Hungary security reports

M

MédiaKlikk

mediaklikk.hu

40

MédiaKlikk is a Hungarian media platform offering live streaming of multiple TV and radio channels, program guides, and media archives primarily targeting Hungarian-speaking audiences. It operates under the umbrella of MTVA, the Hungarian public media organization, and serves as a central hub for national media content. The platform leverages WordPress CMS with a variety of plugins and integrates social login options and user account management features. The website demonstrates a consistent brand presence and good content relevance for its target audience. Technically, the site uses a modern web stack including jQuery, jQuery UI, Video.js, and ElasticPress, hosted on Telekom Hungary infrastructure. While the site is mobile-optimized and includes accessibility features, performance metrics are not explicitly available. SEO practices are implemented with proper meta tags and structured data. However, the absence of HTTPS is a critical security gap, significantly impacting the site's security posture. From a security perspective, the site lacks a valid SSL certificate, HSTS, and other modern security headers, exposing users to potential risks. It employs reCAPTCHA for form protection and uses third-party analytics and tracking services such as Facebook Pixel, Hotjar, and Gemius, indicating extensive user tracking. Privacy compliance is basic, with a privacy policy present but no visible cookie consent mechanism. Incident response and vulnerability disclosure information are not found. Overall, while MédiaKlikk is a reputable media platform with solid business credibility and content quality, its security posture requires urgent improvement, especially regarding HTTPS implementation and enhanced privacy compliance. Strategic recommendations include securing the site with SSL, enabling security headers, and implementing a cookie consent mechanism to align with GDPR requirements.

C

Central Médiacsoport Zrt.

24.hu

40

24.hu is a leading Hungarian news portal operated by Central Médiacsoport Zrt., offering a wide range of news content including domestic and international news, culture, sports, and lifestyle. The site features multimedia content such as videos and podcasts, and supports subscription services. Technically, the site is built on WordPress with WPBakery Page Builder and hosted on AWS infrastructure with CloudFront CDN and Redis caching for performance optimization. However, the security posture is weak due to the absence of a valid SSL certificate and lack of TLS protocol support, which poses significant risks for user data protection and trust. Privacy and cookie policies are comprehensive and GDPR compliant, supporting user consent mechanisms. Overall, the site is professionally designed and content-rich but requires urgent security improvements to protect users and maintain credibility.

H

Helló Sajtó! Üzleti Sajtószolgálat

hellosajto.hu

40

Helló Sajtó! Üzleti Sajtószolgálat is a Hungarian online media platform specializing in publishing and distributing business press releases. Established in 2022, it serves businesses, PR agencies, and institutions primarily in Hungary, offering services such as press release publication, distribution, and effectiveness measurement. The website is built on WordPress with Elementor and uses the Smart Mag theme, hosted on a server managed by Mediacenter.hu. The platform integrates Google Tag Manager and Google Ad Manager for analytics and advertising purposes. Despite a professional design and good content quality, the site lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security vulnerability. Privacy and cookie policies are present and GDPR compliant, and contact information is clearly provided, including email and phone. Social media presence is active on Facebook, LinkedIn, and Twitter. Overall, the website is functional and credible but requires urgent security improvements to protect user data and enhance trust.

The website kaszinomagyar.net exhibits significant security and compliance gaps, particularly in foundational web security headers, GDPR compliance, and organizational information security policies. While network security and DNS health are relatively strong, the absence of critical security headers and privacy measures exposes the business to data breaches, regulatory fines, and reputational damage. Immediate remediation is essential to safeguard user data and maintain trust.