MSNA A.I CyberSecurity Scoring
20/01/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for Munich Re Specialty - North America in 2026.
No incidents recorded for Munich Re Specialty - North America in 2026.
No incidents recorded for Munich Re Specialty - North America in 2026.
Insurance
Brown & Brown delivers risk management solutions to help protect and preserve what our customers value most. Our two business segments, Retail and Specialty Distribution, offer businesses and individuals a wide range of insurance solutions. We are one of the insurance industry’s most powerful and influential leaders, with a strong, deeply rooted cultural foundation built on integrity, innovation, superior capabilities and discipline. The Power of WE ignites our performance, and while diverse and varied in abilities and experience, we are all connected through our core values, a commitment to our local communities and a shared mission—always doing what is best for our customers. Brown & Brown is proud to be certified as a Great Place to Work®, and we are always actively looking for talented teammates who embrace our culture to join our winning team. Find us on the NYSE as BRO. Brown & Brown Legal Entities: https://linktr.ee/brownbrowninc
At GEICO, we offer a rewarding career where your ambitions are met with endless possibilities. Every day we honor our iconic brand by offering quality coverage to millions of customers and being there when they need us most. We thrive on relentless innovation to exceed our customers' expectations while making a real impact on local communities nationwide. Founded in 1936, GEICO is a member of the Berkshire Hathaway family of companies and one of the largest auto insurers in the United States.
Helvetia Baloise is the largest multi-line insurer in Switzerland and one of the leading insurance groups in Europe. Every day, more than 22,000 employees are committed to supporting around 13 million customers with insurance, pension and financial solutions – from private individuals and SMEs to international customer groups such as speciality and reinsurance. Headquartered in Basel, Switzerland, Helvetia Baloise is active in a total of eight European markets and in the global speciality markets, combining strong Swiss roots with a clear international orientation. Helvetia Baloise creates security and opens up opportunities, both now and in the future. Through profitable growth and business activities geared towards long-term stability, we facilitate individual solutions for customers, secure an attractive and reliable investment for our shareholders, promote strong partnerships and offer our employees attractive prospects. The Helvetia Baloise Holding Ltd share (HBAN) is traded on SIX Swiss Exchange.
Over 50 Million people worldwide have chosen Aflac because of our commitment to providing customers with the confidence that comes from knowing they have assistance in being prepared for whatever life may bring. With Aflac, whether you're a large business or a small one, you can provide your employees with the kind of benefits they’d expect from a bigger company, helping your business stand out from the crowd. Hundreds of thousands of businesses across the United States already make Aflac available to their employees—at no direct cost to their company. Choose from a wide range of products that can help your employees with health events—from accidents, to disability, to cancer, to life insurance. Your employees enjoy benefits from Aflac, all employee-paid. Please check out Aflac.com for more information.
What makes Lockton stand apart is also what makes us better: independence. Our private ownership empowers our 13,100+ Associates doing business in over 140+ countries to focus solely on clients' risk and insurance needs. With expertise that reaches around the globe, we deliver the deep understanding needed to accomplish remarkable results.
ICICI Lombard is one of the leading private general insurance company in the country. The Company offers a well-diversified range of products through multiple distribution channels, including motor, health, crop, fire, personal accident, marine, engineering, and liability insurance. With a legacy of over 2 decades, ICICI Lombard is committed to customer centricity with its brand philosophy of ‘Nibhaye Vaade’. The company has issued over 37.6 million policies, over 3.2 million claims processed and has a Gross Written Premium (GWP) of ₹282.58 billion for the year ended March 31, 2025. ICICI Lombard has 328 branches and 15,123 employees, as on March 31, 2025. ICICI Lombard has been a pioneer in the industry and is one of the first large-scale insurance company in India to migrate its entire core systems to the cloud. With a strong focus on being digital-led and agile, it has launched several tech-driven innovations — including one of the industry-first Face Scan feature on its signature insurance and wellness app, IL TakeCare, which has received over 16.6 million downloads, as on June 30, 2025. * The company has won several prestigious awards- including the Insurance Asia, ICC Emerging Asia Insurance, ET BFSI Exceller, ET CIO, ICAI, FICCI Insurance, Contact Center World Global, and CSR Times in recognition of its various initiatives. For more details log on to https://www.icicilombard.com/. You can also connect with us via IL TakeCare App | RIA WhatsApp: 7738282666 *As per public disclosure.
