Comparison Overview
DDM
DDM
, , Rabat , , MA, None
Last Update: 12/12/2025
CHR
Swiggy
Bengaluru, Karnataka, IN
Last Update: 21/09/2026
Swiggy is India’s pioneering on-demand convenience platform, catering to millions of consumers each month. Founded in 2014, its mission is to elevate the quality of life for the urban consumer by offering unparalleled convenience. With an extensive footprint in food del...
Compliance Ranges Comparison
DDM
Swiggy
Benchmark & Cyber Underwriting Signals
Incidents vs Technology, Information and Internet Industry Avg (This Year)
No incidents recorded for DDM in 2026.
Incidents vs Technology, Information and Internet Industry Avg (This Year)
No incidents recorded for Swiggy in 2026.
Incident History - DDM (X = Date, Y = Severity)
DDM cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Swiggy (X = Date, Y = Severity)
Swiggy cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
DDM
Swiggy
FAQ
Latest Global CVEs
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response.
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.
IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authorization header automatically attached by the session adapter. The captured token grants full platform-scope tenant API access, enabling the attacker to read and manipulate the victim's DataStage projects, flows, assets, and pipeline definitions. This is client-side SDK code running on the user's own machine, so exploitation requires an external network interceptor rather than a co-tenant in the shared cluster.