Rankiteo Logo
Rankiteo
Leader in Cyber Underwriting
Loading...
NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop
WindowsmacOSLinux
Download

Comparison Overview

CPAM de Saône-et-Loire (Assurance Maladie)CPAM de Saône-et-Loire (Assurance Maladie)
VS
US Government Accountability OfficeUS Government Accountability Office
CPAM de Saône-et-Loire (Assurance Maladie)

CPAM de Saône-et-Loire (Assurance Maladie)

113, Rue de Paris, Mâcon Cedex 9, 71022, FR

Last Update: 17/04/2026

View Profile
760/1000Fair

Travailler à l’Assurance Maladie, c’est s’engager au sein d’un collectif où chacun met ses compétences au service de nombreux projets pour protéger la santé de plus de 60 millions d'assurés. En Saône-et-Loire, l'Assurance Maladie verse chaque année plus de 1,64 milliar...

NAICS:92
NAICS Definition:Public Administration
Employees:109
Subsidiaries:113
12-month incidents
0
Known data breaches
0
Attack type number
0
US Government Accountability Office

US Government Accountability Office

441 G Street, N.W., Washington, 20548, US

Last Update: 30/03/2026

View Profile
Between 650 and 699
http://www.gao.gov
682/1000Weak

For more information about GAO, please visit www.gao.gov. General Information The U.S. Government Accountability Office (GAO) is an independent, nonpartisan agency that works for Congress. Often called the "congressional watchdog,"​ GAO investigates how the federal go...

NAICS:92
NAICS Definition:Public Administration
Employees:17,303
Subsidiaries:0
12-month incidents
1
Known data breaches
1
Attack type number
2

Compliance Ranges Comparison

Based On Specific Ai Models Category
CPAM de Saône-et-Loire (Assurance Maladie)

CPAM de Saône-et-Loire (Assurance Maladie)

-
ISO 27001Not verified
ISO 27001
-
SOC2 Type 1Not verified
SOC2 Type 1
-
SOC2 Type 2Not verified
SOC2 Type 2
-
GDPRNot verified
GDPR
-
PCI DSSNot verified
PCI DSS
-
HIPAANot verified
HIPAA
US Government Accountability Office

US Government Accountability Office

-
ISO 27001Not verified
ISO 27001
-
SOC2 Type 1Not verified
SOC2 Type 1
-
SOC2 Type 2Not verified
SOC2 Type 2
-
GDPRNot verified
GDPR
-
PCI DSSNot verified
PCI DSS
-
HIPAANot verified
HIPAA

Benchmark & Cyber Underwriting Signals

Incidents vs Government Administration Industry Avg (This Year)

No incidents recorded for CPAM de Saône-et-Loire (Assurance Maladie) in 2026.

Incidents

Incidents vs Government Administration Industry Avg (This Year)

US Government Accountability Office has 3.85% fewer incidents than the average of all companies with at least one recorded incident.

Incidents

Incident History - CPAM de Saône-et-Loire (Assurance Maladie) (X = Date, Y = Severity)

CPAM de Saône-et-Loire (Assurance Maladie) cyber incidents detection timeline including parent company and subsidiaries.

R - Ransomware
C - Cyber Attack
D - Data Breach
V - Vulnerability

Incident History - US Government Accountability Office (X = Date, Y = Severity)

US Government Accountability Office cyber incidents detection timeline including parent company and subsidiaries.

R - Ransomware
C - Cyber Attack
D - Data Breach
V - Vulnerability

Notable Incidents

Last Cyber / HR Incidents / Global...
CPAM de Saône-et-Loire (Assurance Maladie)

CPAM de Saône-et-Loire (Assurance Maladie)

Incidents
No explicit notable incidents reported.
US Government Accountability Office

US Government Accountability Office

Incidents
🔒 Incident : Cyber Attack
US-1773483893
🔒 Incident : Breach
US-FOR1772821514

