I A.I CyberSecurity Scoring
02/04/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for IIFL (India Infoline Group) in 2026.
No incidents recorded for IIFL (India Infoline Group) in 2026.
No incidents recorded for IIFL (India Infoline Group) in 2026.
We exist to shape decisions for the better — to protect and enrich the lives of people around the world. Through actionable analytic insight, globally integrated Risk Capital and Human Capital expertise, and locally relevant solutions, our colleagues provide clients in over 120 countries with the clarity and confidence to make better risk and people decisions that help protect and grow their businesses.
Fidelity National Financial, Inc. (NYSE: FNF) is a leading provider of title insurance and transaction services to the real estate and mortgage industries. Ranked #359 on the FORTUNE 500(r) list for 2023, FNF is the nation's largest title insurance company through our title insurance underwriters (Fidelity National Title, Chicago Title, Commonwealth Land Title, Alamo Title and National Title Insurance of New York) that collectively issue more title insurance policies than any other title company in the United States. Our mission is to advance, expand, and protect the experience of property ownership by making the safety of our customers our primary focus. We pride ourselves on being extremely customer-oriented, motivated, and quick to provide solutions for all of your title insurance needs. We strongly encourage employee ownership of company stock so our FNF family can share in our company’s continuous growth and be a valuable part of something bigger than themselves.
Postal Savings Bank of China Co., Ltd. also known as PSBC is a commercial retail bank founded in 2007 and headquartered in Beijing. It provides basic financial services, especially to small and medium enterprises, rural[1] and low income customers. As of December 31, 2017, PSBC has 39,798[2] branches covering all regions of China. PSBC was set up with an initial capital of RMB20 billion in 2007 from the State Post Bureau. Today it has RMB1.5 trillion in deposits and the second largest number of branches, after the Agricultural Bank of China. During the Global Financial Crisis, the government took several measures to spread its national economic stimulus plan specifically to rural areas. This included using microfinance services provided by the Postal Savings Bank as a tool for national development and poverty reduction. The bank with its extremely broad reach also assists China’s credit cooperatives in their microcredit schemes. On December 8, 2015, China Postal Savings Bank, through issuing pro-float stock, received an injection of investment from the Temasek Holdings of Singapore, UBS, the Canada Pension Plan Investment Board, the International Finance Corporation, Morgan Stanley, DBS Bank, Tencent, Ant Financial Services Group, China Life and China Telecom, with a total investment of 45.1 billion yuan. These "strategic investors" together held a 16.92% stake in the company at the time of purchase. The stock was listed through an initial public offering on the Stock Exchange of Hong Kong on September 30, 2016. Prior to its listing, it was the largest unlisted Chinese bank.[3] Xuewen Zhang and Hong Lao serve as Vice Presidents of the bank and co-executive directors.
Grupo Salinas es un conjunto de empresas dinámicas, que se caracterizan por la evolución constante y la innovación, enfocadas en la creación de valor económico, social y ambiental. Estamos en industrias diversas como comercio especializado, servicios financieros, telecomunicaciones y medios de comunicación, entre otros sectores. Nuestra Visión: Crear valor y prosperidad para millones de familias con base en una visión de negocios incluyente. Nuestra Misión: Ser el grupo empresarial mexicano más influyente con el mejor equipo de trabajo y con un modelo de gestión de alto desempeño; que permita la innovación permanente e impulsar la libertad, el estado de derecho y la igualdad de oportunidades. Sabemos que entender al cliente y ofrecerle todo lo que necesita para mejorar su calidad de vida es la vía para crear valor. Las acciones y estrategias del Grupo están alineadas a los más altos estándares internacionales en beneficio de la sociedad. Nuestro propósito es ofrecer excelentes productos y servicios que mejoren la calidad de vida de la población, sobre todo en los sectores menos favorecido. Grupo Salinas está integrada por: • Más de 100,000 colaboradores. • Banco Azteca, Tiendas Elektra, Italika, TV Azteca, Totalplay, Grupo Dragón, UPAX, Tiendas Neto, entre otras. • Estamos cerca de nuestros clientes en más de 6,000 puntos de contacto. • Presencia en 5 países: México, Estados Unidos, Guatemala, Honduras y Panamá.
