Application Security15 July 2026
FIFA's Broken Access Control Bug Left World Cup Streams Open to Hijack
A researcher who signed up as a football agent found himself inside FIFA's internal platforms — because the authorization checks only ran in the browser.
broken-access-controlpenetration-testingvulnerability-disclosure