Comparison Overview
North Highland

North Highland
3333 Piedmont Rd., NE, Suite 1000, Atlanta, GA, US, 30305
Last Update: 02/04/2026
North Highland helps businesses move from strategy to reality, taking a pragmatic and practical approach to build solutions that work and create impact that lasts. As the world’s leading change and transformation consultancy, our award-winning services – powered by a co...

ZS
1560 Sherman Avenue, Evanston, IL, US, 60201
Last Update: 07/09/2026
ZS is a management consulting and technology firm that partners with companies to improve life and how we live it. We transform ideas into impact by bringing together data, science, technology and human ingenuity to deliver better outcomes for all. Founded in 1983, ZS h...
Compliance Ranges Comparison

North Highland







ZS






Benchmark & Cyber Underwriting Signals
Incidents vs Business Consulting and Services Industry Avg (This Year)
No incidents recorded for North Highland in 2026.
Incidents vs Business Consulting and Services Industry Avg (This Year)
No incidents recorded for ZS in 2026.
Incident History - North Highland (X = Date, Y = Severity)
North Highland cyber incidents detection timeline including parent company and subsidiaries.
Incident History - ZS (X = Date, Y = Severity)
ZS cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

North Highland

ZS
FAQ
Latest Global CVEs
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response.
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.
IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authorization header automatically attached by the session adapter. The captured token grants full platform-scope tenant API access, enabling the attacker to read and manipulate the victim's DataStage projects, flows, assets, and pipeline definitions. This is client-side SDK code running on the user's own machine, so exploitation requires an external network interceptor rather than a co-tenant in the shared cluster.