ISO 27001 Certificate
SOC 1 Type I Certificate
SOC 2 Type II Certificate
PCI DSS
HIPAA
RGPD
Internal validation & live display
Multiple badges & continuous verification
Faster underwriting decisions
ISOSOC2 Type 1SOC2 Type 2PCI DSSHIPAAGDPR

Northwestern Mutual is here for what’s most important—helping families and businesses experience the freedom of financial security for over 160 years. Through our personalized, holistic approach, including both insurance and investments, we’re helping people make the most of life today, and for days to come. Through advisors who stay with you every step of the way, leading insights and technology, and digital-first experiences, we’re here to show our clients a better way to money. In managing $265.0 billion in assets, $28.1 billion in revenues, and more than $1.8 trillion worth of life insurance protection in force, Northwestern Mutual has had the privilege of being there for more than 4.5 million people who rely on us for life, disability income and long-term care insurance, annuities, brokerage and advisory services, trust services, and discretionary portfolio management solutions. The company is trusted with more than $125 billion of client assets as a part of its wealth management company and investment services. We are strong supporters of our financial workforce nationwide as well as our home office professionals in Milwaukee, WI. We’re continuing to grow, and we believe diversity makes us stronger as we help shape the future of financial security. Help us get to know you by applying for open positions here: https://jobs.northwesternmutual.com/ Financial representatives and interns are independent contractors and not employees of Northwestern Mutual. https://www.northwesternmutual.com/social-media-guidelines

Northwestern Mutual A.I CyberSecurity Scoring

Northwestern Mutual

Company Details

Linkedin ID:

northwestern-mutual

Employees number:

37,463

Number of followers:

434,603

NAICS:

52

Industry Type:

Financial Services

Homepage:

northwesternmutual.com

IP Addresses:

0

Company ID:

NOR_1992313

Scan Status:

In-progress

AI scoreNorthwestern Mutual Risk Score (AI oriented)

Between 650 and 699

https://images.rankiteo.com/companyimages/northwestern-mutual.jpeg
Northwestern Mutual Financial Services
Updated:
  • Powered by our proprietary A.I cyber incident model
  • Insurance preferes TPRM score to calculate premium
globalscoreNorthwestern Mutual Global Score (TPRM)

XXXX

https://images.rankiteo.com/companyimages/northwestern-mutual.jpeg
Northwestern Mutual Financial Services
  • Instant access to detailed risk factors
  • Benchmark vs. industry & size peers
  • Vulnerabilities
  • Findings

Northwestern Mutual Company CyberSecurity News & History

Past Incidents
3
Attack Types
2
EntityTypeSeverityImpactSeenBlog DetailsIncident DetailsView
Northwestern Mutual Life Insurance CompanyBreach5025/2023
Rankiteo Explanation :
Attack limited on finance or reputation

Description: The Maine Office of the Attorney General reported that Northwestern Mutual Life Insurance Company experienced an external system breach (hacking) on May 30, 2023, which compromised the Social Security Numbers of 9,923 individuals. The breach was discovered on the same day and the notification to affected individuals was made on August 21, 2023. Identity theft protection services for 24 months, including credit monitoring and identity restoration through Kroll, were offered to affected individuals.

Northwestern Mutual Life Insurance CompanyBreach10058/2017
Rankiteo Explanation :
Attack threatening the organization's existence

Description: The California Office of the Attorney General reported a data breach involving Northwestern Mutual Life Insurance Company on October 3, 2017, concerning a breach that occurred on August 31, 2017. The breach involved a computer scam that potentially compromised personally identifiable information, including names, Social Security numbers, and health information. The total number of affected individuals is currently unknown.

The Northwestern Mutual Life Insurance CompanyRansomware100410/2023
Rankiteo Explanation :
Attack with significant impact with customers data leaks

Description: The Washington State Office of the Attorney General reported a ransomware cyberattack affecting The Northwestern Mutual Life Insurance Company on February 29, 2024. The breach, which occurred between October 29 and November 2, 2023, potentially exposed the personal information of 1,025 individuals, including names and Social Security numbers.