Founded in October 1949, The People’s Insurance Company (Group) of China is the first nation-wide insurance company in the People’s Republic of China and has developed into a leading large-scale integrated insurance financial group in the PRC, ranking 208th on the Global 500 (2014) published by the Fortune magazine. The Company is an investment holding company. The Company operates its property and casualty insurance business through PICC Property and Casualty Company.The Company operates its life and health insurance businesses through PICC Life Insurance Company and PICC Health Insurance Company , The Company centrally and professionally manages most of its insurance assets through PICC Asset Management Company and PICC Investment Holding which is a professional investment company specializing in real estate investments. The Company also carries out non-transactional businesses such as equity and debt investments in insurance and non-insurance capital within and outside the Group through PICC Capital Investment Management Company.The Company has also made strategic investments in non-insurance financial businesses such as banking and trust.
Established in July 2005, Sunshine Insurance Group has experienced sustainable development, now ranking among the Top 7 insurance groups in China, with an annual business income of $12.6 billion in 2016. Sunshine is composed of Property and Casualty Insurance, Life Insurance, Credit and Guarantee Insurance, Asset Management, Union Hospital and HFAX. In addition, Sunshine acquired the only six-star hotel Baccarat, which is located in Manhattan, New York. The vision of Sunshine is to be a financial insurance group with humanity and vitality and our mission is to let our clients enjoy more sunshine. Since establishment, Sunshine has created over 170,000 jobs, served 180 million clients and donated more than $16.7 million to charity work. Sunshine has built up strategic partnerships with world-leading insurance and finance companies, such as Swiss Re, Morgan Stanley, UBS, Blackstone Group, etc. Embracing the future, Sunshine is dedicated to a new path of development, integrating four pillars of “Data Sunshine”, “Financial Sunshine”, “Health Care Sunshine” and “International Sunshine”. Building on its strengths and remaining people-oriented and technology-driven, Sunshine welcomes talents from all over the world to fulfill their personal goals while achieving a successful career.
At Liberty Mutual, we believe progress happens when people feel secure. For more than 110 years we have helped people and businesses embrace today and confidently pursue tomorrow by providing protection for the unexpected and delivering it with care. A Fortune 100 company with more than 40,000 employees in 28 countries and economies, we are the ninth largest global property and casualty insurer and generate more than $50 billion in annual consolidated revenue. We operate through three strategic business units: US Retail Markets, providing auto, home, renters and other personal and small commercial lines property and casualty insurance to individuals and small businesses countrywide; Global Risk Solutions, delivering a full range of comprehensive commercial and specialty insurance, reinsurance and surety solutions to mid-size and large businesses worldwide; and Liberty Mutual Investments, deploying more than $100 billion of long-term capital globally across its integrated platform to drive economic growth, power innovation and secure Liberty Mutual’s promises. For more information, visit www.libertymutualinsurance.com.
Latest updates, reports, and threat intel affecting the global network.
In late December, 2025, Dan Reynolds, the editor in chief of Risk & Insurance, caught up with Peter Macdonald, the chief claims officer for...
In the cyber insurance space, underwriters are challenged with an ever-evolving new risk landscape of AI.
Munich Re Specialty, the global specialty insurance business of Munich Re Group, has announced the upcoming retirements of Greg Barats,...
Princeton, NJ – Munich Re Specialty-North America (MRS-NA) has launched a new Life Science business, expanding its capabilities in one of...
In an interview, Munich Re Specialty Senior Vice President Jim Craig talked about the risk that accompanies innovation and the important...
Net result rises to €5.2bn for Q1–3; Property-casualty reinsurance & Global Specialty Insurance: Below-average major-loss expenditure...
The evolution of precision medicine has transformed the life science industry. The identification of biomarkers and genes associated with...
Gia Snape of Insurance Business America sat down with Tom Wallace, chief underwriting officer, binding authorities and Hayley Todd,...
Princeton, NJ (October 15, 2025) – Munich Re Specialty has launched an admitted inland marine insurance product to complement its existing...
Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.
Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.
Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.
Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.
Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.