What is the official website of NM Office of Superintendent of Insurance (OSI) ?

The official website of NM Office of Superintendent of Insurance (OSI) is https://www.osi.state.nm.us/.

What is NM Office of Superintendent of Insurance (OSI)'s cybersecurity risk score?

NM Office of Superintendent of Insurance (OSI) has an AI-generated cybersecurity risk score of 746 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has NM Office of Superintendent of Insurance (OSI) experienced?

According to Rankiteo, NM Office of Superintendent of Insurance (OSI) currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has NM Office of Superintendent of Insurance (OSI) been affected by any supply chain cyber incidents ?

According to Rankiteo, NM Office of Superintendent of Insurance (OSI) has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does NM Office of Superintendent of Insurance (OSI) have SOC 2 Type 1 certification ?

According to Rankiteo, NM Office of Superintendent of Insurance (OSI) is not certified under SOC 2 Type 1.

Does NM Office of Superintendent of Insurance (OSI) have SOC 2 Type 2 certification ?

According to Rankiteo, NM Office of Superintendent of Insurance (OSI) does not hold a SOC 2 Type 2 certification.

Does NM Office of Superintendent of Insurance (OSI) comply with GDPR ?

According to Rankiteo, NM Office of Superintendent of Insurance (OSI) is not listed as GDPR compliant.

Does NM Office of Superintendent of Insurance (OSI) have PCI DSS certification ?

According to Rankiteo, NM Office of Superintendent of Insurance (OSI) does not currently maintain PCI DSS compliance.

Does NM Office of Superintendent of Insurance (OSI) comply with HIPAA ?

According to Rankiteo, NM Office of Superintendent of Insurance (OSI) is not compliant with HIPAA regulations.

Does NM Office of Superintendent of Insurance (OSI) have ISO 27001 certification ?

According to Rankiteo,NM Office of Superintendent of Insurance (OSI) is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does NM Office of Superintendent of Insurance (OSI) operate in ?

NM Office of Superintendent of Insurance (OSI) operates primarily in the Insurance industry.

How many employees does NM Office of Superintendent of Insurance (OSI) have ?

NM Office of Superintendent of Insurance (OSI) employs approximately 25 people worldwide.

Does NM Office of Superintendent of Insurance (OSI) own any subsidiaries ?

NM Office of Superintendent of Insurance (OSI) presently has no subsidiaries across any sectors.

How many LinkedIn followers does NM Office of Superintendent of Insurance (OSI) have ?

NM Office of Superintendent of Insurance (OSI)'s official LinkedIn profile has approximately 215 followers.

What is the NAICS classification code for NM Office of Superintendent of Insurance (OSI) ?

NM Office of Superintendent of Insurance (OSI) is classified under the NAICS code 524, which corresponds to Insurance Carriers and Related Activities.

Does NM Office of Superintendent of Insurance (OSI) have a Crunchbase profile ?

No, NM Office of Superintendent of Insurance (OSI) does not have a profile on Crunchbase.

Does NM Office of Superintendent of Insurance (OSI) have a LinkedIn profile ?

Yes, NM Office of Superintendent of Insurance (OSI) maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/new-mexico-osi.

How many cybersecurity incidents has NM Office of Superintendent of Insurance (OSI) experienced ?

As of July 2, 2026, Rankiteo reports that NM Office of Superintendent of Insurance (OSI) has experienced 1 cybersecurity incidents.

How many peer or competitor companies does NM Office of Superintendent of Insurance (OSI) have ?

NM Office of Superintendent of Insurance (OSI) has an estimated 15,582 peer or competitor companies worldwide.

What types of cybersecurity incidents has NM Office of Superintendent of Insurance (OSI) faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

NOSI

Boost Score +25 with badge (5 left)

746

/1000

Moderate

771

/1000

Fair

NM Office of Superintendent of Insurance (OSI) Vendor Cyber Rating & Cyber Score

nm.us

Add Your Compliance Badge

The Office of Superintendent of Insurance (OSI) is New Mexico’s agency for oversight and regulation of insurance. OSI oversees private health and life insurance, auto insurance, business insurance, home insurance, and title insurance. We review premium rates and other plan details to ensure insurance is reliable, the company is financially solvent, and rates are fair and reasonable. We also oversee producers (formerly known as brokers and agents) who sell insurance in New Mexico. When people have problems with their insurance, OSI helps by processing complaints, resolving appeals and grievances, and holding hearings. If needed, OSI takes enforcement action against individuals or companies that violate the law. OSI also combats insurance

NOSI A.I CyberSecurity Scoring

Scoring History

NOSI

NM Office of Superintendent of Insurance (OSI) CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

NM Office of Superi...

