Comparison Overview

Nevada Gold & Casinos

VS

Rush Street Interactive

Nevada Gold & Casinos

None
Last Update: 2025-11-27
View Profile
Between 800 and 849
http://www.nevadagold.com

Nevada Gold is actively seeking collaborations in owning, developing and managing gaming facilities, both domestically and internationally. Personal service is the hallmark of the Nevada Gold's style. The ultimate goal is to provide an extraordinary entertainment experience, while promoting growth and increased profitability for the facilities Nevada Gold owns and manages. Leadership focuses on re-aligning the company's assets, including divesting non-core assets and forming strategic partnerships for new gaming opportunities. Nevada Gold's team is committed to building long-term relationships with those they serve, always adding value to client endeavors. Our team members have experience in gaming markets across the globe. Nevada Gold (NYSE MKT: UWN) is headquartered in Houston, Texas.

NAICS: 7132
NAICS Definition: Gambling Industries
Employees: 18
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0
View Profile

Rush Street Interactive

Last Update: 2025-11-21
Between 750 and 799
http://www.rushstreetinteractive.com

Rush Street Interactive (NYSE: RSI) is a market leader in online casino and sports betting, currently operating real-money gaming with our brands: BetRivers.com, PlaySugarHouse.com, and RushBet.co. We’re building bridges between online, social and land-based gaming businesses to create amazing, integrated experiences that keep players in the game. RSI was named the 2022 EGR North America Awards Operator of the Year, Customer Service Operator of the Year, and Social Gaming Operator of the Year. RSI is committed to industry-leading responsible gaming practices and seeks to provide its customers with the resources and services they need to play responsibly. For more information, visit www.rushstreetinteractive.com.

NAICS: 7132
NAICS Definition: Gambling Industries
Employees: 614
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/defaultcompany.jpeg
Nevada Gold & Casinos
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/rush-street-interactive.jpeg
Rush Street Interactive
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Nevada Gold & Casinos
100%
Compliance Rate
0/4 Standards Verified
Rush Street Interactive
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Gambling Facilities and Casinos Industry Average (This Year)

No incidents recorded for Nevada Gold & Casinos in 2025.

Incidents vs Gambling Facilities and Casinos Industry Average (This Year)

No incidents recorded for Rush Street Interactive in 2025.

Incident History — Nevada Gold & Casinos (X = Date, Y = Severity)

Nevada Gold & Casinos cyber incidents detection timeline including parent company and subsidiaries

Incident History — Rush Street Interactive (X = Date, Y = Severity)

Rush Street Interactive cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/defaultcompany.jpeg
Nevada Gold & Casinos
Incidents

No Incident

https://images.rankiteo.com/companyimages/rush-street-interactive.jpeg
Rush Street Interactive
Incidents

No Incident

FAQ

Nevada Gold & Casinos company demonstrates a stronger AI Cybersecurity Score compared to Rush Street Interactive company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Rush Street Interactive company has disclosed a higher number of cyber incidents compared to Nevada Gold & Casinos company.

In the current year, Rush Street Interactive company and Nevada Gold & Casinos company have not reported any cyber incidents.

Neither Rush Street Interactive company nor Nevada Gold & Casinos company has reported experiencing a ransomware attack publicly.

Neither Rush Street Interactive company nor Nevada Gold & Casinos company has reported experiencing a data breach publicly.

Neither Rush Street Interactive company nor Nevada Gold & Casinos company has reported experiencing targeted cyberattacks publicly.

Neither Nevada Gold & Casinos company nor Rush Street Interactive company has reported experiencing or disclosing vulnerabilities publicly.

Neither Nevada Gold & Casinos nor Rush Street Interactive holds any compliance certifications.

Neither company holds any compliance certifications.

Neither Nevada Gold & Casinos company nor Rush Street Interactive company has publicly disclosed detailed information about the number of their subsidiaries.

Rush Street Interactive company employs more people globally than Nevada Gold & Casinos company, reflecting its scale as a Gambling Facilities and Casinos.

Neither Nevada Gold & Casinos nor Rush Street Interactive holds SOC 2 Type 1 certification.

Neither Nevada Gold & Casinos nor Rush Street Interactive holds SOC 2 Type 2 certification.

Neither Nevada Gold & Casinos nor Rush Street Interactive holds ISO 27001 certification.

Neither Nevada Gold & Casinos nor Rush Street Interactive holds PCI DSS certification.

Neither Nevada Gold & Casinos nor Rush Street Interactive holds HIPAA certification.

Neither Nevada Gold & Casinos nor Rush Street Interactive holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

ThingsBoard in versions prior to v4.2.1 allows an authenticated user to upload malicious SVG images via the "Image Gallery", leading to a Stored Cross-Site Scripting (XSS) vulnerability. The exploit can be triggered when any user accesses the public API endpoint of the malicious SVG images, or if the malicious images are embedded in an `iframe` element, during a widget creation, deployed to any page of the platform (e.g., dashboards), and accessed during normal operations. The vulnerability resides in the `ImageController`, which fails to restrict the execution of JavaScript code when an image is loaded by the user's browser. This vulnerability can lead to the execution of malicious code in the context of other users' sessions, potentially compromising their accounts and allowing unauthorized actions.

Published
Date
2025-11-27
Updated
Date
2025-11-27
Risk Information
cvss4
Base: 6.2
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to to verify that the token used during the code exchange originates from the same authentication flow, which allows an authenticated user to perform account takeover via a specially crafted email address used when switching authentication methods and sending a request to the /users/login/sso/code-exchange endpoint. The vulnerability requires ExperimentalEnableAuthenticationTransfer to be enabled (default: enabled) and RequireEmailVerification to be disabled (default: disabled).

Published
Date
2025-11-27
Updated
Date
2025-11-27
Risk Information
cvss3
Base: 9.9
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
References
Description

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to sanitize team email addresses to be visible only to Team Admins, which allows any authenticated user to view team email addresses via the GET /api/v4/channels/{channel_id}/common_teams endpoint

Published
Date
2025-11-27
Updated
Date
2025-11-27
Risk Information
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
References
Description

Exposure of email service credentials to users without administrative rights in Devolutions Server.This issue affects Devolutions Server: before 2025.2.21, before 2025.3.9.

Published
Date
2025-11-27
Updated
Date
2025-11-27
References
Description

Exposure of credentials in unintended requests in Devolutions Server.This issue affects Server: through 2025.2.20, through 2025.3.8.

Published
Date
2025-11-27
Updated
Date
2025-11-27
References