FTC Orders Ticket Sellers, Hotels To Show 'All-in' Prices Upfront

The Federal Trade Commission unveiled a sweeping rule on Tuesday to crack down on hidden fees in ticket sales and hotel bookings, marking a major push by the agency to combat what it calls "junk fees" that cost consumers billions of dollars annually.

The bipartisan measure requires businesses to display the total price, including all mandatory fees, upfront when advertising tickets for live events or short-term lodging. The rule aims to end the practice of surprising customers with additional charges like "resort," "convenience," or "service" fees late in the booking process.

"People deserve to know up-front what they're being asked to pay," said FTC Chair Lina Khan, who estimates the rule could save consumers up to 53 million hours per year in comparison shopping time, equivalent to $11 billion over a decade.

The rule, approved by a 4-1 commission vote, does not ban any specific fees but requires clear disclosure before consumers enter payment information. It will take effect 120 days after publication in the Federal Register. The measure follows a lengthy public comment period that drew over 72,000 responses and represents one of the FTC's most significant consumer protection actions in recent years.

Read more of this story at Slashdot.

nmap -sV --script vuln -p- <target-network>

tail -f /var/log/suricata/fast.log | grep <cve>

Check Vendor Security Advisory Bulletin

title: Detect Exploitation - FTC Orders Ticket Sellers, Hotels To Show 'All-in' Prices Upfront
id: 3978e285-4c2f-43d9-9daa-42f120b74332
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-24
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access

rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-24"
        description = "YARA Signature for "
    strings:
        $str = "FTC Orders Ticket Sellers, Hot" ascii wide
    condition:
        any of them
}