Northwestern Mutual Life Insurance Company
Breach
Severity: 50
Impact: 2
Seen: 5/2023
Blog:
Rankiteo Explanation
Attack limited on finance or reputation

Description: The Maine Office of the Attorney General reported that Northwestern Mutual Life Insurance Company experienced an external system breach (hacking) on May 30, 2023, which compromised the Social Security Numbers of 9,923 individuals. The breach was discovered on the same day and the notification to affected individuals was made on August 21, 2023. Identity theft protection services for 24 months, including credit monitoring and identity restoration through Kroll, were offered to affected individuals.

Northwestern Mutual Life Insurance Company
Breach
Severity: 100
Impact: 5
Seen: 8/2017
Blog:
Rankiteo Explanation
Attack threatening the organization's existence

Description: The California Office of the Attorney General reported a data breach involving Northwestern Mutual Life Insurance Company on October 3, 2017, concerning a breach that occurred on August 31, 2017. The breach involved a computer scam that potentially compromised personally identifiable information, including names, Social Security numbers, and health information. The total number of affected individuals is currently unknown.

The Northwestern Mutual Life Insurance Company
Ransomware
Severity: 100
Impact: 4
Seen: 10/2023
Blog:
Rankiteo Explanation
Attack with significant impact with customers data leaks

Description: The Washington State Office of the Attorney General reported a ransomware cyberattack affecting The Northwestern Mutual Life Insurance Company on February 29, 2024. The breach, which occurred between October 29 and November 2, 2023, potentially exposed the personal information of 1,025 individuals, including names and Social Security numbers.

Ailogo

Northwestern Mutual Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

🔒
Incident Predictions locked
Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

🔒
A.I. Risk Score Predictions locked
Access Monitoring Plan
statics

Underwriter Stats for Northwestern Mutual

Incidents vs Financial Services Industry Average (This Year)

No incidents recorded for Northwestern Mutual in 2025.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Northwestern Mutual in 2025.

Incident Types Northwestern Mutual vs Financial Services Industry Avg (This Year)

No incidents recorded for Northwestern Mutual in 2025.

Incident History — Northwestern Mutual (X = Date, Y = Severity)

Northwestern Mutual cyber incidents detection timeline including parent company and subsidiaries

Northwestern Mutual Company Subsidiaries

SubsidiaryImage

Northwestern Mutual is here for what’s most important—helping families and businesses experience the freedom of financial security for over 160 years. Through our personalized, holistic approach, including both insurance and investments, we’re helping people make the most of life today, and for days to come. Through advisors who stay with you every step of the way, leading insights and technology, and digital-first experiences, we’re here to show our clients a better way to money. In managing $265.0 billion in assets, $28.1 billion in revenues, and more than $1.8 trillion worth of life insurance protection in force, Northwestern Mutual has had the privilege of being there for more than 4.5 million people who rely on us for life, disability income and long-term care insurance, annuities, brokerage and advisory services, trust services, and discretionary portfolio management solutions. The company is trusted with more than $125 billion of client assets as a part of its wealth management company and investment services. We are strong supporters of our financial workforce nationwide as well as our home office professionals in Milwaukee, WI. We’re continuing to grow, and we believe diversity makes us stronger as we help shape the future of financial security. Help us get to know you by applying for open positions here: https://jobs.northwesternmutual.com/ Financial representatives and interns are independent contractors and not employees of Northwestern Mutual. https://www.northwesternmutual.com/social-media-guidelines

Loading...
similarCompanies

Northwestern Mutual Similar Companies

Sumitomo Mitsui Banking Corporation – SMBC Group

SMBC Group is a top-tier global financial group. Headquartered in Tokyo and with a 400-year history, SMBC Group offers a diverse range of financial services, including banking, leasing, securities, credit cards, and consumer finance. The Group has more than 150 offices and 86,000 employees worldwide

Dubai Holding

Dubai Holding is a diversified global investment company that continues to power Dubai’s growth across 10 key sectors, including real estate, hospitality, leisure & entertainment, media, ICT, design, education, retail, manufacturing & logistics and science. Since 2004, we have made strides with an

Ameriprise Financial Services, LLC

At Ameriprise Financial, we have been helping people feel more confident about their financial future for 130 years. With extensive investment advice, asset management and insurance capabilities and a nationwide network of approximately 10,000 financial advisors*, we have the strength and expertise

Truist

Truist Financial Corporation is a purpose-driven financial services company committed to inspiring and building better lives and communities. As a leading U.S. commercial bank, Truist has leading market share in many of the high-growth markets across the country. Truist offers a wide range of produc

