OAM A.I CyberSecurity Scoring
09/03/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for Ostrum Asset Management in 2026.
No incidents recorded for Ostrum Asset Management in 2026.
No incidents recorded for Ostrum Asset Management in 2026.
BDO is a full-service universal bank in the Philippines. It provides a complete array of industry-leading products and services including Lending (corporate and consumer), Deposit-taking, Foreign Exchange, Brokering, Trust and Investments, Credit Cards, Corporate Cash Management, and Remittances in the Philippines. Through its local subsidiaries, the Bank offers Leasing and Financing, Investment Banking, Private Banking, Rural Banking, Life Insurance, Insurance Brokerage, and Stock Brokerage services. BDO's institutional strengths and value-added products and services hold the key to its successful business relationships with customers. Its branches remain at the forefront of setting high standards as a sales- and service-oriented, customer-focused force. BDO has one of the largest distribution networks, with more than 1,600 operating branches and over 4,500 ATMs nationwide. Through selective acquisitions and organic growth, BDO has positioned itself for increased balance sheet strength and continuing expansion into new markets. As of 30 June 2022, BDO is the country's largest bank in terms of total resources, customer loans, deposits, and assets under management. BDO is a publicly listed company (PLC), with its shares currently being traded at the Philippine Stock Exchange under the symbol “BDO”. BDO Unibank is regulated by the Banko Sentral ng Pilipinas. https://www.bsp.gov.ph For concerns, please visit any BDO branch near you or reach us through any of the channels listed in the Consumer Assistance page of our website: https://www.bdo.com.ph/consumer-assistance. Deposits are insured by PDIC up to P1 Million per depositor. The BDO, BDO Unibank and other BDO-related trademarks are owned by BDO Unibank, Inc. All Rights Reserved.
ICE (NYSE: ICE) connects people to data, technology and expertise that create opportunity and inspire innovation. For terms of use, visit www.ice.com/privacy-security-center/terms-of-use
S&P Global (NYSE: SPGI) enables businesses, governments, and individuals with trusted data, expertise and technology to make decisions with conviction. We are Advancing Essential Intelligence through world-leading benchmarks, data, and insights that customers need in order to plan confidently, act decisively, and thrive economically in a rapidly changing global landscape. From helping our customers assess new investments across the capital and commodities markets to guiding them through the energy expansion, acceleration of artificial intelligence, and evolution of public and private markets, we enable the world's leading organizations to unlock opportunities, solve challenges, and plan for tomorrow – today. Learn more at www.spglobal.com. Recruitment Fraud Alert: If you receive an email from a https://www.linkedin.com/redir/suspicious-page?url=spglobalind%2ecom domain or any other regionally based domains, it is a scam and should be reported to [email protected]. S&P Global never requires any candidate to pay money for job applications, interviews, offer letters, “pre-employment training” or for equipment/delivery of equipment. Stay informed and protect yourself from recruitment fraud by reviewing our guidelines, fraudulent domains, and how to report suspicious activity here: https://www.spglobal.com/content/dam/spglobal/corporate/en/documents/careers/Corp_0525-Recruitment-Fraud-Alert.pdf
En Davivienda creemos en un mundo financiero sin barreras que facilite la vida a las personas, las empresas, las ciudades y municipios. Por esta razón hoy somos más de 19.000 personas innovando y creando cada día soluciones y ofertas exclusivas para 10 millones de clientes que permitan una mayor inclusión financiera y un mayor desarrollo sostenible.
HDB Financial Services (HDBFS) is a leading Non-Banking Financial Company (NBFC) that caters to the growing needs of an Aspirational India, serving both Individual & Business Clients The lines of business include - Lending and BPO Services. Incorporated in 2007, HDB is a well-established business with strong capitalization. HDBFS is accredited with CARE AAA & CRISIL AAA ratings for its long-term debt & Bank facilities and an Al+ rating for its short-term debt & commercial papers, making it a strong and reliable financial institution. HDB has a robust network of more than 1740 branches in 1158 cities, thus catering to a wide reach of customers. The organsation offers a comprehensive bouquet of products and service offerings that are tailor-made to suit its customers’ requirements, including first-time borrowers and the underserved segments. The product portfolio includes Personal Loan, Business Loan, Loan Against Property, Enterprise Business Loan, Gold Loan, Car Loans, Loan Against Securities, Commercial Vehicle Loan, Construction Equipment Loan and Consumer Durable Loan. HDB’s BPO services offerings include running collection call centers, sales support services, back office operations and processing support services.
