MSGMU A.I CyberSecurity Scoring
29/01/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for Munich Re Specialty - Global Markets, UK in 2026.
No incidents recorded for Munich Re Specialty - Global Markets, UK in 2026.
No incidents recorded for Munich Re Specialty - Global Markets, UK in 2026.
China Life Insurance (Group) Company, headquartered in Beijing, is a large state-owned financial and insurance company. Its predecessor,PICC was founded in 1949 and the PICC (Life) Co.,Ltd was set up in 1996 after its separation from the former PICC. In 1999, it was renamed China Life Insurance Company. With the approval of the State Council and the China Insurance Regulatory Commission, the former China Life Insurance Company was restructured as China Life Insurance (Group) Company in 2003. It has China Life Insurance Company Limited, China Life Asset Management Company Limited, China Life Property & Casualty Insurance Company Limited, China Life Pension Company Limited, China Life Ecommerce Company Limited, China Life Insurance (Overseas) Company Limited, China Life Investment Holding Company Limited and Insurance Professional College as its subsidiaries. Its business covers life insurance, property & casualty insurance, pension plans (corporate annuity), asset management, alternative investment, overseas operations and e-commerce. Through capital-links, it has invested in several banks, security firms and other non-financial institutions.
A Porto é mais que uma seguradora, é um ecossistema de soluções de serviços de proteção com tecnologia embarcada, para melhorar e facilitar a experiência do cliente. Com mais de 70 anos de mercado, a atuação da companhia se concentra hoje em quatro pilares estratégicos de negócio: Seguros, Saúde, Produtos Financeiros e Serviços. Além de 15.8 milhões de clientes únicos, 13 mil funcionários, 12 mil prestadores e 35 mil corretores parceiros, a empresa conta ainda com 101 sucursais e escritórios regionais em todo o Brasil. Ao todo 27 empresas fazem parte do universo Porto – entre elas: Porto Bank, Porto Saúde, Porto Seguro, Porto Serviço, Porto Seguro Uruguai, Azul Seguros, Itaú Seguros de Auto e Residência.
SURA es una compañía que integra en diferentes empresas soluciones en seguros y seguridad social. Su marca se presenta a los clientes como Seguros SURA, ARL SURA y EPS SURA. Existen otras marcas y empresas, especialmente de prestación de servicios, que hacen parte de la Compañía. Nuestra experiencia y solidez está soportada en 80 años de trayectoria en el mercado de los seguros. Tiempo en el que hemos acompañado a los latinoamericanos en todas las etapas de la vida con productos que se ajustan a sus necesidades de protección. Para responder a nuestras promesas de aseguramiento contamos con una estructura sólida de negocios, permitiéndonos construir relaciones de largo plazo con nuestros clientes basadas en la tranquilidad de estar bien protegidos. La vida y el patrimonio económico son una prioridad para SURA, por ello ofrecemos un amplio portafolio de soluciones.
Gallagher, a global insurance brokerage, risk management, and consulting firm, serves communities around the globe, helping clients address risk, protecting assets, and recovering from losses. The products and services we provide keep businesses and institutions running, and enable individuals and families to face their future with confidence. Gallagher provides retail and wholesale property and casualty brokerage, alternative risk transfer services, employee benefit consulting, and actuarial services. Gallagher also offers claims and information management, risk control consulting and appraisal services, human resource consulting, and retirement services. Follow us on social: Instagram: http://instagram.com/gallagherglobal Facebook: http://www.facebook.com/GallagherGlobal Twitter: https://twitter.com/GallagherGlobal YouTube: https://www.youtube.com/GallagherGlobal
At TATA AIG General Insurance, we wear our achievements like a badge of honour – proudly and with gratitude! We have been recognized as one of India’s Top 100 Best Companies to Work For and among the Top 25 Best Workplaces in BFSI in 2024. As a joint venture between the TATA Group and American International Group (AIG), we bring together the best of both worlds, driving innovation and setting new standards in the insurance industry, while staying true to our core values of empathy, people, and customer-first that translates into: #WithYouAlways and #WithYouLikeFamily. This means we’re committed not only to our customers but also to our employees, peers, and partners — ensuring the highest level of dedication, care, and trust. Join us on this incredible journey as we continue to lead, innovate, and redefine the future of insurance. Together, we’re not just setting the standard — we’re building lasting relationships, one person at a time.
At Allstate, we're advocates for peace of mind and a good life. And that comes through in everything we do. From building innovative teams that truly understand our customers' needs, to challenging each other to develop our careers in a meaningful way, and finally to the incredible results we're able to achieve together. See how we’re creating a better future through innovation, advocacy, and empowering people and communities.
