Comparison Overview
XPO
XPO
Five American Lane, Greenwich, CT, US, 06831
Last Update: 13/09/2026
XPO provides world-class transportation solutions to the most successful companies in the world. We have a high-energy team around the globe focused on being the best in the industry. Given the scope of our business, there are opportunities to do satisfying work in many...
STEF
93 Boulevard Malesherbes, Paris, 75008, FR
Last Update: 14/09/2026
STEF group is the European leader for temperature controlled logistics and transport. Our 22,000 employees in 8 countries are dedicated to serve everyday agrifood, distribution, foodservice and seafood players with the highest standards of security, rapidity and quality...
Compliance Ranges Comparison
XPO
STEF
Benchmark & Cyber Underwriting Signals
Incidents vs Truck Transportation Industry Avg (This Year)
No incidents recorded for XPO in 2026.
Incidents vs Truck Transportation Industry Avg (This Year)
No incidents recorded for STEF in 2026.
Incident History - XPO (X = Date, Y = Severity)
XPO cyber incidents detection timeline including parent company and subsidiaries.
Incident History - STEF (X = Date, Y = Severity)
STEF cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
XPO
STEF
FAQ
Latest Global CVEs
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
A flaw was found in Podman. If an attacker can pass a crafted tar archive to the `podman load` command, they can create files on the host machine with the privileges of the user running Podman.
Integer overflow or wraparound vulnerability in Samsung Opensource Escargot allows attackers with write access to the bytecode-cache directory to cause a heap-based buffer overflow and denial of service via a crafted cache file. This issue affects Escargot: ac94df78493ee6fede286620d94f724e46b4d238.
Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in L7 content management pages that use eval() sinks, affecting the call board text and policy group handling components. Attackers can inject persistent script payloads through these pages to have malicious code executed in the context of other users viewing the affected content.