Comparison Overview
COMO The Halkin

COMO The Halkin
5-6 Halkin Street, London, SW1X 7DJ, GB
Last Update: 02/04/2026
A London luxury hotel in the city’s Belgravia district, COMO The Halkin promises an elegant and discreet environment. Widely regarded by loyal regulars as a home away from home, you can expect faultless service, award-winning cuisine and Asian-inflected style to all 41 ...

Delaware North
250 Delaware Ave, Buffalo, 14202, US
Last Update: 08/06/2026
Delaware North is a global leader in the hospitality and entertainment industry. The company annually serves more than a half-billion guests across three continents, including at high-profile sports venues, airports, national and state parks, restaurants, resorts, hotel...
Compliance Ranges Comparison

COMO The Halkin







Delaware North






Benchmark & Cyber Underwriting Signals
Incidents vs Hospitality Industry Avg (This Year)
No incidents recorded for COMO The Halkin in 2026.
Incidents vs Hospitality Industry Avg (This Year)
Delaware North has 85.19% more incidents than the average of all companies with at least one recorded incident.
Incident History - COMO The Halkin (X = Date, Y = Severity)
COMO The Halkin cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Delaware North (X = Date, Y = Severity)
Delaware North cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

COMO The Halkin

Delaware North
FAQ
Latest Global CVEs
Fides is an open-source privacy engineering platform. From version 2.33.0 to before version 2.84.5, there is a DOM-based XSS vulnerability in fides.js via the fides_description override. This issue has been patched in version 2.84.5.
WACRM prior to commit 73041bf contain an authorization bypass vulnerability in the automation engine that allows authenticated attackers to access and modify contacts belonging to other tenants by supplying an arbitrary caller-controlled contact_id in the POST request body without tenant ownership verification. Attackers can exploit the service-role client that bypasses row-level security to modify victim contact fields including name, email, and company across tenant boundaries using only a known contact UUID.
Namespace attributes are not encoded correctly during HTML serialization. This allows bypassing the cross-site scripting prevention mechanism of typo3/html-sanitizer before version 2.3.2.
When ALLOW_INSECURE_RAW_TEXT is enabled, whitespace-variant closing tags (e.g., </style\t>) are not recognized by the sanitizer but accepted by browsers as valid end tags, allowing subsequent content to escape sanitization. This allows bypassing the cross-site scripting prevention mechanism of typo3/html-sanitizer before version 2.3.2.
Headplane is a feature-complete Web UI for Headscale. Prior to versions 0.6.3 and 0.7.0-beta.3, Headplane was vulnerable to a path traversal / authorization bypass in the Headscale API client used by node and user rename operations. This issue has been patched in versions 0.6.3 and 0.7.0-beta.3.