Tag
A security researcher discovered that registering as a FIFA agent granted access to FIFA's Microsoft Entra tenant, allowing them to bypass client-side authentication and access the live production streaming management panel for the 2026 World Cup, including RTMP stream keys for all matches. The researcher had to contact FIFA, MediaKind, HBS, CISA, and the FBI to get the issue fixed.