Comparison Overview
Traction

Traction
N/A
Last Update: 01/03/2026
Traction is Canada's largest network of stores that sell parts, accessories, tools, and equipment for trucks and trailers. It's also the only network that's present from coast to coast with more than 120 stores. The Traction network, which is part of UAP’s Heavy Vehicle...

Yellow
501 Commerce St. Suite, 1120, Nashville, 37203, US
Last Update: 04/04/2026
Yellow, a Fortune 500 company headquartered in Nashville, TN is one of the largest super-regional less-than-truckload (LTL) companies in North America. Nearly 100 years ago, Yellow created the LTL industry, and now it comprises four successful regional LTL companies and...
Compliance Ranges Comparison

Traction







Yellow






Benchmark & Cyber Underwriting Signals
Incidents vs Truck Transportation Industry Avg (This Year)
No incidents recorded for Traction in 2026.
Incidents vs Truck Transportation Industry Avg (This Year)
No incidents recorded for Yellow in 2026.
Incident History - Traction (X = Date, Y = Severity)
Traction cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Yellow (X = Date, Y = Severity)
Yellow cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

Traction

Yellow
FAQ
Latest Global CVEs
Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a network.
Authentication bypass by spoofing in Azure HorizonDB allows an unauthorized attacker to elevate privileges over a network.
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network.
Improper neutralization of special elements in output used by a downstream component ('injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an authorized attacker to execute code over a network.