Ally Financial Inc. (NYSE: ALLY) is a leading digital financial services company and a top 25 U.S. financial holding company offering financial products for consumers, businesses, automotive dealers and corporate clients. NMLS #3015 | #181005 | https://www.nmlsconsumeraccess.org/ Ally's legacy da

We help make money work for the world — managing it, moving it and keeping it safe. As a leading global financial services company at the center of the world’s financial system, we touch nearly 20% of the world’s investable assets. Today we help over 90% of Fortune 100 companies and nearly all the t

Revolut

People deserve more from their money. More visibility, more control, and more freedom. Since 2015, Revolut has been on a mission to deliver just that. Our powerhouse of products help our 50+ million customers get more from their money every day. As we continue our lightning-fast growth,‌ 2 things a

Sparkasse

Sparkassen: Nah, präsent und persönlich Als verlässliche Hausbank stehen wir immer und überall an der Seite unserer Kund:innen und Mitarbeitenden. Mit den Sparkassen können Sie auf exzellente Beratung und einen echten Finanzverbund zählen, der nicht nur Ihre persönlichen Finanzen, sondern auch die f

KPMG US

KPMG is one of the world’s leading professional services firms and the fastest growing Big Four accounting firm in the United States. With 75+ offices and more than 40,000 employees and partners throughout the US, we’re leading the industry in new and exciting ways. Our size and strength make us muc

newsone

Northwestern Mutual CyberSecurity News

October 02, 2025 07:00 AM
How Northwestern Mutual Works to Earn Clients’ Trust by Prioritizing Privacy

October is Cybersecurity Awareness Month so we're taking this opportunity to dive into how we earn your trust by safeguarding some of your...

August 15, 2025 07:00 AM
Fal.Con 2025 Shatters Records for Growth, Attendance and Demand as CrowdStrike Leads Cybersecurity into the Agentic AI Era

CrowdStrike (NASDAQ: CRWD) today announced record-breaking momentum for its flagship conference Fal.Con, which has sold out faster than ever...

August 14, 2025 07:00 AM
Northwestern Mutual picks COO to lead technology efforts

Beth Rodenhuis will return to the financial services company to serve as COO and business architect, overseeing the company's digital...

June 16, 2025 07:00 AM
Getting a Job in Tech in Milwaukee in 2024: The Complete Guide

In 2024, the most in-demand tech jobs in Milwaukee include Software Developers, Data Analysts, and Cybersecurity Specialists.

June 02, 2025 07:00 AM
DTCC appoints Laura Deaner as Chief Information Security Officer

The Depository Trust & Clearing Corporation (DTCC) today announced the appointment of Laura Deaner as Chief Information Security Officer (CISO).

January 22, 2025 08:00 AM
Northwestern Mutual Appoints David Gordon as Chief Digital and Information Officer

Northwestern Mutual announced the appointment of David Gordon as Executive Vice President and Chief Digital and Information Officer.

December 26, 2024 08:00 AM
Milwaukee Cybersecurity Job Market: Trends and Growth Areas for 2024

Explore Milwaukee's cybersecurity job market, trends, and growth areas for 2024. A guide to job openings and in-demand roles in Wisconsin.

December 26, 2024 08:00 AM
Highest Paying Tech Companies in Milwaukee

The city ranks among the top 20 nationwide for tech growth, with major companies like Rockwell Automation and Northwestern Mutual leading the charge.

December 26, 2024 08:00 AM
The Top 10 Best Colleges in Milwaukee for Tech Enthusiasts in 2024

Milwaukee's top tech colleges for 2024 spotlight hands-on learning, career support, and cutting-edge facilities.

faq

Frequently Asked Questions

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.

Northwestern Mutual CyberSecurity History Information

Official Website of Northwestern Mutual

The official website of Northwestern Mutual is http://www.northwesternmutual.com.

Northwestern Mutual’s AI-Generated Cybersecurity Score

According to Rankiteo, Northwestern Mutual’s AI-generated cybersecurity score is 684, reflecting their Weak security posture.

How many security badges does Northwestern Mutual’ have ?

According to Rankiteo, Northwestern Mutual currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Does Northwestern Mutual have SOC 2 Type 1 certification ?

