Comparison Overview
American Express
American Express
World Financial Center, 200 Vesey Street, New York, 10285, US
Last Update: 10/09/2026
At American Express, we know that with the right backing, people and businesses have the power to progress in incredible ways. Whether we’re supporting our customers’ financial confidence to move ahead, taking commerce to new heights, or encouraging people to explore th...
Vanguard
100 Vanguard Blvd, Valley Forge, 19482, US
Last Update: 14/09/2026
We are a community of 50 million who think—and feel—differently about investing. Together, we’re changing the way the world invests. For over 50 years, Vanguard has helped people pursue their financial goals with a spotlight on long-term value and low costs. We’ve mad...
Compliance Ranges Comparison
American Express
Vanguard
Benchmark & Cyber Underwriting Signals
Incidents vs Financial Services Industry Avg (This Year)
No incidents recorded for American Express in 2026.
Incidents vs Financial Services Industry Avg (This Year)
No incidents recorded for Vanguard in 2026.
Incident History - American Express (X = Date, Y = Severity)
American Express cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Vanguard (X = Date, Y = Severity)
Vanguard cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
American Express
Vanguard
FAQ
Latest Global CVEs
Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing.
Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory.
Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.
Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write.
Mistral Vibe before 2.25.5 contains a remote code execution vulnerability in the worktree creation process that executes git hooks before trust validation. Attackers can supply a repository with a crafted post-checkout hook that executes arbitrary shell commands with the privileges of the user running Vibe.
- https://github.com/mistralai/mistral-vibe
- https://github.com/mistralai/mistral-vibe/blob/19b5b74faa78d0816b8d4d4c7d7543fc3520678c/vibe/core/git/repo.py#L411-L431
- https://github.com/mistralai/mistral-vibe/commit/c069ffa1e12fb5f2487b489217c40ab97721d553
- https://github.com/mistralai/mistral-vibe/issues/996
- https://github.com/mistralai/mistral-vibe/releases/tag/v2.25.5
- https://www.vulncheck.com/advisories/mistral-vibe-before-2.25.5-remote-code-execution-via-git-post-checkout