Comparison Overview
Discovery Limited

Discovery Limited
1 Discovery Place, Sandhurst, Johannesburg, Gauteng, ZA, 2196
Last Update: 01/04/2026
Imagine a world where people live healthier, more enhanced and protected lives… A world in which each organisation is a powerful influencer and responsible corporate citizen, committed to being a force for social good. As a leading innovator in healthcare, wellness, ins...

Marsh McLennan
1166 Avenue of the Americas, New York, NY, US, 10036
Last Update: 05/04/2026
Marsh (NYSE: MRSH) is a global leader in risk, strategy and people, advising clients in 130 countries across four businesses: Marsh Risk, Guy Carpenter, Mercer and Oliver Wyman. With annual revenue over $24 billion and more than 90,000 ...
Compliance Ranges Comparison

Discovery Limited







Marsh McLennan






Benchmark & Cyber Underwriting Signals
Incidents vs Financial Services Industry Avg (This Year)
No incidents recorded for Discovery Limited in 2026.
Incidents vs Financial Services Industry Avg (This Year)
No incidents recorded for Marsh McLennan in 2026.
Incident History - Discovery Limited (X = Date, Y = Severity)
Discovery Limited cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Marsh McLennan (X = Date, Y = Severity)
Marsh McLennan cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

Discovery Limited

Marsh McLennan
FAQ
Latest Global CVEs
Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a network.
Authentication bypass by spoofing in Azure HorizonDB allows an unauthorized attacker to elevate privileges over a network.
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network.
Improper neutralization of special elements in output used by a downstream component ('injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an authorized attacker to execute code over a network.