threat-intel
FIFA Bug Exposed World Cup Streams to Remote Takeover
High
Summary
A vulnerability in FIFA's Microsoft Entra environment allowed an ethical hacker, "BobDaHacker," to gain unauthorized access to global World Cup streams, match management systems, and related data platforms. The issue stemmed from a lack of server-side enforcement of access controls, allowing the hacker to potentially manipulate broadcasts, match data, and even commentary. The incident highlights a critical security oversight within FIFA's infrastructure and the broader risk of client-side authorization without robust server-side validation.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data