Cyber Attack

Malware = 75

10/2023

NMO1046171023

Loading…

A.I.

NOSI Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for NOSI

Incidents vs Insurance Industry Avg (This Year)

No incidents recorded for NM Office of Superintendent of Insurance (OSI) in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for NM Office of Superintendent of Insurance (OSI) in 2026.

Incident Types NOSI vs Insurance Industry Avg (This Year)

No incidents recorded for NM Office of Superintendent of Insurance (OSI) in 2026.

Incident History - NOSI (X = Date, Y = Severity)

Loading…

SUBSIDIARY

NM Office of Superintendent of Insurance (OSI) Subsidiaries

Parent Company

NOSI

Insurance

Website: https://www.osi.state.nm.us/

Company Size: 51-200 employees

No subsidiary data available for this company.

Loading…

NM Office of Superintendent of Insurance (OSI) Similar Companies

Bajaj Life

bajajlifeinsurance.com

Bajaj Life Insurance is among the fastest-growing life insurance companies in India, offering a wide range of plans, from ULIPs and term insurance to retirement and child policies, helping you secure your future and achieve your life goals. With over 3.85 crore policyholders, an AUM of ₹1.3 Lakh Crores, a 99.29% claim settlement ratio, and a 343% solvency margin, we are committed to delivering financial protection, wealth creation, and peace of mind at every stage of life. Our Popular Life Insurance Products: ULIPs (Unit Linked Insurance Plans): Zero Allocation Charge ULIP designed for long-term wealth creation, with return of mortality charges. Term Insurance Plans: Includes India’s first Term Plan for Diabetics, offering affordable protection for all. SISO (Systematic In/Systematic Out): A smart investment approach for disciplined wealth building. Bajaj Life ACE: A flexible plan that lets you choose income options as per your financial needs. Bajaj Superwoman Term: A term protection solution specifically designed for women. Our extensive service on WhatsApp Conversational Platform ensures convenience and easy accessibility to our customer right at their fingertips. With a strong distribution network of 597 branches, over 1.62 lakh insurance consultants, and partnerships with India’s leading banks, Bajaj Life ensures easy access and customer-first service. We pride ourselves in creating a culture that fosters an innovative mindset and collaboration among our 25K+ employees who have made Bajaj Life a Great Place to Work for. Recent Accolades: 1. World’s Digital Insurance Award 2025 for Innovative Smart Assist Platform 2. Best Employer India by Kincentric, 2023, 2022, 2021 3. India’s No. 1 Top Riser Brand by Kantar BrandZ, 2022 Reach out to: 020-6712 1212| For complaints/queries: [email protected] To buy, call 18002094040 or Visit our website: https://www.bajajlifeinsurance.com

HDFC Life

cb hdfclife.com

HDFC Life, one of India’s leading private life insurance companies, offers a range of individual and group insurance solutions. It is a joint venture between Housing Development Finance Corporation Limited (HDFC), India’s leading housing finance institution and abrdn plc, the leading provider of financial services in the United Kingdom. HDFC Life’s product portfolio comprises solutions, which meet various customer needs such as Protection, Pension, Savings, Investment and Health. Customers have the added advantage of customizing the plans, by adding optional benefits called riders, at a nominal price. The company currently has 37 retail and 8 group products in its portfolio, along with 9 optional riders catering to the savings, investment, protection and retirement needs of customers. HDFC Life continues to have one of the widest reaches among new insurance companies with about 500 branches in India touching customers in over 900 cities and towns. The company has also established a liaison office in Dubai. HDFC Life has a strong presence in its existing markets with a strong base of Financial Consultants. For more information, please visit our website, www.hdfclife.com

Marsh Risk

marsh.com

We help our clients and colleagues grow — and our communities thrive — by protecting and promoting possibility. We seek better ways to manage risk and define more effective paths to the right outcome. We go beyond risk to rewards for our clients, our company, our colleagues, and the communities in which we serve. Marsh Risk is a part of Marsh. Together with Mercer, Guy Carpenter, and Oliver Wyman, we help organizations build resilience and competitive advantages from every angle. With annual revenue over $24 billion and more than 90,000 colleagues in 130 countries, Marsh helps build the confidence to thrive through the power of perspective.

