Comparison Overview

Q: Between Northwestern Mutual company and Goldman Sachs company, which one has the best AI Cybersecurity Score ?

Goldman Sachs company demonstrates a stronger AI Cybersecurity Score compared to Northwestern Mutual company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Q: Between Northwestern Mutual company and Goldman Sachs company, which one has experienced more cyber incidents in the past ?

Northwestern Mutual company has faced a higher number of disclosed cyber incidents historically compared to Goldman Sachs company.

Q: Between Northwestern Mutual company and Goldman Sachs company, which one has experienced more cyber incidents this year ?

In the current year, Goldman Sachs company and Northwestern Mutual company have not reported any cyber incidents.

Q: Between Northwestern Mutual company and Goldman Sachs company, which one has experienced at least one ransomware attack ?

Northwestern Mutual company has confirmed experiencing a ransomware attack, while Goldman Sachs company has not reported such incidents publicly.

Q: Between Northwestern Mutual company and Goldman Sachs company, which one has experienced at least one data breach ?

Both Goldman Sachs company and Northwestern Mutual company have disclosed experiencing at least one data breach.

Q: Between Northwestern Mutual company and Goldman Sachs company, which one has experienced at least one targeted cyberattack ?

Neither Goldman Sachs company nor Northwestern Mutual company has reported experiencing targeted cyberattacks publicly.

Q: Between Northwestern Mutual company and Goldman Sachs company, which one has experienced at least one vulnerability ?

Neither Northwestern Mutual company nor Goldman Sachs company has reported experiencing or disclosing vulnerabilities publicly.

Q: Between Northwestern Mutual company and Goldman Sachs company, which one holds the most compliance certifications ?

Neither Northwestern Mutual nor Goldman Sachs holds any compliance certifications.

Q: Between Northwestern Mutual company and Goldman Sachs company, which one has the most subsidiaries ?

Goldman Sachs company has more subsidiaries worldwide compared to Northwestern Mutual company.

Northwestern Mutual

720 East Wisconsin Avenue, Milwaukee, 53202-4797, US

Last Update: 2026-01-17

View Profile

Between 650 and 699

http://www.northwesternmutual.com

At Northwestern Mutual, our financial advisors are ready to meet you where you are and stay with you long-term. Get financial clarity with a people-first plan designed to uncover new opportunities and potential blind spots. The right time to plan is right now. With $265.0 billion in assets under management, $28.1 billion in revenues, and over $1.8 trillion in life insurance protection in force, we've served more than 4.5 million people through our life, disability income, and long-term care insurance, annuities, brokerage, advisory services, trust services, and discretionary portfolio management solutions. Our wealth management company and investment services manage over $125 billion in client assets. We're proud to support our growing field force of financial advisors across the country, as well as our corporate office employees in Milwaukee and New York. As we continue to grow, we believe diversity makes us stronger in shaping the future of financial security. Explore career opportunities with us: https://jobs.northwesternmutual.com/. Financial representatives and interns are independent contractors, not Northwestern Mutual employees. https://www.northwesternmutual.com/social-media-guidelines

NAICS: 52

NAICS Definition: Finance and Insurance

Employees: 37,218

Subsidiaries: 3

12-month incidents

0

Known data breaches

2

Attack type number

2

View Profile

Goldman Sachs

200 West Street, New York, 10282, US

Last Update: 2026-01-17

Between 800 and 849

http://www.goldmansachs.com

We aspire to be the world’s most exceptional financial institution, united by our shared values of partnership, client service, integrity, and excellence. Operating at the center of capital markets, we act as one firm, mobilizing our people, capital, and ideas to deliver superior results across our clients’ most complex challenges. For 156 years, Goldman Sachs has delivered world-class execution on a global scale across our leading Global Banking & Markets and Asset & Wealth Management businesses. Apprenticeship is central to our culture, with hands-on coaching and access to leaders who bring decades of experience and expertise. With office locations around the world, we offer a broad range of career opportunities to those who insist on excellence and thrive on performance. Find our Social Media Disclosures here: gs.com/social-media-disclosures

NAICS: 52

NAICS Definition: Finance and Insurance

Employees: 67,203

Subsidiaries: 7

12-month incidents

0

Known data breaches

1

Attack type number

1

Northwestern Mutual

—

ISO 27001

Not verified

—

SOC2 Type 1

Not verified

—

SOC2 Type 2

Not verified

—

GDPR

Not verified

—

PCI DSS

Not verified

—

HIPAA

Not verified

Goldman Sachs

—

ISO 27001

Not verified

—

SOC2 Type 1

Not verified

—

SOC2 Type 2

Not verified

—

GDPR

Not verified

—

PCI DSS

Not verified

—

HIPAA

Not verified

Incidents vs Financial Services Industry Average (This Year)

No incidents recorded for Northwestern Mutual in 2026.