Longer lifespans are changing the way we exist. Instead of the traditional stages of learn, work, and retire, we now have the potential for a more fulfilling, multi-stage life. With this opportunity comes the need to plan for it. We enable financial professionals, brokers, agents, advisors, and employers to energize clients and employees to seize the possibilities longevity brings. So, no matter where someone is on their journey, we can help them pursue the freedom to live the life they want. Transamerica. Live your best life. Securities distributed by Transamerica Capital, Inc. Social terms: https://www.transamerica.com/social-media-guidelines
ICE (NYSE: ICE) connects people to data, technology and expertise that create opportunity and inspire innovation. For terms of use, visit www.ice.com/privacy-security-center/terms-of-use
We are here. So you can stay ahead. For nearly two hundred years we have acquired and shared knowledge, developed global networks and adapted to modern everyday life. To us, it is important to combine profitability with responsibility. DNB is Norway's largest financial services group and one of the largest in the Nordic region in terms of market capitalisation. The Group offers a full range of financial services, including loans, savings, advisory services, insurance and pension products for retail and corporate customers. DNB’s bank branches in Norway, in-store postal and banking outlets, Post office counters, Internet banking, mobile services and international offices ensure that we are present where our customers are. We are a major operator in a number of industries, for which we also have a Nordic or international strategy. DNB is one of the world’s leading shipping banks and has a strong position in the energy sector, and the fisheries and seafood industry. As an international financial institution we offer a wide range of services from our offices around the globe. At DNB you can find career opportunities in many fields, and with offices in 22 countries we are dependent on employees with different backgrounds and skills - all equally important for DNB's performance.
Absa Group Limited (Absa) has forged a new way of getting things done, driven by bravery and passion, with the readiness to realise growth on the African continent and beyond. We’re a truly African brand, inspired by the people we serve in Botswana, Ghana, Kenya, Mauritius, Mozambique, Seychelles, South Africa, Tanzania, Uganda, and Zambia. We also have representative offices in China, Namibia, Nigeria and the United States, as well as securities entities in the United Kingdom and the United States, along with technology support colleagues in the Czech Republic.
At Empower, we’ve always been guided by strong values with a focus on helping people achieve the financial freedom they deserve. It’s been an incredible journey so far, but our story is just getting started. From the very beginning, we’ve prided ourselves on putting our customers first in everything we do — which will never change. The genesis of Empower dates back to 1891, when our parent company was founded as an insurance firm on the Canadian prairie. After more than a century of expansion and a profound evolution of service offerings, the modern iteration of Empower was launched in 2014. Our past is a big part of who we are as a business, but we continue to invest heavily in our current principles and future endeavors. Today, as the second-largest recordkeeper¹ in the U.S. and a comprehensive wealth management leader, we proudly serve more than 19 million individuals and over 88,000 different organizations.² With a constant commitment to growth, innovation and technology, we are fully dedicated to transforming the lives of all Americans. Our personalized tools and solutions are aimed at helping everyone improve their financial confidence so they can pursue their passions and reach their unique goals. That’s our promise. ------------------------ Disclosures: https://www.empower.com/social-media/ ¹Pension & Investments DC Recordkeeper Survey (2024). Ranking measured by total number of participants as of December 2023. ²As of March 31, 2025.
Latest updates, reports, and threat intel affecting the global network.
In India's regulated market, financial advisors must comply with SEBI, exchanges, KYC-AML and cybersecurity norms to protect clients, build trust,...
The Indian IT sector is poised at a challenging crossroads as we are already in the earnings season for the first quarter of the fiscal year 2024.
Its IPO of INR 5603 million is an offer for sale and is aimed at providing liquidity to its promoters and existing shareholders.
Explore the future of sub-broking in India with trends in digital transformation, AI use, and shifting investor needs in this comprehensive industry...
Effective April 1, 2025, the restructuring is designed to drive integrated, outcome-focused solutions that enhance agility and innovation to...
Monitor unusual volume stocks on NSE with IIFL Capital. Stay updated on stocks showing sudden spikes in trade volume and trading patterns across the...
In conversation with IIFL, management of the IPO-bound company to get an overview of its business and future prospects.
Maintenance & Support to entire Cyber Security Solution for 5 years.
CISO Movement: ICICI Securities has roped in cybersecurity leader Sanjay Tiwari as their Head - Information Security (CISO).
tls_opt_dtls_peer_connection_id_value_get() in subsys/net/lib/sockets/sockets_tls.c, which handles getsockopt(SOL_TLS, TLS_DTLS_PEER_CID_VALUE), passed the caller-supplied optval directly to mbedtls_ssl_get_peer_cid() without verifying the buffer was at least MBEDTLS_SSL_CID_OUT_LEN_MAX (default 32) bytes. mbedtls_ssl_get_peer_cid() copies the peer-negotiated DTLS Connection ID (length 1..MBEDTLS_SSL_CID_OUT_LEN_MAX) into that buffer without a destination-size parameter, so a caller-supplied optlen smaller than the CID causes a write of up to 31 bytes past the buffer end. In CONFIG_USERSPACE builds the getsockopt syscall verifier (z_vrfy_zsock_getsockopt) bounce-buffers the user's optval into a kernel allocation of exactly optlen bytes (k_usermode_alloc_from_copy -> z_thread_malloc), so an unprivileged user thread that passes a small optlen on a connected DTLS socket with Connection ID enabled induces a kernel-heap buffer overflow, with the overflowing content being the remote peer's CID. The defect requires CONFIG_MBEDTLS_SSL_DTLS_CONNECTION_ID, an established DTLS session with a negotiated peer CID, and (for the kernel-crossing case) CONFIG_USERSPACE. Introduced when the TLS_DTLS_CID option was added (v3.5.0). The fix rejects callers whose optlen is below MBEDTLS_SSL_CID_OUT_LEN_MAX with -EINVAL.