USI Insurance Services

cb usi.com

USI is one of the largest insurance brokerage and consulting firms in the world, delivering property and casualty, employee benefits, personal risk, program and retirement solutions to large risk management clients, middle market companies, smaller firms and individuals. Headquartered in Valhalla, New York, USI connects over 10,500 industry-leading professionals across approximately 200 offices to serve clients’ local, national and international needs. USI has become a premier insurance brokerage and consulting firm by leveraging the USI ONE Advantage®, an interactive platform that integrates proprietary and innovative client solutions, networked local resources and enterprise-wide collaboration to deliver customized results with positive, bottom-line impact. USI attracts best-in-class industry talent with a long history of deep and continuing investment in our local communities. For more information, visit usi.com.

Gallagher

cb linktr.ee

Gallagher, a global insurance brokerage, risk management, and consulting firm, serves communities around the globe, helping clients address risk, protecting assets, and recovering from losses. The products and services we provide keep businesses and institutions running, and enable individuals and families to face their future with confidence. Gallagher provides retail and wholesale property and casualty brokerage, alternative risk transfer services, employee benefit consulting, and actuarial services. Gallagher also offers claims and information management, risk control consulting and appraisal services, human resource consulting, and retirement services. Follow us on social: Instagram: http://instagram.com/gallagherglobal Facebook: http://www.facebook.com/GallagherGlobal Twitter: https://twitter.com/GallagherGlobal YouTube: https://www.youtube.com/GallagherGlobal

中国人民保险 PICC

picc.com

Founded in October 1949, The People’s Insurance Company (Group) of China is the first nation-wide insurance company in the People’s Republic of China and has developed into a leading large-scale integrated insurance financial group in the PRC, ranking 208th on the Global 500 (2014) published by the Fortune magazine. The Company is an investment holding company. The Company operates its property and casualty insurance business through PICC Property and Casualty Company.The Company operates its life and health insurance businesses through PICC Life Insurance Company and PICC Health Insurance Company , The Company centrally and professionally manages most of its insurance assets through PICC Asset Management Company and PICC Investment Holding which is a professional investment company specializing in real estate investments. The Company also carries out non-transactional businesses such as equity and debt investments in insurance and non-insurance capital within and outside the Group through PICC Capital Investment Management Company.The Company has also made strategic investments in non-insurance financial businesses such as banking and trust.

Seguros SURA

segurossura.com

SURA es una compañía que integra en diferentes empresas soluciones en seguros y seguridad social. Su marca se presenta a los clientes como Seguros SURA, ARL SURA y EPS SURA. Existen otras marcas y empresas, especialmente de prestación de servicios, que hacen parte de la Compañía. Nuestra experiencia y solidez está soportada en 80 años de trayectoria en el mercado de los seguros. Tiempo en el que hemos acompañado a los latinoamericanos en todas las etapas de la vida con productos que se ajustan a sus necesidades de protección. Para responder a nuestras promesas de aseguramiento contamos con una estructura sólida de negocios, permitiéndonos construir relaciones de largo plazo con nuestros clientes basadas en la tranquilidad de estar bien protegidos. La vida y el patrimonio económico son una prioridad para SURA, por ello ofrecemos un amplio portafolio de soluciones.

Swiss Re

cb swissre.com

The Swiss Re Group is a leading wholesale provider of reinsurance, insurance and other insurance-based forms of risk transfer. Dealing direct and working through brokers, its global client base consists of insurance companies, mid-to-large-sized corporations and public sector clients. From standard products to tailor-made coverage across all lines of business, Swiss Re deploys its capital strength, expertise and innovation power to enable the risk taking upon which enterprise and progress in society depend. Founded in Zurich, Switzerland, in 1863, Swiss Re serves clients through a network of over 70 offices globally and is rated "AA-" by Standard & Poor's, "Aa3" by Moody's and "A+" by A.M. Best. Registered shares in the Swiss Re Group holding company, Swiss Re Ltd, are listed in accordance with the Main Standard on the SIX Swiss Exchange and trade under the symbol SREN. We're smarter together. For more information about Swiss Re Group, please visit: www.swissre.com, follow us on X @SwissRe and subscribe our YouTube channel @swissretv.

Canada Life

canadalife.com

At Canada Life, we’re focused on improving the financial, physical and mental well-being of Canadians. Whether handling policy claims, help growing and protecting clients’ retirement and investment savings, providing workplace mental health support for all employers or helping build stronger communities by investing in community projects, we are committed to putting the customer first in all that we do. That trust is built on the dedication, skill and energy of our employees and advisors and their commitment to our customers and to our communities. Canada Life is a subsidiary of Great-West Lifeco Inc. and is a member of the Power Corporation group of companies.

