Vulnerability in FIFA's Network

Martin P. • July 14, 2026 9:31 AM

FIFA:

All that money in their hands and such unbelievable security incompetence…

Laughable if not tragic.

Zsolt • July 14, 2026 8:54 PM

FIFA’s network was vulnerable

I wouldn’t call it a “network” issue. A couple of applications’ (Football Data Platform, Commentator Information System) backends failed to check user authorization, the checks were all done by the client-side (UI) code.

Duncan Wilcock • July 14, 2026 11:27 PM

Reminds me of V for Vendetta, when the emergency broadcast system is takes over “every TV in London”

That said, this technical security system failed. The legal and social security system didn’t fail. No one, including the author took over the airwaves and broadcast other content that I know of. Security is many layered, even with holes. So far, the totality of it has worked.
Interesting.

Andy • July 16, 2026 7:10 PM

The author chose fame by publishing at the right channels rather than be infamous for selling the info. Defacing the broadcast won’t sell for much. Furthermore FIFA knows both attacker’s IP address as well as some country ID.