Blue Cross Blue Shield of Michigan is a nonprofit corporation and an independent licensee of the Blue Cross and Blue Shield Association. BCBSM's commitment to Michigan is what differentiates it from other health insurance companies doing business in the state. That mission has never changed. Nearly 70 years ago, Blue Cross Blue Shield of Michigan started with a purpose to provide people with the security of knowing they have health care when they need it. Today, that nonprofit mission is the same and the company is accomplishing it in many ways, including: Offering access to health care coverage for everyone, regardless of circumstances Never dropping your coverage for health reasons Partnering with the state to cover more than 32,000 children through MIChild Providing financial support to 30 free clinics statewide Contributing more money than any other company to provide Michigan with better health and health care Advocating and educating through Alliance for Advancing Nonprofit Health Care For more on the history of BCBSM, please visit our section on historical highlights: http://www.bcbsm.com/home/bcbsm/1930.shtml
SBI Life Insurance (‘SBI Life’ / ‘The Company’), one of the most trusted life insurance companies in India, was incorporated in October 2000 & is registered with the Insurance Regulatory & Development Authority of India (IRDAI) in March 2001. Serving millions of families across India, SBI Life’s diverse range of products caters to individuals as well as group customers through Protection, Pension, Savings & Health solutions. Driven by ‘Customer-First’ approach, SBI Life places great emphasis on maintaining world-class operating efficiency & providing hassle-free claim settlement experience to its customers by following high ethical standards of service. Additionally, SBI Life is committed to enhance digital experiences for its customers, distributors & employees alike. SBI Life strives to make insurance accessible to all, with its extensive presence across the country through its 1,154 offices, 28,534 employees, a large & productive network of about 268,792 agents, 73 corporate agents & 9 bancassurance partners with more than 40,000 partner branches, 149 brokers & other insurance marketing firms. In addition to doing what’s right for the customers, the company is also committed to provide a healthy & flexible work environment for its employees to excel personally & professionally. SBI Life strongly encourages a culture of giving back to the society & has made substantial contribution in the areas of child education, healthcare, disaster relief & environmental upgrade. In 2024-25, the Company touched over 53,000 direct beneficiaries through various CSR interventions. Listed on the Bombay Stock Exchange ('BSE') & the National Stock Exchange ('NSE'), the company has an authorized capital of Rs. 20.0 billion & a paid-up capital of Rs. 10.0 billion. The AuM is Rs. 4,814.6 billion. For more information, please visit our website-www.sbilife.co.in (Numbers & data mentioned above are for the period ended September 30, 2025)
Tokio Marine Group is a global insurance group that provides safety and security to customers worldwide. The Group consists of Tokio Marine Holdings and over 250 subsidiaries and 26 affiliates located in more than 480 cities in 46 countries and regions worldwide, operating extensively in the non-life (P&C) insurance business, life insurance business, and financial and general businesses. The insurance business is based upon the commitment to be there for our clients in their moment of need. It is a people’s business, therefore our people and the trust they engender is everything. We will continue to build a workforce that has been empowered and enabled to think and act from the customer's point of view and to live up to our corporate vision to be a Good Company.
Latest updates, reports, and threat intel affecting the global network.
The global reinsurance market size was valued at USD 472.3 billion in 2025. The market is expected to grow from USD 503.4 billion in 2026 to...
All targets of the nearly completed Ambition 2025 strategy are likely to be exceeded; Financial targets through the end of 2030: RoE of over...
Organisations worldwide are increasing investments in cybersecurity, a trend expected to influence demand, capacity and pricing in the cyber...
The agenda will cover all aspects of enterprise risk management for re/insurers across Europe, providing a platform for thought leaders to...
Net result rises to €5.2bn for Q1–3; Property-casualty reinsurance & Global Specialty Insurance: Below-average major-loss expenditure...
Discover how Munich Re Specialty uses tech and data to innovate in binding authority, addressing trends and evolving risks in the insurance...
As regulatory complexity meets macroeconomic pressures and AI transformation, life sciences companies are seeking productive partnerships...
Princeton, NJ (October 15, 2025) – Munich Re Specialty has launched an admitted inland marine insurance product to complement its existing...
Geoeconomic fragmentation makes managing global risks like climate, cyber, pandemic risks more difficult for insurance and reinsurance...
tls_opt_dtls_peer_connection_id_value_get() in subsys/net/lib/sockets/sockets_tls.c, which handles getsockopt(SOL_TLS, TLS_DTLS_PEER_CID_VALUE), passed the caller-supplied optval directly to mbedtls_ssl_get_peer_cid() without verifying the buffer was at least MBEDTLS_SSL_CID_OUT_LEN_MAX (default 32) bytes. mbedtls_ssl_get_peer_cid() copies the peer-negotiated DTLS Connection ID (length 1..MBEDTLS_SSL_CID_OUT_LEN_MAX) into that buffer without a destination-size parameter, so a caller-supplied optlen smaller than the CID causes a write of up to 31 bytes past the buffer end. In CONFIG_USERSPACE builds the getsockopt syscall verifier (z_vrfy_zsock_getsockopt) bounce-buffers the user's optval into a kernel allocation of exactly optlen bytes (k_usermode_alloc_from_copy -> z_thread_malloc), so an unprivileged user thread that passes a small optlen on a connected DTLS socket with Connection ID enabled induces a kernel-heap buffer overflow, with the overflowing content being the remote peer's CID. The defect requires CONFIG_MBEDTLS_SSL_DTLS_CONNECTION_ID, an established DTLS session with a negotiated peer CID, and (for the kernel-crossing case) CONFIG_USERSPACE. Introduced when the TLS_DTLS_CID option was added (v3.5.0). The fix rejects callers whose optlen is below MBEDTLS_SSL_CID_OUT_LEN_MAX with -EINVAL.
