Comparison Overview
KPMG U.S. Financial Services

KPMG U.S. Financial Services
345 Park Ave, New York, NY , 10154, US
Last Update: 07/03/2026
Disruption can be a threat, or an opportunity. The KPMG Financial Services practice sees today’s challenges as a catalyst for transformation. Our mission is to help our clients grow, connect with customers, manage costs, and comply with ever-changing regulations by lev...

Fidelity National Financial
601 Riverside Avenue, Jacksonville, 32204, US
Last Update: 06/09/2026
Fidelity National Financial, Inc. (NYSE: FNF) is a leading provider of title insurance and transaction services to the real estate and mortgage industries. Ranked #313 on the FORTUNE 500(r) list for 2025, FNF is the nation's largest title insurance company through our t...
Compliance Ranges Comparison

KPMG U.S. Financial Services







Fidelity National Financial






Benchmark & Cyber Underwriting Signals
Incidents vs Financial Services Industry Avg (This Year)
No incidents recorded for KPMG U.S. Financial Services in 2026.
Incidents vs Financial Services Industry Avg (This Year)
No incidents recorded for Fidelity National Financial in 2026.
Incident History - KPMG U.S. Financial Services (X = Date, Y = Severity)
KPMG U.S. Financial Services cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Fidelity National Financial (X = Date, Y = Severity)
Fidelity National Financial cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

KPMG U.S. Financial Services

Fidelity National Financial
FAQ
Latest Global CVEs
Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing.
Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory.
Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.
Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write.
Mistral Vibe before 2.25.5 contains a remote code execution vulnerability in the worktree creation process that executes git hooks before trust validation. Attackers can supply a repository with a crafted post-checkout hook that executes arbitrary shell commands with the privileges of the user running Vibe.
- https://github.com/mistralai/mistral-vibe
- https://github.com/mistralai/mistral-vibe/blob/19b5b74faa78d0816b8d4d4c7d7543fc3520678c/vibe/core/git/repo.py#L411-L431
- https://github.com/mistralai/mistral-vibe/commit/c069ffa1e12fb5f2487b489217c40ab97721d553
- https://github.com/mistralai/mistral-vibe/issues/996
- https://github.com/mistralai/mistral-vibe/releases/tag/v2.25.5
- https://www.vulncheck.com/advisories/mistral-vibe-before-2.25.5-remote-code-execution-via-git-post-checkout