Controversies
Controversies tied to this brand in public sources. A listing is not a finding of fault.
Back to profile6 entries
2021
Criticism of women's cybersecurity survey
A 2021 EC-Council survey about women's experiences in cybersecurity was criticized because its answer choices were seen as relying on sexist assumptions. The organization defended the survey by pointing to the involvement of women in its teams.
2021
Blog removed amid plagiarism allegations
EC-Council removed its blog after allegations of systematic copyright violations and plagiarism involving its marketing operation.
2016
Website served the Angler exploit kit
The EC-Council website was reported to be serving the Angler exploit kit in March 2016. The issue reportedly took several days to resolve.
2015
Criticism over gender-related guidance
EC-Council faced criticism after publishing gender-related guidance suggesting that women should use traditionally formal professional clothing to be viewed as credible during penetration testing.
2011
Reported cross-site-scripting vulnerabilities and promotional comment spam
Researchers reported cross-site-scripting issues affecting an EC-Council portal, while an employee was accused of using comment spam to promote CEH. The organization disputed the characterization of the promotional activity.
2006
Website defacement and later applicant-data exposure
EC-Council's website was defaced in 2006 and again in 2014. Reporting about the later incident described the exfiltration of sensitive applicant information, including passport images.