Comparison Overview
KOGA

KOGA
Tinweg 9, Heerenveen, 8445 PD, NL
Last Update: 02/04/2026
KOGA is a premium brand with a sporty character. Established in 1974, KOGA has been working consistently on the basis of a corporate philosophy in which the development and construction of handmade, exclusive and technically high quality bicycles is key. Continuous inno...

Decathlon
Villeneuve-d'Ascq, LILLE, FR, 59650
Last Update: 24/07/2026
We are Decathlon. We are sport. And we believe that sport brings out the best in people, especially those in teams. Our teammates are as passionate about people as they are about sport. Our values guide our daily actions: Vitality, Generosity, Responsibility, and Au...
Compliance Ranges Comparison

KOGA







Decathlon






Benchmark & Cyber Underwriting Signals
Incidents vs Sporting Goods Manufacturing Industry Avg (This Year)
No incidents recorded for KOGA in 2026.
Incidents vs Sporting Goods Manufacturing Industry Avg (This Year)
Decathlon has 0.99% fewer incidents than the average of all companies with at least one recorded incident.
Incident History - KOGA (X = Date, Y = Severity)
KOGA cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Decathlon (X = Date, Y = Severity)
Decathlon cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

KOGA

Decathlon
FAQ
Latest Global CVEs
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response.
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.
IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authorization header automatically attached by the session adapter. The captured token grants full platform-scope tenant API access, enabling the attacker to read and manipulate the victim's DataStage projects, flows, assets, and pipeline definitions. This is client-side SDK code running on the user's own machine, so exploitation requires an external network interceptor rather than a co-tenant in the shared cluster.