SQUARE™ is offering custom and standard products for promotion and merchandising. Our full-service solutions range from creative concepts and design, to production and logistics. Based on your idea or specific needs, we deliver unique products that stand out.
Quad (NYSE: QUAD) is a global marketing experience company that helps brands make direct consumer connections, from household to in-store to online. Supported by state-of-the-art technology and data-driven intelligence, Quad uses its suite of media, creative and production solutions to streamline the complexities of marketing and remove friction from wherever it occurs in the marketing journey. Quad tailors its uniquely flexible, scalable and connected solutions to clients’ objectives, driving cost efficiencies, improving speed to market, strengthening marketing effectiveness, and delivering value on client investments. Quad employs approximately 13,000 people in 14 countries and serves approximately 2,700 clients including industry leading blue-chip companies that serve both businesses and consumers in multiple industry verticals, with a particular focus on commerce, including retail, consumer packaged goods, and direct-to-consumer; financial services; and health. Quad is ranked as the 14th largest agency company in the U.S. by Ad Age (2023), and the second-largest commercial printer in North America, according to Printing Impressions (2023). For more information about Quad, including its commitment to ongoing innovation, culture and sustainable impact, visit quad.com.
Security & Compliance Standards Overview
No incidents recorded for SQUARE in 2025.
No incidents recorded for Quad in 2025.
SQUARE cyber incidents detection timeline including parent company and subsidiaries
Quad cyber incidents detection timeline including parent company and subsidiaries
Last 3 Security & Risk Events by Company
Nagios XI versions prior to 2026R1.1 are vulnerable to local privilege escalation due to an unsafe interaction between sudo permissions and application file permissions. A user‑accessible maintenance script may be executed as root via sudo and includes an application file that is writable by a lower‑privileged user. A local attacker with access to the application account can modify this file to introduce malicious code, which is then executed with elevated privileges when the script is run. Successful exploitation results in arbitrary code execution as the root user.
Out of bounds read and write in V8 in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Use after free in WebGPU in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
SIPGO is a library for writing SIP services in the GO language. Starting in version 0.3.0 and prior to version 1.0.0-alpha-1, a nil pointer dereference vulnerability is in the SIPGO library's `NewResponseFromRequest` function that affects all normal SIP operations. The vulnerability allows remote attackers to crash any SIP application by sending a single malformed SIP request without a To header. The vulnerability occurs when SIP message parsing succeeds for a request missing the To header, but the response creation code assumes the To header exists without proper nil checks. This affects routine operations like call setup, authentication, and message handling - not just error cases. This vulnerability affects all SIP applications using the sipgo library, not just specific configurations or edge cases, as long as they make use of the `NewResponseFromRequest` function. Version 1.0.0-alpha-1 contains a patch for the issue.
GLPI is a free asset and IT management software package. Starting in version 9.1.0 and prior to version 10.0.21, an unauthorized user with an API access can read all knowledge base entries. Users should upgrade to 10.0.21 to receive a patch.
