Comparison Overview
Konkola Copper Mines plc

Konkola Copper Mines plc
Chingola , 10101, ZM
Last Update: 05/04/2026
Konkola Copper Mines plc is a subsidiary of Vedanta Resources plc ("Vedanta") a London Stock Exchange listed FTSE100 diversified metals and mining company, with revenues in excess of USD 6.5 billion. The group produces aluminium, copper, zinc, lead and iron ore and also...

Glencore
Baarermattstrasse 3, Baar, 6340, CH
Last Update: 07/10/2026
Glencore is one of the world’s largest global diversified natural resource companies and a major producer and marketer of more than 60 commodities that advance everyday life. Through a network of assets, customers and suppliers that spans the globe, we produce, process,...
Compliance Ranges Comparison

Konkola Copper Mines plc







Glencore






Benchmark & Cyber Underwriting Signals
Incidents vs Mining Industry Avg (This Year)
No incidents recorded for Konkola Copper Mines plc in 2026.
Incidents vs Mining Industry Avg (This Year)
No incidents recorded for Glencore in 2026.
Incident History - Konkola Copper Mines plc (X = Date, Y = Severity)
Konkola Copper Mines plc cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Glencore (X = Date, Y = Severity)
Glencore cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

Konkola Copper Mines plc

Glencore
FAQ
Latest Global CVEs
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response.
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.
IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authorization header automatically attached by the session adapter. The captured token grants full platform-scope tenant API access, enabling the attacker to read and manipulate the victim's DataStage projects, flows, assets, and pipeline definitions. This is client-side SDK code running on the user's own machine, so exploitation requires an external network interceptor rather than a co-tenant in the shared cluster.