react18-use is a React 19 use hook shim. Between 2026-05-19 01:07:01 and 2026-05-19 15:20:43, the default branch contained malicious commits 7b79148d1495a2505f9277da295a98cf176f4496 through 7b79148d1495a2505f9277da295a98cf176f4496 that executed remote attacker-controlled code on developer machines during `npm install`. The commits were removed by force-push, but local clones, forks, and direct-SHA URLs may still contain them, and `npm install` against an affected checkout will still execute the code today. The package was not published to npm. `src/install.js` was added and wired into the `postinstall` script. It fetched a JavaScript payload from an attacker-controlled HTTPS endpoint (configurable via an environment variable), disabled TLS verification, and evaluated the response as code with `require` available. Execution was deliberately skipped on CI and cloud/serverless environments, targeting developer workstations. The second-stage payload was attacker-hosted and cannot be reconstructed. Assume full compromise of anything reachable from a Node process with the user's permissions. Those who ran `npm install` against an affected checkout on a developer machine on or after 2026-05-19 01:07:01 should treat the machine as compromised, rotate every credential the machine could reach, audit account activity since 2026-05-19 01:07:01, and clean local clones.
The UpdateHub management subsystem (subsys/mgmt/updatehub/updatehub.c) drives every update operation through a single file-scope ctx structure that holds the CoAP block context, payload buffer, status code, socket, and a one-element poll-fd array fds[1]. Access to ctx was not serialized, and prepare_fds() wrote ctx.fds[ctx.nfds] and incremented ctx.nfds with no bounds check. Two independent paths mutate ctx concurrently: the background autohandler running on the system workqueue, and user-triggered operations reached through the updatehub run shell command, direct API calls, or — since the operations are exposed as syscalls — userspace threads. When a second flow enters prepare_fds() while ctx.nfds is already 1, the write lands one element past the array; by struct layout it overlaps the adjacent ctx.sock/ctx.nfds members. More broadly, the unsynchronized sharing lets two flows interleave connection setup and teardown, double-closing a socket descriptor or scribbling the shared buffers. The result is corruption of the update subsystem's internal state and denial of service of the firmware-update path; the out-of-bounds write is contained within the ctx structure and there is no demonstrated path to memory outside it or to code execution. Triggering requires a local actor able to invoke update operations (or, with CONFIG_USERSPACE, an unprivileged userspace thread) and to win a timing race against the background handler; remote peers cannot control the race timing. The fix serializes the entry points with a mutex and adds a bounds check to prepare_fds().
The UpdateHub over-the-air update client's start_coap_client() in subsys/mgmt/updatehub/updatehub.c leaks the CoAP/DTLS socket descriptor on its connection-setup failure paths. The shared error: cleanup gated socket closing on a ret > 0 flag, but ret was set to -1 immediately after the socket was created, so when zsock_setsockopt() (DTLS) or zsock_connect() subsequently failed the gate was false and cleanup_connection() was never called. The open descriptor in the global ctx.sock was then overwritten by the next attempt, permanently leaking it from the socket / net_context pool until reboot. The failing setup path is reached every time the OTA client tries to contact the UpdateHub server and the connection cannot be established — driven automatically by the periodic autohandler() poll (and on demand via the updatehub_probe()/updatehub_update() API or the updatehub run shell command). The DTLS handshake/connect outcome is influenceable by a network or on-path attacker who drops, resets, or otherwise disrupts traffic to the server, and also fails naturally whenever the server is unreachable. Each failed attempt permanently leaks one descriptor; once the shared socket pool is exhausted, networking degrades device-wide until the device is rebooted, a denial-of-service condition. Severity is low because the leak rate is bounded by the configured OTA poll interval (default once per 24 hours), the effect is gradual and recovered by reboot, and only builds with the UpdateHub client enabled are affected. There is no memory-corruption, information-disclosure, or authentication impact.
Certain web interface components in affected TP-Link Aginet devices do not validate and sanitize user-supplied input properly before passing it to system-level command execution functions. An authenticated adjacent attacker may inject specially crafted input to execute arbitrary operation system commands with elevated privileges. Successful exploitation may allow execution of arbitrary system commands, potentially leading to full device compromise.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.