Loading…

NEWS

NM Office of Superintendent of Insurance (OSI) CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

December 22, 2023 08:00 AM

New Mexico OSI Website Back Online Following Cyber Hack

OSI Superintendent Alice Kane. OSI News: Today, the New Mexico Office of Superintendent of Insurance (OSI) announced that its website is now...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-55790

SUMMARY

Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.22 and 4.0.0-RC1 through 4.17.15, an attacker with only a GitHub account can plant a JavaScript payload in a craftcms/cms issue title. When a Craft admin uses the CraftSupport widget’s "Give feedback" screen and types a search term that returns the poisoned issue, the payload executes in the admin’s control panel session. No control panel account or elevated privileges are required on the attacker’s side. This issue has been fixed in versions 4.17.16 and 5.9.23.

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

cvss4

Base Score: 7.4

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-50284

SUMMARY

Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.21 and 4.0.0-RC1 through 4.17.14, theAssetsController::actionDeleteFolder() only requires the deleteAssets:<volume-uid> permission for the target folder. It never enforces deletePeerAssets:<volume-uid>, even though Assets::deleteFoldersByIds() cascades deletion to every descendant folder and every asset inside, regardless of the uploader's assigned privileges. A low-privilege user who has been granted folder-management rights on a shared volume can therefore destroy assets uploaded by other users (peer assets), bypassing the per-asset peer-permission check that the sibling actionDeleteAsset endpoint correctly applies. This issue has been fixed in versions 4.17.15 and 5.9.22.

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-50283

SUMMARY

Craft CMS is a content management system (CMS). Versions 5.0.0-RC1 through 5.9.20, and 4.0.0-RC1 through 4.17.13 contain an authorization issue in the AssetsController::actionReplaceFile that can delete a source asset without source delete permission by supplying both assetId and sourceAssetId. AssetsController::actionReplaceFile() supports replacing a target asset file using another existing asset as the source. The action loads: assetId -> $assetToReplace and sourceAssetId -> $sourceAsset, then enforces replace permissions using ($assetToReplace ?: $sourceAsset). When both IDs are provided, this expression resolves to the target asset so no permission check is performed against the source asset volume. When both assets are present, Craft copies the source file into the target and then deletes the source asset. There is no deletion check for for the source asset. An authenticated user who can replace files in one volume can delete assets in another volume where they do not have delete permission, as long as they can obtain a sourceAssetId, leading to broken content references and data loss. This issue has been fixed in versions 4.17.14 and 5.9.21.

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-14440

SUMMARY

Description: To issue and renew TLS certificates on behalf of customers, Cloudflare's Universal SSL feature automatically manages the CAA RRset for the customer's zone. This auto-managed RRset is permissive by design (e.g. 'issue "letsencrypt.org"' without parameters). On Universal SSL zones, Cloudflare's authoritative DNS serves this auto-managed RRset at query time, superseding any customer-configured CAA records on the zone. When a customer publishes a stricter CAA record using the RFC 8657 accounturi or validationmethods parameters, the Certificate Authority does not observe those parameters when evaluating the served RRset under RFC 8659. As a result, the RFC 8657 account-binding and validation-method-binding protections are not enforced end-to-end on Universal SSL zones. Successful exploitation could result in issuance of a browser-trusted TLS certificate to an attacker, enabling MITM against the affected domain. Exploitation is non-trivial in practice: an attacker would need to hold an ACME account at one of the Certificate Authorities in the served CAA RRset and to simultaneously satisfy domain control validation across the multiple geographically distinct Network Perspectives the CA relies on for Multi-Perspective Issuance Corroboration. Cloudflare prefixes are anycast-announced from hundreds of locations globally, raising the bar against single-vantage-point BGP hijacks. Any resulting misissuance of a browser-trusted certificate is subject to Certificate Transparency logging required by major browsers, and would be visible to CT monitoring. Mitigation: Customers requiring strict RFC 8657 enforcement need to disable Universal SSL on the affected zone. Universal SSL's automatic CAA management and customer-set RFC 8657 accounturi and validationmethods enforcement are mutually exclusive by the nature of the issue, so there is no in-product workaround that preserves both. Certificate Transparency monitoring is recommended for all customers as a general detection control. Credits: David Osipov (ORCID: https://orcid.org/0009-0005-2713-9242), independent researcher

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

cvss4

Base Score: 7.6

Complexity: HIGH

CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-14422

SUMMARY

Out of bounds read and write in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…