The BBC is the world’s leading public service broadcaster. We’re impartial and independent, and every day we create distinctive, world-class programmes and content which inform, educate and entertain millions of people in the UK and around the world.
With over a quarter of a billion monthly listeners in the U.S. and over 129 million social followers, iHeartMedia has the largest national reach of any radio or television outlet in America. As the leader in multiplatform connections, it also serves over 150 local markets through 858 owned radio stations, and the company’s radio stations and content can be heard on AM/FM, HD digital radio, satellite radio, on the Internet at iHeartRadio.com and on the company’s radio station websites, on the iHeartRadio mobile app, in enhanced auto dashes, on tablets, wearables and smartphones, and on gaming consoles. iHeartRadio, iHeartMedia’s digital radio platform, is the fastest growing digital audio service in the U.S., available on over 260 platforms and 2000+ devices. iHeartRadio offers users thousands of live radio stations, personalized custom artist stations created by just one song or seed artist and the top podcasts and personalities. With over 1.7 billion downloads, iHeartRadio reached 110 million registered users faster than any other radio or digital music service. iHeartMedia’s platforms include radio broadcasting, online, mobile, digital and social media, podcasts, personalities and influencers, live concerts and events, syndication, music research services and independent media representation. iHeartMedia is a division of iHeartMedia, Inc. (PINK: IHRT). Visit iHeartMedia.com for more company information.
Security & Compliance Standards Overview
BBC has 0.0% fewer incidents than the average of same-industry companies with at least one recorded incident.
No incidents recorded for iHeartMedia in 2025.
BBC cyber incidents detection timeline including parent company and subsidiaries
iHeartMedia cyber incidents detection timeline including parent company and subsidiaries
Last 3 Security & Risk Events by Company
NXLog Agent before 6.11 can load a file specified by the OPENSSL_CONF environment variable.
uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas.
A vulnerability was detected in Mayan EDMS up to 4.10.1. The affected element is an unknown function of the file /authentication/. The manipulation results in cross site scripting. The attack may be performed from remote. The exploit is now public and may be used. Upgrading to version 4.10.2 is sufficient to fix this issue. You should upgrade the affected component. The vendor confirms that this is "[f]ixed in version 4.10.2". Furthermore, that "[b]ackports for older versions in process and will be out as soon as their respective CI pipelines complete."
MJML through 4.18.0 allows mj-include directory traversal to test file existence and (in the type="css" case) read files. NOTE: this issue exists because of an incomplete fix for CVE-2020-12827.
A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network (including link-local or loopback services).
