Comparison Overview
University of Auckland

University of Auckland
Private Bag 92019, Auckland, NZ, 1142
Last Update: 08/05/2026
Waipapa Taumata Rau | University of Auckland is New Zealand’s largest and leading university. We celebrate our location in the beautiful harbour city of Auckland | Tamaki Makaurau, our unique position in Aotearoa New Zealand and our place within the Pacific. Our te ...

York University
4700 Keele Street, Toronto, Toronto, on, CA, M3J 1P3
Last Update: 01/04/2026
York University is a diverse community of students, faculty, and staff driving positive change. As one of the largest post-secondary communities in the world and with a uniquely global perspective, we are driven by passion and purpose as part of a forward-thinking co...
Compliance Ranges Comparison

University of Auckland







York University






Benchmark & Cyber Underwriting Signals
Incidents vs Higher Education Industry Avg (This Year)
University of Auckland has 44.75% fewer incidents than the average of same-industry companies with at least one recorded incident.
Incidents vs Higher Education Industry Avg (This Year)
No incidents recorded for York University in 2026.
Incident History - University of Auckland (X = Date, Y = Severity)
University of Auckland cyber incidents detection timeline including parent company and subsidiaries.
Incident History - York University (X = Date, Y = Severity)
York University cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

University of Auckland

York University
FAQ
Latest Global CVEs
Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a network.
Authentication bypass by spoofing in Azure HorizonDB allows an unauthorized attacker to elevate privileges over a network.
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network.
Improper neutralization of special elements in output used by a downstream component ('injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an authorized attacker to execute code over a network.