d289cd0b77f67509009
- https://github.com/spinnaker/spinnaker/commit/df32d568e82519d9f3896fc9007baba0077c87fd
- https://github.com/spinnaker/spinnaker/commit/f5cec213f8cf207843ed5a6929395960a1ca094f
- https://github.com/spinnaker/spinnaker/releases/tag/rosco-2025.3.4
- https://github.com/spinnaker/spinnaker/releases/tag/rosco-2025.4.4
- https://github.com/spinnaker/spinnaker/releases/tag/rosco-2026.0.3
- https://github.com/spinnaker/spinnaker/releases/tag/rosco-2026.1.1
- https://github.com/spinnaker/spinnaker/releases/tag/rosco-2026.2.0
- https://github.com/spinnaker/spinnaker/security/advisories/GHSA-p68j-q7hf-3qcp
Multiple connections to the backend using the same charging station ID are allowed, which could allow an attacker to deploy multiple instances of malicious OCPP clients to overwhelm the backend.
Previously, there was no throttling on repeated authentication attempts to the charging station backend, which could allow an attacker to execute a denial-of-service attack.
The charging station websocket endpoint accepts connections without proper authentication, which could lead to privilege escalation.
vulnerability in Drupal Commerce guest registration allows . This issue affects Commerce guest registration versions: *.*.