Comparison Overview
City Relay
City Relay
First Floor, 10 Cromwell Pl,, South Kensington,, London, England, GB, SW7 2JN
Last Update: 17/09/2026
As London’s most trusted property management company we specialise in optimising your income through a flexible offering of short, mid and long-term lets. We offer London’s leading short let services through our market leading operations, smart pricing and marketing alo...
Zillow
Seattle, US
Last Update: 18/09/2026
Having a place to call your own changes everything. It’s where life happens, where stability grows and possibility begins. At Zillow, we’re transforming real estate so more people can take their next step with confidence and ease. We bring clarity to the process and pr...
Compliance Ranges Comparison
City Relay
Zillow
Benchmark & Cyber Underwriting Signals
Incidents vs Real Estate Industry Avg (This Year)
No incidents recorded for City Relay in 2026.
Incidents vs Real Estate Industry Avg (This Year)
No incidents recorded for Zillow in 2026.
Incident History - City Relay (X = Date, Y = Severity)
City Relay cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Zillow (X = Date, Y = Severity)
Zillow cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
City Relay
Zillow
FAQ
Latest Global CVEs
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response.
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.
IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authorization header automatically attached by the session adapter. The captured token grants full platform-scope tenant API access, enabling the attacker to read and manipulate the victim's DataStage projects, flows, assets, and pipeline definitions. This is client-side SDK code running on the user's own machine, so exploitation requires an external network interceptor rather than a co-tenant in the shared cluster.