MUFG (Mitsubishi UFJ Financial Group) is one of the world's leading financial groups. Headquartered in Tokyo and with over 360 years of history, MUFG has a global network with over 2,100 locations in more than 40 markets including the Americas, Europe, the Middle East and Africa, Asia and Oceania. The Group has over 120,000 employees and offers services including commercial banking, trust banking, securities, credit cards, consumer finance, asset management, and leasing. Through close partnerships among our group companies, the Group aims to be the world's most trusted financial group, flexibly responding to all of the financial needs of its customers, serving society, and fostering shared and sustainable growth for a better world. MUFG's shares trade on the Tokyo, Nagoya, and New York stock exchanges. Watch our profile video: https://youtu.be/htyOjA1H6bQ Details of MUFG's Group companies can be found at the following websites: http://www.bk.mufg.jp/global http://www.tr.mufg.jp/english https://mufgamericas.com https://www.mufgemea.com http://www.hd.sc.mufg.jp/english ©2024Mitsubishi UFJ Financial Group, Inc. All rights reserved. The MUFG logo and name is a service mark of Mitsubishi UFJ Financial Group, Inc.
Founded in the year 2000, the Indiabulls Group is one of the country’s leading business houses with interest across sectors like financial services, real estate, pharmaceutical and LED. Headquartered in Gurgaon, all the group companies are listed on the Bombay Stock Exchange, and the National Stock Exchange. The group had combined revenues of over Rs. 22,114.9 Cr. and PAT of over Rs. 6,072.2 Cr. As on 31st March 2018. Complementing its efforts at the business end, the Group also places strong focus on its CSR Arm – The Indiabulls Foundation. Through the foundation the Group can support its aim for inclusive growth in the country and give back to the society with initiatives in areas such as Health, Education, Sanitation, Nutrition, Disaster Relief and Sustainable Livelihood.
Lars Larsen Group is owned by the Brunsborg family, descendants of JYSK founder Lars Larsen. The Group owns companies within a number of business areas including furniture, interior design, restaurants and hotels, and is also an active investor in equities, funds, and real estate. The Group is to this day operated in accordance with the family’s fundamental values of tradesmanship, responsibility and growth.
OTP Group is one of the fastest growing, leading independent banking groups in Central and Eastern Europe with a bridgehead in Central Asia. It operates in 11 countries - 10 in CEE region and 1 in Uzbekistan, employing nearly 40,000 people and providing universal financial services to 17 million customers. OTP Group has an outstanding profitability and a stable capital and liquidity position. The Group stands on the top spot on The Banker’s Magazine Top 100 CEE Banks 2024 ranked by Tier 1 capital and is the 4th most stress-resilient banking group in Europe, according to the CET1 rate decrease under three years stress scenario based on the European Banking Authority’s European banking stress test 2023. S&P Global Market Intelligence published the ranking of the best performing banks in Europe and for the first time among 50 largest European banks OTP Group was a top performer in 2023. As the most active consolidator in the banking sector of the CEE region, the Group has successfully acquired and integrated 25 banks since the early 2000s. Headquartered in Hungary, OTP Group has a very diversified and transparent ownership structure, without strategic investors and any state ownership. It has been listed on the Budapest Stock Exchange since 1995. With unique knowledge of the region and a lasting commitment to it, OTP Group is working towards helping the development of the region to become the continent’s growth engine. Linkedin Policy: https://www.otpbank.hu/static/portal/sw/file/otp-linkedin-policy.pdf
Latest updates, reports, and threat intel affecting the global network.
By Philippe Waechter, Chief Economist, Ostrum Asset Management. For economists, today's most important challenge is to integrate new...
The world has become a lot more flexible and very global, and CEO hires reflect this. The older generation didn't have such an open culture.
Waterfall Asset Management, an alternative asset manager, today announced the establishment of its Hong Kong office to enhance its...
Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.
Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.
Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.
Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.
Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.