Comparison Overview
Sandoz

Sandoz
Novartis Campus, Basel, Basel-Stadt, CH, 4056
Last Update: 30/03/2026
Sandoz is the global leader in generic and biosimilar medicines. Our Purpose is to pioneer access to medicines for patients globally. We are on a mission to drive innovation in the healthcare industry by freeing up resources sustainably and responsibly while continu...

Bristol Myers Squibb
3401 Princeton Pike, Lawrence Township, 08648, US
Last Update: 20/05/2026
At Bristol Myers Squibb, we work every day to transform patients’ lives through science. That work inspires some of the most interesting, meaningful, and life-changing careers you’ll experience. Join us and pursue innovative ideas alongside some of the brightest minds i...
Compliance Ranges Comparison

Sandoz







Bristol Myers Squibb






Benchmark & Cyber Underwriting Signals
Incidents vs Pharmaceutical Manufacturing Industry Avg (This Year)
No incidents recorded for Sandoz in 2026.
Incidents vs Pharmaceutical Manufacturing Industry Avg (This Year)
No incidents recorded for Bristol Myers Squibb in 2026.
Incident History - Sandoz (X = Date, Y = Severity)
Sandoz cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Bristol Myers Squibb (X = Date, Y = Severity)
Bristol Myers Squibb cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

Sandoz

Bristol Myers Squibb
FAQ
Latest Global CVEs
Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a network.
Authentication bypass by spoofing in Azure HorizonDB allows an unauthorized attacker to elevate privileges over a network.
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network.
Improper neutralization of special elements in output used by a downstream component ('injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an authorized attacker to execute code over a network.