Canadas Largest Specialty Fitness Retailer with 40 stores nationwide. We carry simply the best Brands and Products at every Price Point Premier Cardio brands include Precor, Octane, Pacemaster, Bremshey. Strength brands include Torque Fitness and Northern Lights
Here at Aetna, a CVS Health® company, we’re building a healthier world by making health care easy, affordable and all about you. Because Healthier Happens Together™! Follow our page for company news, industry commentary, jobs and more. Founded in 1853 in Hartford, CT, Aetna® is one of the nation's leading diversified health care benefits companies, serving an estimated 39 million people with information and resources to help them make better decisions about their health. As a health care leader, we believe that our corporate responsibility starts with helping people live healthier lives. And that means using our resources to make the communities and the world we live in better places. Diversity & Inclusion: Our focus on diversity and inclusion reflects the world around us. Having a diverse group of employees gives us a broader and deeper view of how to serve the people and businesses in our communities. As part of CVS Health, over 70% of our workforce is comprised of women. Join us as we transform the health care system. Our employees are the cornerstone of our mission to help people live healthier lives. Get to know us, why we're passionate about what we do and what makes Aetna a great place to work.
Security & Compliance Standards Overview
No incidents recorded for Fitness Depot in 2025.
No incidents recorded for Aetna, a CVS Health Company in 2025.
Fitness Depot cyber incidents detection timeline including parent company and subsidiaries
Aetna, a CVS Health Company cyber incidents detection timeline including parent company and subsidiaries
Last 3 Security & Risk Events by Company
Nagios XI versions prior to 2026R1.1 are vulnerable to local privilege escalation due to an unsafe interaction between sudo permissions and application file permissions. A user‑accessible maintenance script may be executed as root via sudo and includes an application file that is writable by a lower‑privileged user. A local attacker with access to the application account can modify this file to introduce malicious code, which is then executed with elevated privileges when the script is run. Successful exploitation results in arbitrary code execution as the root user.
Out of bounds read and write in V8 in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Use after free in WebGPU in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
SIPGO is a library for writing SIP services in the GO language. Starting in version 0.3.0 and prior to version 1.0.0-alpha-1, a nil pointer dereference vulnerability is in the SIPGO library's `NewResponseFromRequest` function that affects all normal SIP operations. The vulnerability allows remote attackers to crash any SIP application by sending a single malformed SIP request without a To header. The vulnerability occurs when SIP message parsing succeeds for a request missing the To header, but the response creation code assumes the To header exists without proper nil checks. This affects routine operations like call setup, authentication, and message handling - not just error cases. This vulnerability affects all SIP applications using the sipgo library, not just specific configurations or edge cases, as long as they make use of the `NewResponseFromRequest` function. Version 1.0.0-alpha-1 contains a patch for the issue.
GLPI is a free asset and IT management software package. Starting in version 9.1.0 and prior to version 10.0.21, an unauthorized user with an API access can read all knowledge base entries. Users should upgrade to 10.0.21 to receive a patch.
