Comparison Overview
ORIX Corporation USA
ORIX Corporation USA
280 Park Avenue 40 West, None, New York, NY, US, 10017
Last Update: 03/04/2026
Established in the U.S. in 1981, ORIX USA has grown organically and through acquisition into the investment and asset management firm we are today. With a specialization in private credit, real estate, and private equity solutions for middle-market focused borrowers and...
Old Mutual South Africa
107 Rivonia Road, Sandton, 2196, ZA
Last Update: 02/04/2026
Old Mutual Limited is a premium pan-African financial services group that offers a broad spectrum of financial solutions to retail and corporate customers across key markets in 14 countries. We have been helping our customers achieve their lifetime financial goals for o...
Compliance Ranges Comparison
ORIX Corporation USA
Old Mutual South Africa
Benchmark & Cyber Underwriting Signals
Incidents vs Financial Services Industry Avg (This Year)
No incidents recorded for ORIX Corporation USA in 2026.
Incidents vs Financial Services Industry Avg (This Year)
No incidents recorded for Old Mutual South Africa in 2026.
Incident History - ORIX Corporation USA (X = Date, Y = Severity)
ORIX Corporation USA cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Old Mutual South Africa (X = Date, Y = Severity)
Old Mutual South Africa cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
ORIX Corporation USA
Old Mutual South Africa
FAQ
Latest Global CVEs
Files or directories accessible to external parties in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary arguments in the default desktop capabilities. JavaScript running in the application webview can therefore invoke plugin:shell|execute to run attacker-controlled operating system commands with the privileges of the NoteGen process. In combination with script execution in the webview (for example via chat XSS), this enables full remote code execution on the user's machine.
NoteGen before 0.32.0 renders AI chat responses with markdown-it configured with html:true and injects the result into the DOM via dangerouslySetInnerHTML in chat-preview, without HTML sanitization and with CSP set to null. Attacker-controlled content that reaches the model prompt (for example a malicious skill REFERENCE.md that instructs the model to emit HTML) can cause the model response to include executable markup such as an img onerror handler. When the user views the chat response, that markup runs as JavaScript in the privileged Tauri webview, enabling arbitrary script execution in the application context (cross-site scripting).