According to Rankiteo, Northwestern Mutual is not certified under SOC 2 Type 1.

Does Northwestern Mutual have SOC 2 Type 2 certification ?

According to Rankiteo, Northwestern Mutual does not hold a SOC 2 Type 2 certification.

Does Northwestern Mutual comply with GDPR ?

According to Rankiteo, Northwestern Mutual is not listed as GDPR compliant.

Does Northwestern Mutual have PCI DSS certification ?

According to Rankiteo, Northwestern Mutual does not currently maintain PCI DSS compliance.

Does Northwestern Mutual comply with HIPAA ?

According to Rankiteo, Northwestern Mutual is not compliant with HIPAA regulations.

Does Northwestern Mutual have ISO 27001 certification ?

According to Rankiteo,Northwestern Mutual is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Industry Classification of Northwestern Mutual

Northwestern Mutual operates primarily in the Financial Services industry.

Number of Employees at Northwestern Mutual

Northwestern Mutual employs approximately 37,463 people worldwide.

Subsidiaries Owned by Northwestern Mutual

Northwestern Mutual presently has no subsidiaries across any sectors.

Northwestern Mutual’s LinkedIn Followers

Northwestern Mutual’s official LinkedIn profile has approximately 434,603 followers.

NAICS Classification of Northwestern Mutual

Northwestern Mutual is classified under the NAICS code 52, which corresponds to Finance and Insurance.

Northwestern Mutual’s Presence on Crunchbase

No, Northwestern Mutual does not have a profile on Crunchbase.

Northwestern Mutual’s Presence on LinkedIn

Yes, Northwestern Mutual maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/northwestern-mutual.

Cybersecurity Incidents Involving Northwestern Mutual

As of November 27, 2025, Rankiteo reports that Northwestern Mutual has experienced 3 cybersecurity incidents.

Number of Peer and Competitor Companies

Northwestern Mutual has an estimated 29,514 peer or competitor companies worldwide.

What types of cybersecurity incidents have occurred at Northwestern Mutual ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach and Ransomware.

How does Northwestern Mutual detect and respond to cybersecurity incidents ?

Detection and Response: The company detects and responds to cybersecurity incidents through an third party assistance with kroll, and remediation measures with identity theft protection services for 24 months, including credit monitoring and identity restoration..

Incident Details

Can you provide details on each incident ?

Incident : Ransomware

Title: Ransomware Attack on The Northwestern Mutual Life Insurance Company

Description: The Washington State Office of the Attorney General reported a ransomware cyberattack affecting The Northwestern Mutual Life Insurance Company on February 29, 2024. The breach, which occurred between October 29 and November 2, 2023, potentially exposed the personal information of 1,025 individuals, including names and Social Security numbers.

Date Detected: 2024-02-29

Type: Ransomware

Incident : Data Breach

Title: Northwestern Mutual Life Insurance Company Data Breach

Description: A data breach involving Northwestern Mutual Life Insurance Company occurred on August 31, 2017, reported by the California Office of the Attorney General on October 3, 2017. The breach involved a computer scam that potentially compromised personally identifiable information, including names, Social Security numbers, and health information.

Date Detected: 2017-08-31

Date Publicly Disclosed: 2017-10-03

Type: Data Breach

Attack Vector: Computer Scam

Incident : Data Breach

Title: Northwestern Mutual Life Insurance Company Data Breach

Description: An external system breach (hacking) compromised the Social Security Numbers of 9,923 individuals.

Date Detected: 2023-05-30

Date Publicly Disclosed: 2023-08-21

Type: Data Breach

Attack Vector: Hacking

What are the most common types of attacks the company has faced ?

Common Attack Types: The most common types of attacks the company has faced is Breach.

Impact of the Incidents

What was the impact of each incident ?

Incident : Ransomware NOR416072625

Data Compromised: Names, Social security numbers

Incident : Data Breach NOR710072725

Data Compromised: Names, Social security numbers, Health information

Incident : Data Breach NOR531072725

Data Compromised: Social security numbers

Identity Theft Risk: High

What types of data are most commonly compromised in incidents ?

Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Names, Social Security Numbers, , Names, Social Security Numbers, Health Information, and Social Security Numbers.

Which entities were affected by each incident ?

