SQUARE™ is offering custom and standard products for promotion and merchandising. Our full-service solutions range from creative concepts and design, to production and logistics. Based on your idea or specific needs, we deliver unique products that stand out.
IPG Mediabrands is the media and marketing solutions division of Interpublic Group (NYSE: IPG). IPG Mediabrands manages over $47 billion in marketing investment globally on behalf of its clients across its full-service agency networks UM, Initiative and Mediahub and through its award-winning specialized business units Healix, KINESSO, MAGNA, Mediabrands Content Studio, Orion Holdings, Rapport, and the IPG Media Lab. IPG Mediabrands clients include many of the world’s most recognizable and iconic brands from a broad portfolio of industry sectors including automotive, personal finance, consumer product goods (CPG), pharma, health and wellness, entertainment, financial services, energy, toys and gaming, direct to consumer and e-commerce, retail, hospitality, food and beverage, fashion and beauty. The company employs more than 18,000 diverse marketing communication professionals in more than 130 countries. Learn more at www.ipgmediabrands.com.
Security & Compliance Standards Overview
No incidents recorded for SQUARE in 2025.
No incidents recorded for IPG Mediabrands in 2025.
SQUARE cyber incidents detection timeline including parent company and subsidiaries
IPG Mediabrands cyber incidents detection timeline including parent company and subsidiaries
Last 3 Security & Risk Events by Company
Nagios XI versions prior to 2026R1.1 are vulnerable to local privilege escalation due to an unsafe interaction between sudo permissions and application file permissions. A user‑accessible maintenance script may be executed as root via sudo and includes an application file that is writable by a lower‑privileged user. A local attacker with access to the application account can modify this file to introduce malicious code, which is then executed with elevated privileges when the script is run. Successful exploitation results in arbitrary code execution as the root user.
Out of bounds read and write in V8 in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Use after free in WebGPU in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
SIPGO is a library for writing SIP services in the GO language. Starting in version 0.3.0 and prior to version 1.0.0-alpha-1, a nil pointer dereference vulnerability is in the SIPGO library's `NewResponseFromRequest` function that affects all normal SIP operations. The vulnerability allows remote attackers to crash any SIP application by sending a single malformed SIP request without a To header. The vulnerability occurs when SIP message parsing succeeds for a request missing the To header, but the response creation code assumes the To header exists without proper nil checks. This affects routine operations like call setup, authentication, and message handling - not just error cases. This vulnerability affects all SIP applications using the sipgo library, not just specific configurations or edge cases, as long as they make use of the `NewResponseFromRequest` function. Version 1.0.0-alpha-1 contains a patch for the issue.
GLPI is a free asset and IT management software package. Starting in version 9.1.0 and prior to version 10.0.21, an unauthorized user with an API access can read all knowledge base entries. Users should upgrade to 10.0.21 to receive a patch.
