Comparison Overview
U.S. Department of State – Bureau of Economic and Business Affairs

U.S. Department of State – Bureau of Economic and Business Affairs
Washington, DC, US
Last Update: 19/04/2026
This account was retired on 12/31/2025. Follow @Office of the Under Secretary for Economic Affairs (E) of the U.S. Department of State for updates.

National Nuclear Security Administration (NNSA)
1000 Independence Avenue SW, Washington, 20585, US
Last Update: 01/04/2026
Established by Congress in 2000, NNSA is a semi-autonomous agency within the U.S. Department of Energy that protects our nation by designing and delivering a safe, secure, reliable, and effective U.S. nuclear stockpile; forging solutions that enable global security and ...
Compliance Ranges Comparison

U.S. Department of State – Bureau of Economic and Business Affairs







National Nuclear Security Administration (NNSA)






Benchmark & Cyber Underwriting Signals
Incidents vs Government Administration Industry Avg (This Year)
No incidents recorded for U.S. Department of State – Bureau of Economic and Business Affairs in 2026.
Incidents vs Government Administration Industry Avg (This Year)
No incidents recorded for National Nuclear Security Administration (NNSA) in 2026.
Incident History - U.S. Department of State – Bureau of Economic and Business Affairs (X = Date, Y = Severity)
U.S. Department of State – Bureau of Economic and Business Affairs cyber incidents detection timeline including parent company and subsidiaries.
Incident History - National Nuclear Security Administration (NNSA) (X = Date, Y = Severity)
National Nuclear Security Administration (NNSA) cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

U.S. Department of State – Bureau of Economic and Business Affairs

National Nuclear Security Administration (NNSA)
FAQ
Latest Global CVEs
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response.
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.
IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authorization header automatically attached by the session adapter. The captured token grants full platform-scope tenant API access, enabling the attacker to read and manipulate the victim's DataStage projects, flows, assets, and pipeline definitions. This is client-side SDK code running on the user's own machine, so exploitation requires an external network interceptor rather than a co-tenant in the shared cluster.