Incidents vs Financial Services Industry Average (This Year)

No incidents recorded for Goldman Sachs in 2026.

Incident History — Northwestern Mutual (X = Date, Y = Severity)

Northwestern Mutual cyber incidents detection timeline including parent company and subsidiaries

Incident History — Goldman Sachs (X = Date, Y = Severity)

Goldman Sachs cyber incidents detection timeline including parent company and subsidiaries

Northwestern Mutual

Incidents

Date Detected: 10/2023

Type:Ransomware

Blog: Blog

Date Detected: 5/2023

Type:Breach

Attack Vector: Hacking

Blog: Blog

Date Detected: 8/2017

Type:Breach

Attack Vector: Computer Scam

Blog: Blog

Goldman Sachs

Incidents

Date Detected: 12/2025

Type:Breach

Blog: Blog

Goldman Sachs company demonstrates a stronger AI Cybersecurity Score compared to Northwestern Mutual company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Northwestern Mutual company has faced a higher number of disclosed cyber incidents historically compared to Goldman Sachs company.

In the current year, Goldman Sachs company and Northwestern Mutual company have not reported any cyber incidents.

Northwestern Mutual company has confirmed experiencing a ransomware attack, while Goldman Sachs company has not reported such incidents publicly.

Both Goldman Sachs company and Northwestern Mutual company have disclosed experiencing at least one data breach.

Neither Goldman Sachs company nor Northwestern Mutual company has reported experiencing targeted cyberattacks publicly.

Neither Northwestern Mutual company nor Goldman Sachs company has reported experiencing or disclosing vulnerabilities publicly.

Neither Northwestern Mutual nor Goldman Sachs holds any compliance certifications.

Neither company holds any compliance certifications.

Goldman Sachs company has more subsidiaries worldwide compared to Northwestern Mutual company.

Goldman Sachs company employs more people globally than Northwestern Mutual company, reflecting its scale as a Financial Services.

Neither Northwestern Mutual nor Goldman Sachs holds SOC 2 Type 1 certification.

Neither Northwestern Mutual nor Goldman Sachs holds SOC 2 Type 2 certification.

Neither Northwestern Mutual nor Goldman Sachs holds ISO 27001 certification.

Neither Northwestern Mutual nor Goldman Sachs holds PCI DSS certification.

Neither Northwestern Mutual nor Goldman Sachs holds HIPAA certification.

Neither Northwestern Mutual nor Goldman Sachs holds GDPR certification.

Description

SummaryA command injection vulnerability (CWE-78) has been found to exist in the `wrangler pages deploy` command. The issue occurs because the `--commit-hash` parameter is passed directly to a shell command without proper validation or sanitization, allowing an attacker with control of `--commit-hash` to execute arbitrary commands on the system running Wrangler. Root causeThe commitHash variable, derived from user input via the --commit-hash CLI argument, is interpolated directly into a shell command using template literals (e.g., execSync(`git show -s --format=%B ${commitHash}`)). Shell metacharacters are interpreted by the shell, enabling command execution. ImpactThis vulnerability is generally hard to exploit, as it requires --commit-hash to be attacker controlled. The vulnerability primarily affects CI/CD environments where `wrangler pages deploy` is used in automated pipelines and the --commit-hash parameter is populated from external, potentially untrusted sources. An attacker could exploit this to: * Run any shell command. * Exfiltrate environment variables. * Compromise the CI runner to install backdoors or modify build artifacts. Credits Disclosed responsibly by kny4hacker. Mitigation * Wrangler v4 users are requested to upgrade to Wrangler v4.59.1 or higher. * Wrangler v3 users are requested to upgrade to Wrangler v3.114.17 or higher. * Users on Wrangler v2 (EOL) should upgrade to a supported major version.

Published

Date

2026-01-20

Updated

Date

2026-01-20

Risk Information

cvss4

Base: 7.7

Severity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

References

https://github.com/cloudflare/workers-sdk

Description

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).

