Comparison Overview

Rizzoli International Publications

VS

NEJM AI

Rizzoli International Publications

undefined, undefined, undefined, undefined, US
Last Update: 2025-11-26
Between 750 and 799

Rizzoli joined such prestigious American institutions as Tiffany’s, Saks, and Cartier when it first opened the Rizzoli Bookstore on Fifth Avenue in 1964. In the following years, its landmark building in New York became the center for the company’s national expansion, adding new bookstores throughout the country and, a decade later, establishing an eminent publishing house renowned today for high-quality, illustrated books. Today, Rizzoli in America is an integral part of its Italian parent company, RCS Media Group. RCS arose from the merger of the venerable Rizzoli publishing house, founded in 1929, with the eminent Italian newspaper, Corriere della Sera, founded in 1876. Rizzoli New York began its publishing operation in 1974 and has become a leader in the fashion, interior design, culinary, art, architecture, and photography fields. Rizzoli’s Universe imprint was added in 1990 marking Rizzoli’s entrée into the pop-culture worlds of humor, beauty, sports, performing arts, and gay and alternative lifestyles. Universe also produces a highly successful calendar program. In 2008 a new imprint for the house was established called Skira Rizzoli, with the goal of expanding the company’s presence in museum-related publishing, and in 2011, Rizzoli established Ex Libris, an imprint dedicated to publishing up-market literary fiction and nonfiction with a transatlantic character.

NAICS: 511
NAICS Definition: Publishing Industries (except Internet)
Employees: 213
Subsidiaries: 6
12-month incidents
0
Known data breaches
0
Attack type number
0

NEJM AI

860 Winter St, Waltham, 02451, US
Last Update: 2025-11-22
Between 750 and 799

NEJM AI, a new monthly journal from NEJM Group, is the first publication to engage both clinical and technology innovators in applying the rigorous research and publishing standards of the New England Journal of Medicine to evaluate the promises and pitfalls of clinical applications of AI. NEJM AI is leading the way in establishing a stronger evidence base for clinical AI while facilitating dialogue among all parties with a stake in these emerging technologies. We invite you to join your peers on this journey.

NAICS: 511
NAICS Definition: Publishing Industries (except Internet)
Employees: None
Subsidiaries: 4
12-month incidents
0
Known data breaches
1
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/rizzoli-international-publications.jpeg
Rizzoli International Publications
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/nejm-ai.jpeg
NEJM AI
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Rizzoli International Publications
100%
Compliance Rate
0/4 Standards Verified
NEJM AI
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Book and Periodical Publishing Industry Average (This Year)

No incidents recorded for Rizzoli International Publications in 2025.

Incidents vs Book and Periodical Publishing Industry Average (This Year)

No incidents recorded for NEJM AI in 2025.

Incident History — Rizzoli International Publications (X = Date, Y = Severity)

Rizzoli International Publications cyber incidents detection timeline including parent company and subsidiaries

Incident History — NEJM AI (X = Date, Y = Severity)

NEJM AI cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/rizzoli-international-publications.jpeg
Rizzoli International Publications
Incidents

No Incident

https://images.rankiteo.com/companyimages/nejm-ai.jpeg
NEJM AI
Incidents

Date Detected: 10/2024
Type:Breach
Attack Vector: Unauthorized Code Installation
Blog: Blog

FAQ

NEJM AI company demonstrates a stronger AI Cybersecurity Score compared to Rizzoli International Publications company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

NEJM AI company has historically faced a number of disclosed cyber incidents, whereas Rizzoli International Publications company has not reported any.

In the current year, NEJM AI company and Rizzoli International Publications company have not reported any cyber incidents.

Neither NEJM AI company nor Rizzoli International Publications company has reported experiencing a ransomware attack publicly.

NEJM AI company has disclosed at least one data breach, while Rizzoli International Publications company has not reported such incidents publicly.

Neither NEJM AI company nor Rizzoli International Publications company has reported experiencing targeted cyberattacks publicly.

Neither Rizzoli International Publications company nor NEJM AI company has reported experiencing or disclosing vulnerabilities publicly.

Neither Rizzoli International Publications nor NEJM AI holds any compliance certifications.

Neither company holds any compliance certifications.

Rizzoli International Publications company has more subsidiaries worldwide compared to NEJM AI company.

Neither Rizzoli International Publications nor NEJM AI holds SOC 2 Type 1 certification.

Neither Rizzoli International Publications nor NEJM AI holds SOC 2 Type 2 certification.

Neither Rizzoli International Publications nor NEJM AI holds ISO 27001 certification.

Neither Rizzoli International Publications nor NEJM AI holds PCI DSS certification.

Neither Rizzoli International Publications nor NEJM AI holds HIPAA certification.

Neither Rizzoli International Publications nor NEJM AI holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

ThingsBoard in versions prior to v4.2.1 allows an authenticated user to upload malicious SVG images via the "Image Gallery", leading to a Stored Cross-Site Scripting (XSS) vulnerability. The exploit can be triggered when any user accesses the public API endpoint of the malicious SVG images, or if the malicious images are embedded in an `iframe` element, during a widget creation, deployed to any page of the platform (e.g., dashboards), and accessed during normal operations. The vulnerability resides in the `ImageController`, which fails to restrict the execution of JavaScript code when an image is loaded by the user's browser. This vulnerability can lead to the execution of malicious code in the context of other users' sessions, potentially compromising their accounts and allowing unauthorized actions.

Risk Information
cvss4
Base: 6.2
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to to verify that the token used during the code exchange originates from the same authentication flow, which allows an authenticated user to perform account takeover via a specially crafted email address used when switching authentication methods and sending a request to the /users/login/sso/code-exchange endpoint. The vulnerability requires ExperimentalEnableAuthenticationTransfer to be enabled (default: enabled) and RequireEmailVerification to be disabled (default: disabled).

Risk Information
cvss3
Base: 9.9
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Description

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to sanitize team email addresses to be visible only to Team Admins, which allows any authenticated user to view team email addresses via the GET /api/v4/channels/{channel_id}/common_teams endpoint

Risk Information
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Description

Exposure of email service credentials to users without administrative rights in Devolutions Server.This issue affects Devolutions Server: before 2025.2.21, before 2025.3.9.

Description

Exposure of credentials in unintended requests in Devolutions Server.This issue affects Server: through 2025.2.20, through 2025.3.8.