More Americans get their news from ABC News than from any other news source.
ITI Group was originally founded in 1984 by Jan Wejchert and Mariusz Walter. Bruno Valsangiacomo joined in 1991 as the third Founding Shareholder. They were known as the 3 Musqueteers creating from scratch leading businesses in Poland. ITI Group was a pioneer in building state of the art businesses such as the first Polish potatoe chips operations (Chio Chips), first importer of top beer brands, consumer electronics (Hitachi), first certified Home Video distributor (major Hollywood and Independent Studios), first professional advertising agency (ITI/McCann Polska), first professional TV commercial producer (ITI Film Studios) to name a few. Starting 1993 Grupa ITI focused on TV and electronic media creating from scratch leading brands such as TVN, TVN24, TVNTurbo, TVNStyle and other Thematic Channels (TVN Group now owned by DiscoveryTimeWarner), a leading own Polish TV content production including the joint venture Endemol Neovision, Multikino (now owned by Vue Cinemas), a state of the art Multiplex Cinema chain in Poland and Baltic states, n+ the technologically most advanced PayTV operations in Poland becoming after the merger with canal+ the most important PayTV operator nc+. Onet.pl the leading internet operations in Poland - one of the largest in Europe - now owned by RingerAxelSpringer, and some other media ventures in Poland. Grupa ITI took also over the leading Polish soccer club Legia Warsawa, saved it from bankruptcy and was the driving force in building a state of the art new stadium, the club continuing to remain the most successful one in Poland. After the death of Jan Wejchert in 2009 the 2 remaining Founding Shareholders and the heirs of Jan Wejchert decided to sell their various businesses over time to reliable partners securing continuity and respecting the legacy and principles of the 3 Founding Shareholder such as independent and reliable news securing a proper functioning of the regained Polish democracy. ITI Group was dissolved in 2016.
Security & Compliance Standards Overview
No incidents recorded for ABC News in 2025.
No incidents recorded for ITI Group in 2025.
ABC News cyber incidents detection timeline including parent company and subsidiaries
ITI Group cyber incidents detection timeline including parent company and subsidiaries
Last 3 Security & Risk Events by Company
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.
