Comparison Overview
CNN

CNN
Atlanta, US
Last Update: 03/04/2026
CNN Worldwide is the most honored brand in cable news, reaching more individuals on television and online than any other cable news organization in the United States. Globally, people across the world can watch CNN International, which is widely distributed in over 200 ...

iHeartMedia
125 W 55th St., New York, NY, US, 10019
Last Update: 05/09/2026
iHeartMedia, Inc. [Nasdaq: IHRT] is the leading audio media company in America, with 90% of Americans listening to iHeart broadcast radio in every month. iHeart’s broadcast radio assets alone have a larger audience in the U.S. than any other media outlet; twice the size...
Compliance Ranges Comparison

CNN







iHeartMedia






Benchmark & Cyber Underwriting Signals
Incidents vs Broadcast Media Production and Distribution Industry Avg (This Year)
No incidents recorded for CNN in 2026.
Incidents vs Broadcast Media Production and Distribution Industry Avg (This Year)
No incidents recorded for iHeartMedia in 2026.
Incident History - CNN (X = Date, Y = Severity)
CNN cyber incidents detection timeline including parent company and subsidiaries.
Incident History - iHeartMedia (X = Date, Y = Severity)
iHeartMedia cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

CNN

iHeartMedia
FAQ
Latest Global CVEs
The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling that is reachable before authentication. This can be leveraged by an unauthenticated network attacker to achieve arbitrary code execution as root, or to cause a denial of service, using a single crafted request.
Denuvo Anti-Tamper through 2026-03-04 allows bypass of a hypervisor presence check via CPUID interception (SimpleSvm.sys on AMD; hyperkd.sys and hyperhv.dll on Intel).
PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archive because "quotation character already used in the string" is mishandled.
Zilliz Attu before 3.0.0 has a Playground feature that does not require authentication for proxying arbitrary HTTP and HTTPS requests to URLs on the public internet.
The Playground feature of Zilliz Attu before 3.0.0 allows SSRF (proxying of requests to private IP addresses).