Comparison Overview

Wyoming Public Radio & Media

VS

ESPN

Wyoming Public Radio & Media

1000 E University Ave., Laramie, Wyoming, 82071, US
Last Update: 2025-03-06 (UTC)
Between 900 and 1000
http://wyomingpublicmedia.org/

Excellent

The mission of Wyoming Public Media is to connect Wyoming through news and cultural programming that informs, inspires, and educates. Wyoming Public Radio is a commercial free station licensed to the University of Wyoming. We broadcast to over 90% Wyoming. Our programming is primarily news, classical music, and contemporary music. We also air jazz, folk, bluegrass, and unique entertainment programs. Wyoming Public Radio is the state's only member of National Public Radio. We're here to share our stories, updates, events, and create a space for listeners to see and discuss our news.

NAICS: 515
NAICS Definition:
Employees: 20
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

ESPN

1 ESPN Plaza, Bristol, CT, 06010, US
Last Update: 2025-05-06 (UTC)

Excellent

Between 900 and 1000
http://espncareers.com

ESPN is the leading multiplatform sports entertainment brand that features seven U.S. television networks, the leading sports app, direct-to-consumer ESPN+, leading social and digital platforms, ESPN.com, ESPN Audio, endeavors on every continent around the world, and more. ESPN is 80 percent owned by ABC, Inc. (an indirect subsidiary of The Walt Disney Company) and 20 percent by Hearst. Based in Bristol, Conn., ESPN has approximately 3,800 employees (4,600 worldwide).

NAICS: 515
NAICS Definition: Broadcasting (except Internet)
Employees: 11,411
Subsidiaries: 65
12-month incidents
0
Known data breaches
6
Attack type number
2

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/wyoming-public-radio.jpeg
Wyoming Public Radio & Media
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
https://images.rankiteo.com/companyimages/espn.jpeg
ESPN
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
Compliance Summary
Wyoming Public Radio & Media
100%
Compliance Rate
0/4 Standards Verified
ESPN
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Broadcast Media Production and Distribution Industry Average (This Year)

No incidents recorded for Wyoming Public Radio & Media in 2025.

Incidents vs Broadcast Media Production and Distribution Industry Average (This Year)

No incidents recorded for ESPN in 2025.

Incident History — Wyoming Public Radio & Media (X = Date, Y = Severity)

Wyoming Public Radio & Media cyber incidents detection timeline including parent company and subsidiaries

Incident History — ESPN (X = Date, Y = Severity)

ESPN cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/wyoming-public-radio.jpeg
Wyoming Public Radio & Media
Incidents

No Incident

https://images.rankiteo.com/companyimages/espn.jpeg
ESPN
Incidents

Date Detected: 6/2025
Type:Ransomware
Motivation: Financial Gain, Data Leak
Blog: Blog

Date Detected: 5/2025
Type:Breach
Attack Vector: Phishing, Malware
Motivation: Data exfiltration, Financial gain, Public disclosure
Blog: Blog

Date Detected: 2/2025
Type:Breach
Attack Vector: Malicious AI tool installation
Blog: Blog

FAQ

Both Wyoming Public Radio & Media company and ESPN company demonstrate a comparable AI risk posture, with strong governance and monitoring frameworks in place.

ESPN company has historically faced a number of disclosed cyber incidents, whereas Wyoming Public Radio & Media company has not reported any.

In the current year, ESPN company has reported more cyber incidents than Wyoming Public Radio & Media company.

ESPN company has confirmed experiencing a ransomware attack, while Wyoming Public Radio & Media company has not reported such incidents publicly.

ESPN company has disclosed at least one data breach, while Wyoming Public Radio & Media company has not reported such incidents publicly.

Neither ESPN company nor Wyoming Public Radio & Media company has reported experiencing targeted cyberattacks publicly.

Neither Wyoming Public Radio & Media company nor ESPN company has reported experiencing or disclosing vulnerabilities publicly.

ESPN company has more subsidiaries worldwide compared to Wyoming Public Radio & Media company.

ESPN company employs more people globally than Wyoming Public Radio & Media company, reflecting its scale as a Broadcast Media Production and Distribution.

Latest Global CVEs (Not Company-Specific)

Description

A vulnerability was determined in Tomofun Furbo 360 and Furbo Mini. The impacted element is an unknown function of the file /etc/shadow of the component Password Handler. Executing manipulation can lead to use of weak hash. The physical device can be targeted for the attack. The attack requires a high level of complexity. The exploitability is regarded as difficult. The exploit has been publicly disclosed and may be utilized. The firmware versions determined to be affected are Furbo 360 up to FB0035_FW_036 and Furbo Mini up to MC0020_FW_074. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2025-10-12
Updated
Date
2025-10-12
Risk Information
cvss2
Base: 1.0
Severity: HIGH
AV:L/AC:H/Au:S/C:P/I:N/A:N
cvss3
Base: 1.8
Severity: HIGH
CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
cvss4
Base: 1.0
Severity: HIGH
CVSS:4.0/AV:P/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability was found in Tomofun Furbo 360 and Furbo Mini. The affected element is an unknown function of the component Root Account Handler. Performing manipulation results in use of hard-coded password. The attack must be initiated from a local position. The attack is considered to have high complexity. The exploitability is described as difficult. The exploit has been made public and could be used. The firmware versions determined to be affected are Furbo 360 up to FB0035_FW_036 and Furbo Mini up to MC0020_FW_074. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2025-10-12
Updated
Date
2025-10-12
Risk Information
cvss2
Base: 6.0
Severity: HIGH
AV:L/AC:H/Au:S/C:C/I:C/A:C
cvss3
Base: 7.0
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
cvss4
Base: 7.3
Severity: HIGH
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability has been found in Tomofun Furbo 360 and Furbo Mini. Impacted is an unknown function of the file TF_FQDN.json of the component GATT Interface URL Handler. Such manipulation leads to server-side request forgery. The attack may be performed from remote. Attacks of this nature are highly complex. The exploitability is considered difficult. The exploit has been disclosed to the public and may be used. The firmware versions determined to be affected are Furbo 360 up to FB0035_FW_036 and Furbo Mini up to MC0020_FW_074. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2025-10-12
Updated
Date
2025-10-12
Risk Information
cvss2
Base: 5.1
Severity: HIGH
AV:N/AC:H/Au:N/C:P/I:P/A:P
cvss3
Base: 5.6
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.3
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A flaw has been found in Tomofun Furbo 360 and Furbo Mini. This issue affects some unknown processing of the component GATT Service. This manipulation of the argument DeviceToken causes information disclosure. The attack is only possible within the local network. A high degree of complexity is needed for the attack. The exploitability is assessed as difficult. The exploit has been published and may be used. The firmware versions determined to be affected are Furbo 360 up to FB0035_FW_036 and Furbo Mini up to MC0020_FW_074. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2025-10-12
Updated
Date
2025-10-12
Risk Information
cvss2
Base: 1.8
Severity: HIGH
AV:A/AC:H/Au:N/C:P/I:N/A:N
cvss3
Base: 3.1
Severity: HIGH
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
cvss4
Base: 2.3
Severity: HIGH
CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability was detected in Tomofun Furbo 360 and Furbo Mini. This vulnerability affects unknown code of the component GATT Service. The manipulation results in improper access controls. The attack can only be performed from the local network. The exploit is now public and may be used. The firmware versions determined to be affected are Furbo 360 up to FB0035_FW_036 and Furbo Mini up to MC0020_FW_074. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2025-10-12
Updated
Date
2025-10-12
Risk Information
cvss2
Base: 5.8
Severity: LOW
AV:A/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 6.3
Severity: LOW
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References