FAQ

Between CPAM de Saône-et-Loire (Assurance Maladie) company and US Government Accountability Office company, which one has the best AI Cybersecurity Score ?
Between CPAM de Saône-et-Loire (Assurance Maladie) company and US Government Accountability Office company, which one has experienced more cyber incidents in the past ?
Between CPAM de Saône-et-Loire (Assurance Maladie) company and US Government Accountability Office company, which one has experienced more cyber incidents this year ?
Between CPAM de Saône-et-Loire (Assurance Maladie) company and US Government Accountability Office company, which one has experienced at least one ransomware attack ?
Between CPAM de Saône-et-Loire (Assurance Maladie) company and US Government Accountability Office company, which one has experienced at least one data breach ?
Between CPAM de Saône-et-Loire (Assurance Maladie) company and US Government Accountability Office company, which one has experienced at least one targeted cyberattack ?
Between CPAM de Saône-et-Loire (Assurance Maladie) company and US Government Accountability Office company, which one has experienced at least one vulnerability ?
Between CPAM de Saône-et-Loire (Assurance Maladie) company and US Government Accountability Office company, which one holds the most compliance certifications ?
Between CPAM de Saône-et-Loire (Assurance Maladie) company and US Government Accountability Office company, which one holds the fewest compliance certifications ?
Between CPAM de Saône-et-Loire (Assurance Maladie) company and US Government Accountability Office company, which one has the most subsidiaries ?
Between CPAM de Saône-et-Loire (Assurance Maladie) company and US Government Accountability Office company, which one has the largest number of employees ?
Between CPAM de Saône-et-Loire (Assurance Maladie) and US Government Accountability Office, which company holds both SOC 2 Type 1 certifications ?
Between CPAM de Saône-et-Loire (Assurance Maladie) and US Government Accountability Office, which company holds both SOC 2 Type 2 certifications ?
Which company is ISO 27001 certified - CPAM de Saône-et-Loire (Assurance Maladie) or US Government Accountability Office ?
Which company is PCI DSS compliant - CPAM de Saône-et-Loire (Assurance Maladie) or US Government Accountability Office ?
Between CPAM de Saône-et-Loire (Assurance Maladie) and US Government Accountability Office, which company complies with HIPAA regulations for healthcare data ?
Between CPAM de Saône-et-Loire (Assurance Maladie) and US Government Accountability Office, which company complies with GDPR requirements ?

Latest Global CVEs

CVE-2026-57990
SUMMARY

Files or directories accessible to external parties in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

PUBLISHED
Date2026-07-26
UPDATED
Date2026-07-26
RISK INFORMATION (Score: 7.4)
CVSS3
Base Score: 7.4
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
IMPACT SCORE
4
EXPLOITABILITY
2.8
CVE-2026-57989
SUMMARY

Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

PUBLISHED
Date2026-07-26
UPDATED
Date2026-07-26
RISK INFORMATION (Score: 7.4)
CVSS3
Base Score: 7.4
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
IMPACT SCORE
4
EXPLOITABILITY
2.8
CVE-2026-57978
SUMMARY

Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

PUBLISHED
Date2026-07-26
UPDATED
Date2026-07-26
RISK INFORMATION (Score: 5.4)
CVSS3
Base Score: 5.4
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
IMPACT SCORE
2.5
EXPLOITABILITY
2.8
CVE-2026-17497
SUMMARY

NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary arguments in the default desktop capabilities. JavaScript running in the application webview can therefore invoke plugin:shell|execute to run attacker-controlled operating system commands with the privileges of the NoteGen process. In combination with script execution in the webview (for example via chat XSS), this enables full remote code execution on the user's machine.

PUBLISHED
Date2026-07-26
UPDATED
Date2026-07-26
RISK INFORMATION (Score: 8.3)
CVSS3
Base Score: 8.3
Complexity: HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
IMPACT SCORE
6
EXPLOITABILITY
1.6
CVE-2026-17496
SUMMARY

NoteGen before 0.32.0 renders AI chat responses with markdown-it configured with html:true and injects the result into the DOM via dangerouslySetInnerHTML in chat-preview, without HTML sanitization and with CSP set to null. Attacker-controlled content that reaches the model prompt (for example a malicious skill REFERENCE.md that instructs the model to emit HTML) can cause the model response to include executable markup such as an img onerror handler. When the user views the chat response, that markup runs as JavaScript in the privileged Tauri webview, enabling arbitrary script execution in the application context (cross-site scripting).

PUBLISHED
Date2026-07-26
UPDATED
Date2026-07-26
RISK INFORMATION (Score: 8.1)
CVSS3
Base Score: 8.1
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
IMPACT SCORE
5.2
EXPLOITABILITY
2.8