Comparison Overview
The National Institutes of Health

The National Institutes of Health
9000 Rockville Pike, Bethesda, 20892, US
Last Update: 01/04/2026
NIH is the only agency of its kind. We impact the health of the country and the world through unique and innovative medical research. Did you know that NIH is the largest public funder of biomedical research in the world, investing more than $32 billion a year to enhan...

Avantor
100 Matsonford Rd, Radnor Township, US
Last Update: 31/03/2026
Avantor® is a leading global provider of mission-critical products and services to customers in the biopharma, healthcare, education & government, and advanced technologies & applied materials industries. Our portfolio is used in virtually every stage of the most impo...
Compliance Ranges Comparison

The National Institutes of Health







Avantor






Benchmark & Cyber Underwriting Signals
Incidents vs Biotechnology Research Industry Avg (This Year)
No incidents recorded for The National Institutes of Health in 2026.
Incidents vs Biotechnology Research Industry Avg (This Year)
No incidents recorded for Avantor in 2026.
Incident History - The National Institutes of Health (X = Date, Y = Severity)
The National Institutes of Health cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Avantor (X = Date, Y = Severity)
Avantor cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

The National Institutes of Health

Avantor
FAQ
Latest Global CVEs
Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a network.
Authentication bypass by spoofing in Azure HorizonDB allows an unauthorized attacker to elevate privileges over a network.
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network.
Improper neutralization of special elements in output used by a downstream component ('injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an authorized attacker to execute code over a network.