react18-use is a React 19 use hook shim. Between 2026-05-19 01:07:01 and 2026-05-19 15:20:43, the default branch contained malicious commits 7b79148d1495a2505f9277da295a98cf176f4496 through 7b79148d1495a2505f9277da295a98cf176f4496 that executed remote attacker-controlled code on developer machines during `npm install`. The commits were removed by force-push, but local clones, forks, and direct-SHA URLs may still contain them, and `npm install` against an affected checkout will still execute the code today. The package was not published to npm. `src/install.js` was added and wired into the `postinstall` script. It fetched a JavaScript payload from an attacker-controlled HTTPS endpoint (configurable via an environment variable), disabled TLS verification, and evaluated the response as code with `require` available. Execution was deliberately skipped on CI and cloud/serverless environments, targeting developer workstations. The second-stage payload was attacker-hosted and cannot be reconstructed. Assume full compromise of anything reachable from a Node process with the user's permissions. Those who ran `npm install` against an affected checkout on a developer machine on or after 2026-05-19 01:07:01 should treat the machine as compromised, rotate every credential the machine could reach, audit account activity since 2026-05-19 01:07:01, and clean local clones.
The UpdateHub management subsystem (subsys/mgmt/updatehub/updatehub.c) drives every update operation through a single file-scope ctx structure that holds the CoAP block context, payload buffer, status code, socket, and a one-element poll-fd array fds[1]. Access to ctx was not serialized, and prepare_fds() wrote ctx.fds[ctx.nfds] and incremented ctx.nfds with no bounds check. Two independent paths mutate ctx concurrently: the background autohandler running on the system workqueue, and user-triggered operations reached through the updatehub run shell command, direct API calls, or — since the operations are exposed as syscalls — userspace threads. When a second flow enters prepare_fds() while ctx.nfds is already 1, the write lands one element past the array; by struct layout it overlaps the adjacent ctx.sock/ctx.nfds members. More broadly, the unsynchronized sharing lets two flows interleave connection setup and teardown, double-closing a socket descriptor or scribbling the shared buffers. The result is corruption of the update subsystem's internal state and denial of service of the firmware-update path; the out-of-bounds write is contained within the ctx structure and there is no demonstrated path to memory outside it or to code execution. Triggering requires a local actor able to invoke update operations (or, with CONFIG_USERSPACE, an unprivileged userspace thread) and to win a timing race against the background handler; remote peers cannot control the race timing. The fix serializes the entry points with a mutex and adds a bounds check to prepare_fds().
The UpdateHub over-the-air update client's start_coap_client() in subsys/mgmt/updatehub/updatehub.c leaks the CoAP/DTLS socket descriptor on its connection-setup failure paths. The shared error: cleanup gated socket closing on a ret > 0 flag, but ret was set to -1 immediately after the socket was created, so when zsock_setsockopt() (DTLS) or zsock_connect() subsequently failed the gate was false and cleanup_connection() was never called. The open descriptor in the global ctx.sock was then overwritten by the next attempt, permanently leaking it from the socket / net_context pool until reboot. The failing setup path is reached every time the OTA client tries to contact the UpdateHub server and the connection cannot be established — driven automatically by the periodic autohandler() poll (and on demand via the updatehub_probe()/updatehub_update() API or the updatehub run shell command). The DTLS handshake/connect outcome is influenceable by a network or on-path attacker who drops, resets, or otherwise disrupts traffic to the server, and also fails naturally whenever the server is unreachable. Each failed attempt permanently leaks one descriptor; once the shared socket pool is exhausted, networking degrades device-wide until the device is rebooted, a denial-of-service condition. Severity is low because the leak rate is bounded by the configured OTA poll interval (default once per 24 hours), the effect is gradual and recovered by reboot, and only builds with the UpdateHub client enabled are affected. There is no memory-corruption, information-disclosure, or authentication impact.
Certain web interface components in affected TP-Link Aginet devices do not validate and sanitize user-supplied input properly before passing it to system-level command execution functions. An authenticated adjacent attacker may inject specially crafted input to execute arbitrary operation system commands with elevated privileges. Successful exploitation may allow execution of arbitrary system commands, potentially leading to full device compromise.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.