A group of state regulators fined Newrez for servicing issues, while California fined Academy Mortgage for lackluster cybersecurity.