Incident : Ransomware NOR416072625

Entity Name: The Northwestern Mutual Life Insurance Company

Entity Type: Insurance Company

Industry: Insurance

Customers Affected: 1025

Incident : Data Breach NOR710072725

Entity Name: Northwestern Mutual Life Insurance Company

Entity Type: Insurance Company

Industry: Insurance

Incident : Data Breach NOR531072725

Entity Name: Northwestern Mutual Life Insurance Company

Entity Type: Insurance Company

Industry: Insurance

Customers Affected: 9923

Response to the Incidents

What measures were taken in response to each incident ?

Incident : Data Breach NOR531072725

Third Party Assistance: Kroll.

Remediation Measures: Identity theft protection services for 24 months, including credit monitoring and identity restoration

How does the company involve third-party assistance in incident response ?

Third-Party Assistance: The company involves third-party assistance in incident response through Kroll, .

Data Breach Information

What type of data was compromised in each breach ?

Incident : Ransomware NOR416072625

Type of Data Compromised: Names, Social security numbers

Number of Records Exposed: 1025

Sensitivity of Data: High

Incident : Data Breach NOR710072725

Type of Data Compromised: Names, Social security numbers, Health information

Sensitivity of Data: High

Incident : Data Breach NOR531072725

Type of Data Compromised: Social Security Numbers

Number of Records Exposed: 9923

Sensitivity of Data: High

Personally Identifiable Information: Social Security Numbers

What measures does the company take to prevent data exfiltration ?

Prevention of Data Exfiltration: The company takes the following measures to prevent data exfiltration: Identity theft protection services for 24 months, including credit monitoring and identity restoration, .

References

Where can I find more information about each incident ?

Incident : Ransomware NOR416072625

Source: Washington State Office of the Attorney General

Date Accessed: 2024-02-29

Incident : Data Breach NOR710072725

Source: California Office of the Attorney General

Date Accessed: 2017-10-03

Incident : Data Breach NOR531072725

Source: Maine Office of the Attorney General

Where can stakeholders find additional resources on cybersecurity best practices ?

Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: Washington State Office of the Attorney GeneralDate Accessed: 2024-02-29, and Source: California Office of the Attorney GeneralDate Accessed: 2017-10-03, and Source: Maine Office of the Attorney General.

Post-Incident Analysis

What is the company's process for conducting post-incident analysis ?

Post-Incident Analysis Process: The company's process for conducting post-incident analysis is described as Kroll, .

Additional Questions

Incident Details

What was the most recent incident detected ?

Most Recent Incident Detected: The most recent incident detected was on 2024-02-29.

What was the most recent incident publicly disclosed ?

Most Recent Incident Publicly Disclosed: The most recent incident publicly disclosed was on 2023-08-21.

Impact of the Incidents

What was the most significant data compromised in an incident ?

Most Significant Data Compromised: The most significant data compromised in an incident were Names, Social Security numbers, , Names, Social Security numbers, Health information, , Social Security Numbers and .

Response to the Incidents

What third-party assistance was involved in the most recent incident ?

Third-Party Assistance in Most Recent Incident: The third-party assistance involved in the most recent incident was kroll, .

Data Breach Information

What was the most sensitive data compromised in a breach ?

Most Sensitive Data Compromised: The most sensitive data compromised in a breach were Names, Health information, Social Security numbers and Social Security Numbers.

What was the number of records exposed in the most significant breach ?

Number of Records Exposed in Most Significant Breach: The number of records exposed in the most significant breach was 1.1K.

References

What is the most recent source of information about an incident ?

Most Recent Source: The most recent source of information about an incident are Washington State Office of the Attorney General, California Office of the Attorney General and Maine Office of the Attorney General.

cve

Latest Global CVEs (Not Company-Specific)

Description

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.

Risk Information
cvss4
Base: 7.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.

Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.

Risk Information
cvss4
Base: 6.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Access Data Using Our API

SubsidiaryImage

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=northwestern-mutual' -H 'apikey: YOUR_API_KEY_HERE'

What Do We Measure ?

revertimgrevertimgrevertimgrevertimg
Incident
revertimgrevertimgrevertimgrevertimg
Finding
revertimgrevertimgrevertimgrevertimg
Grade
revertimgrevertimgrevertimgrevertimg
Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network Security

Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)

Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)

Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat Intelligence

Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Top LeftTop RightBottom LeftBottom Right
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
Users Love Us Badge