Skip to content

EC-Council

Controversies

Controversies tied to this brand in public sources. A listing is not a finding of fault.

Back to profile6 entries

  1. 2021

    Criticism of women's cybersecurity survey

    A 2021 EC-Council survey about women's experiences in cybersecurity was criticized because its answer choices were seen as relying on sexist assumptions. The organization defended the survey by pointing to the involvement of women in its teams.

  2. 2021

    Blog removed amid plagiarism allegations

    EC-Council removed its blog after allegations of systematic copyright violations and plagiarism involving its marketing operation.

  3. 2016

    Website served the Angler exploit kit

    The EC-Council website was reported to be serving the Angler exploit kit in March 2016. The issue reportedly took several days to resolve.

  4. 2015

    Criticism over gender-related guidance

    EC-Council faced criticism after publishing gender-related guidance suggesting that women should use traditionally formal professional clothing to be viewed as credible during penetration testing.

  5. 2011

    Reported cross-site-scripting vulnerabilities and promotional comment spam

    Researchers reported cross-site-scripting issues affecting an EC-Council portal, while an employee was accused of using comment spam to promote CEH. The organization disputed the characterization of the promotional activity.

  6. 2006

    Website defacement and later applicant-data exposure

    EC-Council's website was defaced in 2006 and again in 2014. Reporting about the later incident described the exfiltration of sensitive applicant information, including passport images.