# A record of security incidents in digital signage

> 200 dated incidents from 2006 to 2026, from hijacked billboards and airport screens to ransomware and vulnerabilities in signage software, each with links to its sources.

Date: 2026-11-14
Source: https://signagelist.org/updates/2026-11-14-3/

## Changed products

- [Xibo](https://signagelist.org/products/xibo/): Product page now shows 13 published vulnerabilities, from 2013 to 2026.
- [MagicINFO](https://signagelist.org/products/magicinfo/): Product page now shows 6 published vulnerabilities from 2025 and 2026.
- [BrightSign](https://signagelist.org/products/brightsign/): Product page now shows 4 published vulnerabilities, from 2017 to 2026.
- [Carousel](https://signagelist.org/products/carousel/): Product page now shows a 2018 vulnerability and 2019 security research.
- [LG SuperSign](https://signagelist.org/products/lg-supersign/): Product page now shows a 2019 malware case and a 2024 vulnerability.
- [BRAVIA Signage Free](https://signagelist.org/products/bravia-signage-free/): Product page now shows a 2026 vulnerability.
- [CAYIN](https://signagelist.org/products/cayin/): Product page now shows a 2026 vulnerability.
- [firmCHANNEL](https://signagelist.org/products/firmchannel/): Product page now shows a 2008 vulnerability.
- [GarlicSignage](https://signagelist.org/products/garlic-signage/): Product page now shows a 2026 vulnerability.
- [Screenly](https://signagelist.org/products/screenly/): Product page now shows a 2025 breach.
- [SpinetiX Elementi](https://signagelist.org/products/spinetix-elementi/): Product page now shows a 2025 vulnerability.
- [TDM Signage](https://signagelist.org/products/tdm-signage/): Product page now shows a 2026 vulnerability.

Incidents is a new section listing 200 security incidents involving digital signage, from 2006 to 2026. Every entry has a date, a short summary of what happened to the screens and links to the reporting behind it, 466 sources in all.
Most of the list is screen hijacks: 127 cases of billboards, departure boards, road message signs, stadium boards and shop screens showing something their owners never scheduled. Another 54 are published vulnerabilities in signage software and players, linked to their CVE records. The rest cover ransomware, breaches at signage vendors, insider misuse, outages and security research.
The numbers are climbing. The list has 23 incidents from 2024, 32 from 2025 and 37 so far in 2026, more than any earlier year.
Summaries stick to the screens: what kind of display, where, what it showed and how it was reached, when that’s known. A group or country is named only when an arrest, an official finding or the source itself confirms it.
Product pages now show the incidents that name them. Twelve products have at least one, listed below. The list page can be filtered by type, and every incident page has a Markdown version.
If an incident is missing or wrong, the link at the bottom of the list page opens a GitHub issue.