Comparison Overview
23ABC (KERO-TV)

23ABC (KERO-TV)
321 21st Street, Bakersfield, California, 93301, US
Last Update: 18/02/2026
KERO-TV serves audiences and businesses by distributing information through television, social media and digital media brands. We serve people on every screen they own. Audiences use the various KERO-TV brands as tools to share their opinions, socialize with KERO-TV and...

iHeartMedia
125 W 55th St., New York, NY, US, 10019
Last Update: 05/09/2026
iHeartMedia, Inc. [Nasdaq: IHRT] is the leading audio media company in America, with 90% of Americans listening to iHeart broadcast radio in every month. iHeart’s broadcast radio assets alone have a larger audience in the U.S. than any other media outlet; twice the size...
Compliance Ranges Comparison

23ABC (KERO-TV)







iHeartMedia






Benchmark & Cyber Underwriting Signals
Incidents vs Broadcast Media Production and Distribution Industry Avg (This Year)
No incidents recorded for 23ABC (KERO-TV) in 2026.
Incidents vs Broadcast Media Production and Distribution Industry Avg (This Year)
No incidents recorded for iHeartMedia in 2026.
Incident History - 23ABC (KERO-TV) (X = Date, Y = Severity)
23ABC (KERO-TV) cyber incidents detection timeline including parent company and subsidiaries.
Incident History - iHeartMedia (X = Date, Y = Severity)
iHeartMedia cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

23ABC (KERO-TV)

iHeartMedia
FAQ
Latest Global CVEs
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response.
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.
IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authorization header automatically attached by the session adapter. The captured token grants full platform-scope tenant API access, enabling the attacker to read and manipulate the victim's DataStage projects, flows, assets, and pipeline definitions. This is client-side SDK code running on the user's own machine, so exploitation requires an external network interceptor rather than a co-tenant in the shared cluster.