Comparison Overview
National Infrastructure and Service Transformation Authority (NISTA)

National Infrastructure and Service Transformation Authority (NISTA)
London, SW1A 2HQ, GB
Last Update: 02/04/2026
NISTA will ensure the government’s strategies for infrastructure and service transformation deliver the growth and opportunity the country needs, bringing key decision making closer to spending decisions in HM Treasury (HMT) and giving Ministers the levers they need to ...

National Nuclear Security Administration (NNSA)
1000 Independence Avenue SW, Washington, 20585, US
Last Update: 01/04/2026
Established by Congress in 2000, NNSA is a semi-autonomous agency within the U.S. Department of Energy that protects our nation by designing and delivering a safe, secure, reliable, and effective U.S. nuclear stockpile; forging solutions that enable global security and ...
Compliance Ranges Comparison

National Infrastructure and Service Transformation Authority (NISTA)







National Nuclear Security Administration (NNSA)






Benchmark & Cyber Underwriting Signals
Incidents vs Government Administration Industry Avg (This Year)
No incidents recorded for National Infrastructure and Service Transformation Authority (NISTA) in 2026.
Incidents vs Government Administration Industry Avg (This Year)
No incidents recorded for National Nuclear Security Administration (NNSA) in 2026.
Incident History - National Infrastructure and Service Transformation Authority (NISTA) (X = Date, Y = Severity)
National Infrastructure and Service Transformation Authority (NISTA) cyber incidents detection timeline including parent company and subsidiaries.
Incident History - National Nuclear Security Administration (NNSA) (X = Date, Y = Severity)
National Nuclear Security Administration (NNSA) cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

National Infrastructure and Service Transformation Authority (NISTA)

National Nuclear Security Administration (NNSA)
FAQ
Latest Global CVEs
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response.
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.
IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authorization header automatically attached by the session adapter. The captured token grants full platform-scope tenant API access, enabling the attacker to read and manipulate the victim's DataStage projects, flows, assets, and pipeline definitions. This is client-side SDK code running on the user's own machine, so exploitation requires an external network interceptor rather than a co-tenant in the shared cluster.