Comparison Overview
ERA Group - EMEA
ERA Group - EMEA
Suite 24, 40 Churchill Square, Kings Hill, West Malling, ME19 4YU, GB
Last Update: 02/12/2025
Established in 1992, ERA Group (ERA) is one of the world’s leading consultancy organizations. Specializing in cost optimization and supplier relation management, ERA delivers Value through Insightᵀᴹ to clients in both the private and public sectors. With more than 1,0...
Alvarez & Marsal
600 Madison Avenue, New York, 10022, US
Last Update: 04/04/2026
Alvarez & Marsal is a leading global professional services firm dedicated to helping organizations tackle their most complex business issues, maximize stakeholder value, and deliver sustainable change. Privately held since its founding in 1983, clients select us for o...
Compliance Ranges Comparison
ERA Group - EMEA
Alvarez & Marsal
Benchmark & Cyber Underwriting Signals
Incidents vs Business Consulting and Services Industry Avg (This Year)
No incidents recorded for ERA Group - EMEA in 2026.
Incidents vs Business Consulting and Services Industry Avg (This Year)
No incidents recorded for Alvarez & Marsal in 2026.
Incident History - ERA Group - EMEA (X = Date, Y = Severity)
ERA Group - EMEA cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Alvarez & Marsal (X = Date, Y = Severity)
Alvarez & Marsal cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
ERA Group - EMEA
Alvarez & Marsal
FAQ
Latest Global CVEs
Spinnaker is an open source, multi-cloud continuous delivery platform. Prior to versions 2026.1.1, 2026.0.3, 2025.4.4, and 2025.3.4 on their respective release lines, Kustomize bake operations allow unsafe YAML tag processing in rosco manifests. This can lead to remote code execution on rosco pods when performing Kustomize bakes. This issue is fixed in versions 2026.1.1, 2026.0.3, 2025.4.4, and 2025.3.4.
- https://github.com/spinnaker/spinnaker/commit/2d75818b85cc4c35144d5e5ed45e7340fcab5dfe
- https://github.com/spinnaker/spinnaker/commit/bbc30c9b9034a056e95f012fa1b34e9fd703cae7
- https://github.com/spinnaker/spinnaker/commit/de5a7a05af35aee19eb71d289cd0b77f67509009
- https://github.com/spinnaker/spinnaker/commit/df32d568e82519d9f3896fc9007baba0077c87fd
- https://github.com/spinnaker/spinnaker/commit/f5cec213f8cf207843ed5a6929395960a1ca094f
- https://github.com/spinnaker/spinnaker/releases/tag/rosco-2025.3.4
- https://github.com/spinnaker/spinnaker/releases/tag/rosco-2025.4.4
- https://github.com/spinnaker/spinnaker/releases/tag/rosco-2026.0.3
- https://github.com/spinnaker/spinnaker/releases/tag/rosco-2026.1.1
- https://github.com/spinnaker/spinnaker/releases/tag/rosco-2026.2.0
- https://github.com/spinnaker/spinnaker/security/advisories/GHSA-p68j-q7hf-3qcp
Multiple connections to the backend using the same charging station ID are allowed, which could allow an attacker to deploy multiple instances of malicious OCPP clients to overwhelm the backend.
Previously, there was no throttling on repeated authentication attempts to the charging station backend, which could allow an attacker to execute a denial-of-service attack.
The charging station websocket endpoint accepts connections without proper authentication, which could lead to privilege escalation.
vulnerability in Drupal Commerce guest registration allows . This issue affects Commerce guest registration versions: *.*.