Comparison Overview
CSL

CSL
655 Elizabeth St, Melbourne, 3000, AU
Last Update: 02/04/2026
CSL is a leading global biopharma company with a dynamic portfolio of lifesaving medicines, including those that treat haemophilia and immune deficiencies, vaccines to prevent influenza, and therapies in iron deficiency, dialysis and nephrology. Since our start in 1916,...

Roche
Grenzacherstrasse, Switzerland 🇨🇭 , 4070, CH
Last Update: 20/05/2026
Roche is a global pioneer in pharmaceuticals and diagnostics focused on advancing science to improve people’s lives. The combined strengths of pharmaceuticals and diagnostics under one roof have made Roche the leader in personalised healthcare – a strategy that aims to ...
Compliance Ranges Comparison

CSL







Roche






Benchmark & Cyber Underwriting Signals
Incidents vs Biotechnology Research Industry Avg (This Year)
No incidents recorded for CSL in 2026.
Incidents vs Biotechnology Research Industry Avg (This Year)
No incidents recorded for Roche in 2026.
Incident History - CSL (X = Date, Y = Severity)
CSL cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Roche (X = Date, Y = Severity)
Roche cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

CSL

Roche
FAQ
Latest Global CVEs
Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a network.
Authentication bypass by spoofing in Azure HorizonDB allows an unauthorized attacker to elevate privileges over a network.
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network.
Improper neutralization of special elements in output used by a downstream component ('injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an authorized attacker to execute code over a network.