Dark ReadingNate Nelson
Hacker exposes FIFA Entra flaw, threatening World Cup broadcast
Part of the FIFA story · since 5 Jun
- Fri 5 Jun, 07:58 UTC. The Hacker News, first report. World Cup 2026 scams surge: fake sites, banking malware.
- Mon 8 Jun, 11:16 UTC. Malwarebytes, its first report on the story. RenEngine Loader malware hits pirated Far Cry, FIFA games.
- Thu 18 Jun, 19:01 UTC. Dark Reading, its first report on the story. Hacker exposes FIFA Entra flaw, threatening World Cup broadcast. This article, 3rd of 7.
- Wed 24 Jun, 09:27 UTC. SecurityOnline, its first report on the story. Cyble Exposes 4,000 Fake FIFA 2026 Ticket Sites Targeting Fans.
- Wed 24 Jun, 21:50 UTC. Dark Reading. Experts Warn 2026 FIFA World Cup Faces Ticket Fraud Surge.
- Sat 27 Jun, 05:00 UTC. SecurityOnline. US seizes nearly 400 domains in FIFA World Cup piracy crackdown.
- Tue 30 Jun, 13:41 UTC. The Hacker News. FIFA 2026 Approaches as Phishing Threats Rise, Zero Trust Urged.
A serious vulnerability in FIFA's Microsoft Entra system allowed an ethical hacker, known as 'BobDaHacker', to access critical systems controlling World Cup broadcasts. On June 14, 2026, they exposed weaknesses in FIFA's access control that could have led to severe disruptions, including altering live broadcast content and altering match data.
Despite successfully reporting the issue through agencies like CISA and the FBI, FIFA lacked a proper security disclosure policy, highlighting weaknesses in their cybersecurity practices. The incident underscores the importance of robust server-side access controls, as many companies, including FIFA, rely heavily on client-side checks that can easily be bypassed.
How the story developed
7 articles from 4 outlets since 5 Jun. Quiet since 30 Jun. This was the 3rd report, 13 days after the first.
- Fri 5 Jun, 07:58 UTC. The Hacker News, first report. World Cup 2026 scams surge: fake sites, banking malware.
- Mon 8 Jun, 11:16 UTC. Malwarebytes, its first report on the story. RenEngine Loader malware hits pirated Far Cry, FIFA games.
- Thu 18 Jun, 19:01 UTC. Dark Reading, its first report on the story. Hacker exposes FIFA Entra flaw, threatening World Cup broadcast. This article, 3rd of 7.
- Wed 24 Jun, 09:27 UTC. SecurityOnline, its first report on the story. Cyble Exposes 4,000 Fake FIFA 2026 Ticket Sites Targeting Fans.
- Wed 24 Jun, 21:50 UTC. Dark Reading. Experts Warn 2026 FIFA World Cup Faces Ticket Fraud Surge.
- Sat 27 Jun, 05:00 UTC. SecurityOnline. US seizes nearly 400 domains in FIFA World Cup piracy crackdown.
- Tue 30 Jun, 13:41 UTC. The Hacker News. FIFA 2026 Approaches as Phishing Threats Rise, Zero Trust Urged.
- No CVE
- Larger: an outlet’s first report
- Coverage over time
- Quiet time, folded
Show all 7 articles as a listHide the list
- Fri 5 JunDay 01
- World Cup 2026 scams surge: fake sites, banking malware07:58 · The Hacker News · First report
Quiet for 3 days
Mon 8 JunDay 31- RenEngine Loader malware hits pirated Far Cry, FIFA games11:16 · Malwarebytes · Picked up again
Quiet for 10 days
Thu 18 JunDay 131- Hacker exposes FIFA Entra flaw, threatening World Cup broadcast19:01 · Dark Reading · Picked up again · This article, 3rd of 7
Quiet for 6 days
Wed 24 JunDay 192- Cyble Exposes 4,000 Fake FIFA 2026 Ticket Sites Targeting Fans09:27 · SecurityOnline · Picked up again
- Experts Warn 2026 FIFA World Cup Faces Ticket Fraud Surge21:50 · Dark Reading
Quiet for 2 days
Sat 27 JunDay 221- US seizes nearly 400 domains in FIFA World Cup piracy crackdown05:00 · SecurityOnline · Picked up again
Quiet for 3 days
Tue 30 JunDay 251- FIFA 2026 Approaches as Phishing Threats Rise, Zero Trust Urged13:41 · The Hacker News · Picked up again