What is the official website of MediaWorks NZ ?

The official website of MediaWorks NZ is http://www.mediaworks.co.nz.

What is MediaWorks NZ's cybersecurity risk score?

MediaWorks NZ has an AI-generated cybersecurity risk score of 649 out of 1000, indicating a Poor security posture according to Rankiteo's assessment.

How many security incidents has MediaWorks NZ experienced?

According to Rankiteo, MediaWorks NZ currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has MediaWorks NZ been affected by any supply chain cyber incidents ?

According to Rankiteo, MediaWorks NZ has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does MediaWorks NZ have SOC 2 Type 1 certification ?

According to Rankiteo, MediaWorks NZ is not certified under SOC 2 Type 1.

Does MediaWorks NZ have SOC 2 Type 2 certification ?

According to Rankiteo, MediaWorks NZ does not hold a SOC 2 Type 2 certification.

Does MediaWorks NZ comply with GDPR ?

According to Rankiteo, MediaWorks NZ is not listed as GDPR compliant.

Does MediaWorks NZ have PCI DSS certification ?

According to Rankiteo, MediaWorks NZ does not currently maintain PCI DSS compliance.

Does MediaWorks NZ comply with HIPAA ?

According to Rankiteo, MediaWorks NZ is not compliant with HIPAA regulations.

Does MediaWorks NZ have ISO 27001 certification ?

According to Rankiteo,MediaWorks NZ is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does MediaWorks NZ operate in ?

MediaWorks NZ operates primarily in the Broadcast Media Production and Distribution industry.

How many employees does MediaWorks NZ have ?

MediaWorks NZ employs approximately 927 people worldwide.

Does MediaWorks NZ own any subsidiaries ?

MediaWorks NZ presently has no subsidiaries across any sectors.

How many LinkedIn followers does MediaWorks NZ have ?

MediaWorks NZ's official LinkedIn profile has approximately 23,224 followers.

What is the NAICS classification code for MediaWorks NZ ?

MediaWorks NZ is classified under the NAICS code 515, which corresponds to Broadcasting (except Internet).

Does MediaWorks NZ have a Crunchbase profile ?

No, MediaWorks NZ does not have a profile on Crunchbase.

Does MediaWorks NZ have a LinkedIn profile ?

Yes, MediaWorks NZ maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/mediaworks-nz.

How many cybersecurity incidents has MediaWorks NZ experienced ?

As of July 2, 2026, Rankiteo reports that MediaWorks NZ has experienced 1 cybersecurity incidents.

How many peer or competitor companies does MediaWorks NZ have ?

MediaWorks NZ has an estimated 4,172 peer or competitor companies worldwide.

What types of cybersecurity incidents has MediaWorks NZ faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Ransomware.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

MediaWorks NZ

Boost Score +25 with badge (5 left)

649

/1000

Poor

674

/1000

Weak

MediaWorks NZ Vendor Cyber Rating & Cyber Score

mediaworks.co.nz

Add Your Compliance Badge

We make your media work. With MediaWorks, you tap into New Zealand’s most loved audio brands - The Edge, George, Mai, The Rock, The Sound, Magic, Channel X, The Breeze, More FM, and Humm. Add the country’s largest outdoor advertising network, the on-demand entertainment hub rova, plus our events, partnerships, and dynamic digital solutions, and you’ve got one powerful media partner. We connect with over 4.4 million Kiwis every month. From billboards, buses, and trains, to commuter networks and Wellington Airport, our reach covers the country. On air, online, in the car, at work, on your phone, and at home - we’re there. We’re always on, 24/7 - making sure your brand connects with your audience anytime, anywhere, in a way that sticks.

MediaWorks NZ A.I CyberSecurity Scoring

Scoring History

MediaWorks NZ

MediaWorks NZ CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

MediaWorks NZ

Ransomware

100

4/2026

MED1777911831

Loading…

A.I.

MediaWorks NZ Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for MediaWorks NZ

Incidents vs Broadcast Media Production and Distribution Industry Avg (This Year)

MediaWorks NZ has 46.81% fewer incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

MediaWorks NZ has 5.66% fewer incidents than the average of all companies with at least one recorded incident.

Incident Types MediaWorks NZ vs Broadcast Media Production and Distribution Industry Avg (This Year)

MediaWorks NZ reported 1 incidents this year: 0 cyber attacks, 1 ransomware, 0 vulnerabilities, 0 data breaches, compared to industry peers with at least 1 incident.

Incident History - MediaWorks NZ (X = Date, Y = Severity)

Loading…

SUBSIDIARY

MediaWorks NZ Subsidiaries

Parent Company

MediaWorks NZ

Broadcast Media Production and Distribution

Website: http://www.mediaworks.co.nz

Company Size: 501-1,000 employees

No subsidiary data available for this company.

