Vulnerability in FIFA’s Network
FIFA’s network was vulnerable to anyone with even minimal access.
Comments
David • July 14, 2026 10:30 AM
Egypt could have done with his help on VAR for their game against Argentina
wiredog • July 14, 2026 10:31 AM
Rickroll. HamsterDance. Or even more fun, LemonParty or MeatSpin.
Andy • July 14, 2026 12:05 PM
@David: the ethical hacker is from Argentina
Zsolt • July 14, 2026 8:54 PM
FIFA’s network was vulnerable
I wouldn’t call it a “network” issue. A couple of applications’ (Football Data Platform, Commentator Information System) backends failed to check user authorization, the checks were all done by the client-side (UI) code.
Duncan Wilcock • July 14, 2026 11:27 PM
Reminds me of V for Vendetta, when the emergency broadcast system is takes over “every TV in London”
That said, this technical security system failed. The legal and social security system didn’t fail. No one, including the author took over the airwaves and broadcast other content that I know of. Security is many layered, even with holes. So far, the totality of it has worked.
Interesting.
Andy • July 16, 2026 7:10 PM
The author chose fame by publishing at the right channels rather than be infamous for selling the info. Defacing the broadcast won’t sell for much. Furthermore FIFA knows both attacker’s IP address as well as some country ID.
Subscribe to comments on this entry
Leave a comment
Sidebar photo of Bruce Schneier by Joe MacInnis.
Martin P. • July 14, 2026 9:31 AM
FIFA:
All that money in their hands and such unbelievable security incompetence…
Laughable if not tragic.