Comparison Overview

Massachusetts Business Alliance for Education

VS

FACT Coalition

Massachusetts Business Alliance for Education

225 Franklin Street, Floor 25, Boston, 02110, US
Last Update: 2025-11-24
View Profile
Between 700 and 749
http://www.mbae.org

The Massachusetts Business Alliance for Education (MBAE) and the employers we represent believe that a strong community and economy is based on every child having equal access to a high quality education. For three decades, MBAE has effectively advanced state education policies that have significantly improved our public schools. MBAE, together with our partners and a growing list of business Affiliates across the state, is working to eliminate racial and socio-economic achievement gaps that prevent far too many of our most disadvantaged students from realizing their dreams and full potential. By advocating for improvements in our schools and greater alignment with real world expectations, MBAE seeks to ensure students are future ready and helps create a robust, well-educated, diverse workforce pipeline that fuels growth in our companies and state economy.

NAICS: 921
NAICS Definition: Executive, Legislative, and Other General Government Support
Employees: 12
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0
View Profile

FACT Coalition

1100 13th St NW, Washington, District of Columbia, 20005, US
Last Update: 2025-11-27
Between 700 and 749
http://thefactcoalition.org

The Financial Accountability & Corporate Transparency (FACT) Coalition is a nonpartisan alliance of over 100 state, national, and global groups working toward a fair tax system that addresses the challenges of a global economy and promoting policies to combat the harmful impact of corrupt financial practices. Our Goals * End the use of anonymous shell companies as vehicles for illicit activity; * Strengthen, standardize, and enforce anti-money laundering laws; * Require greater transparency from multinational corporations to promote informed tax policy; * Ensure that the US constructively engages in global financial transparency initiatives; and * Eliminate loopholes that allow companies and individuals to offshore income and avoid paying their fair share of taxes. Why It Matters There's untold wealth hidden in secrecy jurisdictions worldwide. The wealth-stripping from corrupt practices and regimes, illegal activity, and legal-but-ethically-bankrupt tax avoidance schemes is larger than most can imagine. Because of the secret nature of the financial flows, it's impossible to know exactly the amount of money, but estimates range from $7.6 trillion to $32 trillion stashed in secrecy jurisdictions. More than $2.4tr is currently stashed offshore by Fortune 500 companies, costing taxpayers nearly $700bn. Indeed, the annual cost of offshore tax avoidance by multinational companies is $94 billion to $135bn, while overseas tax evasion by individuals drains an additional $40bn to $70bn each year from the public. We seek a larger conversation about how certain interests manipulate the tax system and undermine our ability to act collectively to solve problems. The secrecy, in particular, allows certain entities to play by a different set of rules than the rest of us. Globally, the secrecy facilitates corruption and impoverishes poor countries. In the US, we are complicit in the draining of wealth of other nations and fueling the austerity movement in our own.

NAICS: 921
NAICS Definition:
Employees: 9
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/massachusetts-business-alliance-for-education.jpeg
Massachusetts Business Alliance for Education
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/fact-coalition.jpeg
FACT Coalition
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Massachusetts Business Alliance for Education
100%
Compliance Rate
0/4 Standards Verified
FACT Coalition
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Public Policy Offices Industry Average (This Year)

No incidents recorded for Massachusetts Business Alliance for Education in 2025.

Incidents vs Public Policy Offices Industry Average (This Year)

No incidents recorded for FACT Coalition in 2025.

Incident History — Massachusetts Business Alliance for Education (X = Date, Y = Severity)

Massachusetts Business Alliance for Education cyber incidents detection timeline including parent company and subsidiaries

Incident History — FACT Coalition (X = Date, Y = Severity)

FACT Coalition cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/massachusetts-business-alliance-for-education.jpeg
Massachusetts Business Alliance for Education
Incidents

No Incident

https://images.rankiteo.com/companyimages/fact-coalition.jpeg
FACT Coalition
Incidents

No Incident

FAQ

Both Massachusetts Business Alliance for Education company and FACT Coalition company demonstrate a comparable AI Cybersecurity Score, with strong governance and monitoring frameworks in place.

Historically, FACT Coalition company has disclosed a higher number of cyber incidents compared to Massachusetts Business Alliance for Education company.

In the current year, FACT Coalition company and Massachusetts Business Alliance for Education company have not reported any cyber incidents.

Neither FACT Coalition company nor Massachusetts Business Alliance for Education company has reported experiencing a ransomware attack publicly.

Neither FACT Coalition company nor Massachusetts Business Alliance for Education company has reported experiencing a data breach publicly.

Neither FACT Coalition company nor Massachusetts Business Alliance for Education company has reported experiencing targeted cyberattacks publicly.

Neither Massachusetts Business Alliance for Education company nor FACT Coalition company has reported experiencing or disclosing vulnerabilities publicly.

Neither Massachusetts Business Alliance for Education nor FACT Coalition holds any compliance certifications.

Neither company holds any compliance certifications.

Neither Massachusetts Business Alliance for Education company nor FACT Coalition company has publicly disclosed detailed information about the number of their subsidiaries.

Massachusetts Business Alliance for Education company employs more people globally than FACT Coalition company, reflecting its scale as a Public Policy Offices.

Neither Massachusetts Business Alliance for Education nor FACT Coalition holds SOC 2 Type 1 certification.

Neither Massachusetts Business Alliance for Education nor FACT Coalition holds SOC 2 Type 2 certification.

Neither Massachusetts Business Alliance for Education nor FACT Coalition holds ISO 27001 certification.

Neither Massachusetts Business Alliance for Education nor FACT Coalition holds PCI DSS certification.

Neither Massachusetts Business Alliance for Education nor FACT Coalition holds HIPAA certification.

Neither Massachusetts Business Alliance for Education nor FACT Coalition holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.

Published
Date
2025-11-26
Updated
Date
2025-11-26
Risk Information
cvss4
Base: 7.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.

Published
Date
2025-11-26
Updated
Date
2025-11-26
Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.

Published
Date
2025-11-26
Updated
Date
2025-11-26
Risk Information
cvss4
Base: 6.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.

Published
Date
2025-11-26
Updated
Date
2025-11-26
Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.

Published
Date
2025-11-26
Updated
Date
2025-11-26
Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References