Comparison Overview
Vivo (Telefônica Brasil)
Vivo (Telefônica Brasil)
Avenida Eng. Luís Carlos Berrini, 1376, São Paulo, 04571 - 000, BR
Last Update: 05/09/2026
Vivo (Telefônica Brasil) is part of the Telefónica Group and with more than 94 million customers, of which 75 million mobile and 19 million fixed, we are the largest telecommunications company in Brazil, with nationwide presence and a complete, convergent portfolio of p...
Telefónica
Spain, Madrid, 28050, ES
Last Update: 11/09/2026
Telefónica is today one of the largest telecommunications companies in the world in terms of market capitalisation and number of customers. We have the best infrastructure, as well as an innovative range of digital and data services; therefore, we are favorably position...
Compliance Ranges Comparison
Vivo (Telefônica Brasil)
Telefónica
Benchmark & Cyber Underwriting Signals
Incidents vs Telecommunications Industry Avg (This Year)
No incidents recorded for Vivo (Telefônica Brasil) in 2026.
Incidents vs Telecommunications Industry Avg (This Year)
No incidents recorded for Telefónica in 2026.
Incident History - Vivo (Telefônica Brasil) (X = Date, Y = Severity)
Vivo (Telefônica Brasil) cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Telefónica (X = Date, Y = Severity)
Telefónica cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
Vivo (Telefônica Brasil)
Telefónica
FAQ
Latest Global CVEs
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response.
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.
IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authorization header automatically attached by the session adapter. The captured token grants full platform-scope tenant API access, enabling the attacker to read and manipulate the victim's DataStage projects, flows, assets, and pipeline definitions. This is client-side SDK code running on the user's own machine, so exploitation requires an external network interceptor rather than a co-tenant in the shared cluster.