Loading…

MediaWorks NZ Similar Companies

Fox Corporation

FoxCorporation.com

Under the FOX banner, we produce and distribute content through some of the world’s leading and most valued brands, including: FOX News Media, FOX Sports, FOX Entertainment, FOX Television Stations and Tubi Media Group. We empower a diverse range of creators to imagine and develop culturally significant content, while building an organization that thrives on creative ideas, operational expertise and strategic thinking. We have long been a leader in news, sports and entertainment programming, achieving strong revenue growth and profitability in a complex industry environment over the past several years. FOX will continue to invest across our businesses, allocate resources toward investments in higher growth initiatives and take advantage of strategic opportunities, including potential acquisitions across the range of the media categories in which we operate.

CBC/Radio-Canada

radio-canada.ca

CBC/Radio-Canada is Canada's national public broadcaster and a strong advocate of Canadian culture. We offer a unique space and a fresh Canadian perspective with unmatched cultural, musical and documentary programming. We do it in French, English and eight Aboriginal languages. Our activities promote creative work and contribute to the local economy. In television only, our investments in independent Canadian productions fund more than 10,000 jobs across the country. For a complete list of our current job opportunities, visit cbc.radio-canada.ca/jobs

Sky

sky.com

Sky connects and entertains millions of people across Europe. At the heart of everything we do, is a belief that people deserve better. For decades, we’ve shaken up every category we entered to give people what they love, to make life a little easier and to provide great value. That’s how we bring millions of customers the joy of a better experience in TV, broadband and mobile. In TV, we offer the best sports coverage, unmissable TV and the smartest ways to stream and aggregate the TV you love. In broadband, we power homes and businesses, with a fast, reliable connection. In mobile, we bring people closer, with plans at unbeatable value. And now, you can even keep your home connected and protected, through our smart insurance. We design our products to fit seamlessly into your life, with service whenever and however you need it. That’s how we do better for customers. And we believe in better for society too. We power the cultural economy in the UK and beyond, making award-winning news, original sport, and entertainment. We contribute billions to UK GDP, creating and sustaining thousands of jobs and sharing both our journalism and our coverage of the arts, free of charge. We are cutting emissions and making recyclable, energy-efficient products, and we give back, through free internet access and digital skills for under-served communities and young people. Sky is owned by Comcast Corporation, a global media and technology company.

MultiChoice Group

multichoice.com

MultiChoice Group is a leading entertainment company and we’re home to some of the most recognised brands on the continent. Our entertainment platforms – DStv, GOtv, Showmax and DStv Now – are a hub for more than 19 million people across 50 countries. Through Irdeto, we‘re a world leader in content security, management and delivery for pay-media companies. We’re driven by a desire to enrich lives, to make a difference to the communities and countries where we operate. Through our commitment to local content, we’re able to bring African storytelling to a global audience – and we do this through innovative technology that brings the magic to our customers wherever they are, on whatever device they’re using.

iHeartMedia

iheartmedia.com

iHeartMedia, Inc. [Nasdaq: IHRT] is the leading audio media company in America, with 90% of Americans listening to iHeart broadcast radio in every month. iHeart’s broadcast radio assets alone have a larger audience in the U.S. than any other media outlet; twice the size of the next largest broadcast radio company; and over four times the ad-enabled audience of the largest digital only audio service. iHeart is the largest podcast publisher according to Podtrac, with more downloads than the next two podcast publishers combined, has the most recognizable live events across all genres of music, has the number one social footprint among audio players, with seven times more followers than the next audio media brand, and is the only fully integrated audio ad tech solution across broadcast, streaming and podcasts. The company continues to leverage its strong audience connection and unparalleled consumer reach to build new platforms, products and services. Visit iHeartMedia.com for more company information.

ESPN

espncareers.com

ESPN is the leading multiplatform sports entertainment brand that features seven U.S. television networks, the leading sports app, direct-to-consumer ESPN+, leading social and digital platforms, ESPN.com, ESPN Audio, endeavors on every continent around the world, and more. ESPN is 80 percent owned by ABC, Inc. (an indirect subsidiary of The Walt Disney Company) and 20 percent by Hearst. Based in Bristol, Conn., ESPN has approximately 3,800 employees (4,600 worldwide).

Loading…

NEWS

MediaWorks NZ CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

August 14, 2025 07:00 AM

Neglected software updates put Kiwi SMEs at cyber threat risk

Neglected software updates are exposing New Zealand SMEs to cyber risks, with delays in patching third-party apps raising chances of attacks...

Read Article

July 12, 2025 07:00 AM

Supermarket loyalty card cyberattack prompts password warning

A cybersecurity attack has prompted a warning for supermarket customers to change their passwords and some accounts may have been accessed by outsiders.

Read Article

February 06, 2025 04:53 AM

100 Cybersecurity Leaders In ANZ Who Are Making A Difference

As cyber threats become more advanced, the need for strong leadership in cybersecurity is clearer than ever. Across Australia and New Zealand, cybersecurity...

Read Article

November 13, 2024 04:03 PM

Hackers demand ransom from New Zealanders whose data was allegedly stolen in a data breach at local media firm

MediaWorks, a leading New Zealand radio, outdoor advertising, and interactive media company, is investigating a data breach that may have exposed the...

Read Article

September 03, 2024 07:00 AM

Cyber threats: SMEs don’t know where to start

Small and medium sized businesses have a one in three chance of being the target of a cyber attack.