Published

Date

2026-01-20

Updated

Date

2026-01-20

Risk Information

cvss3

Base: 8.2

Severity: LOW

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

References

https://www.oracle.com/security-alerts/cpujan2026.html

Description

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle VM VirtualBox accessible data as well as unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L).

Published

Date

2026-01-20

Updated

Date

2026-01-20

Risk Information

cvss3

Base: 8.1

Severity: LOW

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L

References

https://www.oracle.com/security-alerts/cpujan2026.html

Description

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).

Published

Date

2026-01-20

Updated

Date

2026-01-20

Risk Information

cvss3

Base: 8.2

Severity: LOW

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

References

https://www.oracle.com/security-alerts/cpujan2026.html

Description

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).

Published

Date

2026-01-20

Updated

Date

2026-01-20

Risk Information

cvss3

Base: 8.2

Severity: LOW

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

References

https://www.oracle.com/security-alerts/cpujan2026.html

Badge your company to reduce your risk score and your cyber insurance costs!

Comparison Overview

Northwestern Mutual

VS

Goldman Sachs

Northwestern Mutual

Goldman Sachs

Compliance Badges Comparison

Benchmark & Cyber Underwriting Signals

Incidents vs Financial Services Industry Average (This Year)

Incidents vs Financial Services Industry Average (This Year)

Incident History — Northwestern Mutual (X = Date, Y = Severity)

Incident History — Goldman Sachs (X = Date, Y = Severity)

Notable Incidents

FAQ

Latest Global CVEs (Not Company-Specific)

CVE-2026-0933

Risk Information

CVE-2026-21990

Risk Information

CVE-2026-21989

Risk Information

CVE-2026-21988

Risk Information

CVE-2026-21987

Risk Information

Badge your company to reduce your risk score and your cyber insurance costs!

Comparison Overview

Northwestern Mutual

VS

Goldman Sachs

Northwestern Mutual

Goldman Sachs

Compliance Badges Comparison

Benchmark & Cyber Underwriting Signals

Incidents vs Financial Services Industry Average (This Year)

Incidents vs Financial Services Industry Average (This Year)

Incident History — Northwestern Mutual (X = Date, Y = Severity)

Incident History — Goldman Sachs (X = Date, Y = Severity)

Notable Incidents

🔒 Incident : Ransomware NOR416072625

🔒 Incident : Breach NOR531072725

🔒 Incident : Breach NOR710072725

🔒 Incident : Breach GOL1766613328

FAQ

Between Northwestern Mutual company and Goldman Sachs company, which one has the best AI Cybersecurity Score ?

Between Northwestern Mutual company and Goldman Sachs company, which one has experienced more cyber incidents in the past ?

Between Northwestern Mutual company and Goldman Sachs company, which one has experienced more cyber incidents this year ?

Between Northwestern Mutual company and Goldman Sachs company, which one has experienced at least one ransomware attack ?

Between Northwestern Mutual company and Goldman Sachs company, which one has experienced at least one data breach ?

Between Northwestern Mutual company and Goldman Sachs company, which one has experienced at least one targeted cyberattack ?

Between Northwestern Mutual company and Goldman Sachs company, which one has experienced at least one vulnerability ?

Between Northwestern Mutual company and Goldman Sachs company, which one holds the most compliance certifications ?

Between Northwestern Mutual company and Goldman Sachs company, which one holds the fewest compliance certifications ?

Between Northwestern Mutual company and Goldman Sachs company, which one has the most subsidiaries ?

Between Northwestern Mutual company and Goldman Sachs company, which one has the largest number of employees ?

Between Northwestern Mutual and Goldman Sachs, which company holds both SOC 2 Type 1 certifications ?

Between Northwestern Mutual and Goldman Sachs, which company holds both SOC 2 Type 2 certifications ?

Which company is ISO 27001 certified — Northwestern Mutual or Goldman Sachs ?

Which company is PCI DSS compliant — Northwestern Mutual or Goldman Sachs ?

Between Northwestern Mutual and Goldman Sachs, which company complies with HIPAA regulations for healthcare data ?

Between Northwestern Mutual and Goldman Sachs, which company complies with GDPR requirements ?

Latest Global CVEs (Not Company-Specific)

CVE-2026-0933

Risk Information

CVE-2026-21990

Risk Information

CVE-2026-21989

Risk Information

CVE-2026-21988

Risk Information

CVE-2026-21987

Risk Information