Comparison Overview
Infrastructure and Projects Authority (IPA)
Infrastructure and Projects Authority (IPA)
undefined, London, undefined, SW1A 2HQ, GB
Last Update: 03/04/2026
The IPA is the government’s centre of expertise for infrastructure and major projects, part of the Cabinet Office and HM Treasury. We support the successful delivery of all types of infrastructure and major projects; ranging from railways, schools, hospitals and housi...
Social Security Administration
6401 Security Blvd, Baltimore, 21235, US
Last Update: 02/04/2026
Social Security provides financial protection for our nation’s people, supporting more than 64 million individuals and families. With retirement, disability, and survivors benefits, Social Security is one of the most successful anti-poverty programs in our nation's his...
Compliance Ranges Comparison
Infrastructure and Projects Authority (IPA)
Social Security Administration
Benchmark & Cyber Underwriting Signals
Incidents vs Government Administration Industry Avg (This Year)
No incidents recorded for Infrastructure and Projects Authority (IPA) in 2026.
Incidents vs Government Administration Industry Avg (This Year)
Social Security Administration has 2.91% fewer incidents than the average of all companies with at least one recorded incident.
Incident History - Infrastructure and Projects Authority (IPA) (X = Date, Y = Severity)
Infrastructure and Projects Authority (IPA) cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Social Security Administration (X = Date, Y = Severity)
Social Security Administration cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
Infrastructure and Projects Authority (IPA)
Social Security Administration
FAQ
Latest Global CVEs
A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
A flaw was found in udisks2. A local attacker with an active console session can exploit insufficient authorization checking on the 'as-user' option in the org.freedesktop.UDisks2.Filesystem.Mount() D-Bus method. This allows the attacker to spoof the 'as-user' parameter, mounting filesystems on behalf of arbitrary users, including privileged accounts. This can lead to local privilege escalation through mount point injection and manipulation of the mount namespace visible to privileged users.
A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an Out-of-Bounds Read in the image handling library. A malicious actor can leverage this vulnerability to cause a denial of service
PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton. From 2.1.0 until 4.14.1, PILOS does not send a Cross-Origin-Opener-Policy response header, so pages opened by PILOS via a link that opens a new browsing context (e.g., target="_blank") retain a window.opener reference back to the originating PILOS tab. A malicious destination page reached this way can use window.opener to navigate or manipulate the original PILOS tab, a technique known as reverse tabnabbing, potentially redirecting an authenticated user to a phishing page that mimics PILOS. This issue is fixed in version 4.14.1.