Read Article

May 23, 2024 07:00 AM

Transport Agency privacy breach: 1500 motorists' information illegally accessed

The New Zealand Transport Agency is investigating a privacy breach involving illegal access of information held on driver licence and motor vehicle registers.

Read Article

April 15, 2024 07:00 AM

Companies and organisations underprepared and overconfident, says cyber security firm

A global cyber security firm says New Zealand companies and organisations are underprepared and overconfident and need to narrow their focus to combat cyber...

Read Article

March 25, 2024 07:00 AM

Protecting yourself after a data breach: What you need to know

More than 400,000 people have had their personal details compromised by a cyber attack on MediaWorks. The information, taken from a database...

Read Article

March 22, 2024 07:00 AM

403,000 people's personal information taken in MediaWorks cyberattack

More than 400,000 people have had their information taken in a cyber attack on MediaWorks. The company said the attacker took information...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-55790

SUMMARY

Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.22 and 4.0.0-RC1 through 4.17.15, an attacker with only a GitHub account can plant a JavaScript payload in a craftcms/cms issue title. When a Craft admin uses the CraftSupport widget’s "Give feedback" screen and types a search term that returns the poisoned issue, the payload executes in the admin’s control panel session. No control panel account or elevated privileges are required on the attacker’s side. This issue has been fixed in versions 4.17.16 and 5.9.23.

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

cvss4

Base Score: 7.4

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-50284

SUMMARY

Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.21 and 4.0.0-RC1 through 4.17.14, theAssetsController::actionDeleteFolder() only requires the deleteAssets:<volume-uid> permission for the target folder. It never enforces deletePeerAssets:<volume-uid>, even though Assets::deleteFoldersByIds() cascades deletion to every descendant folder and every asset inside, regardless of the uploader's assigned privileges. A low-privilege user who has been granted folder-management rights on a shared volume can therefore destroy assets uploaded by other users (peer assets), bypassing the per-asset peer-permission check that the sibling actionDeleteAsset endpoint correctly applies. This issue has been fixed in versions 4.17.15 and 5.9.22.

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-50283

SUMMARY

Craft CMS is a content management system (CMS). Versions 5.0.0-RC1 through 5.9.20, and 4.0.0-RC1 through 4.17.13 contain an authorization issue in the AssetsController::actionReplaceFile that can delete a source asset without source delete permission by supplying both assetId and sourceAssetId. AssetsController::actionReplaceFile() supports replacing a target asset file using another existing asset as the source. The action loads: assetId -> $assetToReplace and sourceAssetId -> $sourceAsset, then enforces replace permissions using ($assetToReplace ?: $sourceAsset). When both IDs are provided, this expression resolves to the target asset so no permission check is performed against the source asset volume. When both assets are present, Craft copies the source file into the target and then deletes the source asset. There is no deletion check for for the source asset. An authenticated user who can replace files in one volume can delete assets in another volume where they do not have delete permission, as long as they can obtain a sourceAssetId, leading to broken content references and data loss. This issue has been fixed in versions 4.17.14 and 5.9.21.

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-14440

SUMMARY

Description: To issue and renew TLS certificates on behalf of customers, Cloudflare's Universal SSL feature automatically manages the CAA RRset for the customer's zone. This auto-managed RRset is permissive by design (e.g. 'issue "letsencrypt.org"' without parameters). On Universal SSL zones, Cloudflare's authoritative DNS serves this auto-managed RRset at query time, superseding any customer-configured CAA records on the zone. When a customer publishes a stricter CAA record using the RFC 8657 accounturi or validationmethods parameters, the Certificate Authority does not observe those parameters when evaluating the served RRset under RFC 8659. As a result, the RFC 8657 account-binding and validation-method-binding protections are not enforced end-to-end on Universal SSL zones. Successful exploitation could result in issuance of a browser-trusted TLS certificate to an attacker, enabling MITM against the affected domain. Exploitation is non-trivial in practice: an attacker would need to hold an ACME account at one of the Certificate Authorities in the served CAA RRset and to simultaneously satisfy domain control validation across the multiple geographically distinct Network Perspectives the CA relies on for Multi-Perspective Issuance Corroboration. Cloudflare prefixes are anycast-announced from hundreds of locations globally, raising the bar against single-vantage-point BGP hijacks. Any resulting misissuance of a browser-trusted certificate is subject to Certificate Transparency logging required by major browsers, and would be visible to CT monitoring. Mitigation: Customers requiring strict RFC 8657 enforcement need to disable Universal SSL on the affected zone. Universal SSL's automatic CAA management and customer-set RFC 8657 accounturi and validationmethods enforcement are mutually exclusive by the nature of the issue, so there is no in-product workaround that preserves both. Certificate Transparency monitoring is recommended for all customers as a general detection control. Credits: David Osipov (ORCID: https://orcid.org/0009-0005-2713-9242), independent researcher

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

cvss4

Base Score: 7.6

Complexity: HIGH

CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-14422

SUMMARY

Out of bounds read and write in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…