Comparison Overview
High Value Target
High Value Target
Warsaw, PL
Last Update: 10/04/2026
We are a boutique research firm that specializes in designing and implementing methodologies aimed at significantly increasing an organization’s cyber resilience posture against sophisticated cyber threats. We are actively engaged in leading cybersecurity communities an...
Palo Alto Networks
3000 Tannery Way, SANTA CLARA, 95054, US
Last Update: 04/10/2026
Palo Alto Networks, the global cybersecurity leader, is shaping the cloud-centric future with technology that is transforming the way people and organizations operate. Our mission is to be the cybersecurity partner of choice, protecting our digital way of life. We help ...
Compliance Ranges Comparison
High Value Target
Palo Alto Networks
Benchmark & Cyber Underwriting Signals
Incidents vs Computer and Network Security Industry Avg (This Year)
High Value Target has 2.91% fewer incidents than the average of same-industry companies with at least one recorded incident.
Incidents vs Computer and Network Security Industry Avg (This Year)
Palo Alto Networks has 1272.55% more incidents than the average of all companies with at least one recorded incident.
Incident History - High Value Target (X = Date, Y = Severity)
High Value Target cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Palo Alto Networks (X = Date, Y = Severity)
Palo Alto Networks cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
High Value Target
Palo Alto Networks
FAQ
Latest Global CVEs
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response.
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.
IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authorization header automatically attached by the session adapter. The captured token grants full platform-scope tenant API access, enabling the attacker to read and manipulate the victim's DataStage projects, flows, assets, and pipeline definitions. This is client-side SDK code running on the user's own machine, so exploitation requires an external network interceptor rather than a co-tenant in the shared cluster.