[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ff4GdH0j-D106SliUvR4GCN9LlnP1S_L-Pl9sBdu0nhg":3},{"article":4,"iocs":43,"watch_terms":44,"solutions":45,"lesson":134},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":20,"category":21,"article_tags":25},"e32aee0c-2ed7-4585-9370-78a5a1566f94","FIFA Bug Exposes World Cup Streams to Remote Takeover","fifa-bug-exposes-world-cup-streams-to-remote-takeover-2dfb34","A hacker could have \"Rickrolled\" the World Cup — or worse — thanks to FIFA's unenforced Entra access controls.","A critical vulnerability in FIFA's World Cup streaming platform could have allowed attackers to gain remote control over streams. The flaw stemmed from unenforced Microsoft Entra ID access controls, potentially enabling unauthorized content manipulation or even complete takeover of the broadcast. While no exploitation has been reported, the potential for 'Rickrolling' or more severe disruptions highlights significant security gaps.","FIFA's World Cup streaming platform had critical Entra access control flaws.","https:\u002F\u002Fwww.darkreading.com\u002Fapplication-security\u002Ffifa-bug-world-cup-streams-remote-takeover","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fblt3e6c93c7d4c13e54\u002F6a340108ef4a07d48bb3a950\u002FBelgian_fans_soccer-Jasper_Juinen_Stringer-Getty.jpg?width=720&quality=80&disable=upscale","2026-06-18T18:20:07+00:00","2026-06-18T20:00:10.99412+00:00",7,[17],{"name":18,"type":19},"Microsoft Entra ID","product","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":20,"icon":22,"name":23,"slug":24},null,"Vulnerabilities","vulnerabilities",[26,31,36,41],{"category":27},{"id":28,"icon":22,"name":29,"slug":30},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":32},{"id":33,"icon":22,"name":34,"slug":35},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":37},{"id":38,"icon":22,"name":39,"slug":40},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":42},{"id":20,"icon":22,"name":23,"slug":24},[],[18],{"controls":46,"vendors":133},[47,75,104],{"slug":48,"name":49,"problem":50,"products":51},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",[52,59,67],{"vendor_slug":53,"vendor_name":54,"vendor_logo":55,"product_slug":48,"product_name":56,"url":57,"description":58},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","Privileged Access Management","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fprivileged-access-management","Gives elevated rights to specific applications only where needed, so users do not need local admin accounts.",{"vendor_slug":60,"vendor_name":61,"vendor_logo":62,"product_slug":63,"product_name":64,"url":65,"description":66},"beyondtrust","BeyondTrust","\u002Fvendor-logos\u002Fbeyondtrust.png","password-safe","BeyondTrust Password Safe","https:\u002F\u002Fwww.beyondtrust.com\u002Fproducts\u002Fpassword-safe","Privileged password and session management.",{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":71,"product_name":72,"url":73,"description":74},"delinea","Delinea","\u002Fvendor-logos\u002Fdelinea.png","secret-server","Delinea Secret Server","https:\u002F\u002Fdelinea.com\u002Fproducts\u002Fsecret-server","Vault for privileged credentials with discovery, rotation and session recording.",{"slug":76,"name":77,"problem":78,"products":79},"identity-governance","Identity governance and single sign-on","People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.",[80,88,96],{"vendor_slug":81,"vendor_name":82,"vendor_logo":83,"product_slug":84,"product_name":85,"url":86,"description":87},"omada","Omada","\u002Fvendor-logos\u002Fomada.png","omada-identity-cloud","Omada Identity Cloud","https:\u002F\u002Fomadaidentity.com\u002Fproducts\u002Fomada-identity-cloud\u002F","Identity governance and administration delivered as a service.",{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":92,"product_name":93,"url":94,"description":95},"sailpoint","SailPoint","\u002Fvendor-logos\u002Fsailpoint.png","human-fabric","SailPoint Human Fabric","https:\u002F\u002Fwww.sailpoint.com\u002Fproducts\u002Fhuman-fabric","Identity governance platform, the successor to Identity Security Cloud: lifecycle management, access requests and continuous access reviews.",{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":100,"product_name":101,"url":102,"description":103},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.",{"slug":105,"name":106,"problem":107,"products":108},"security-monitoring-siem","Security monitoring (SIEM)","Logs from everywhere end up in one place, with alerts that someone actually sees.",[109,117,125],{"vendor_slug":110,"vendor_name":111,"vendor_logo":112,"product_slug":113,"product_name":114,"url":115,"description":116},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","google-security-operations","Google Security Operations","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fproducts\u002Fsecurity-operations","Cloud SIEM and SOAR, formerly Chronicle.",{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":121,"product_name":122,"url":123,"description":124},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","sentinel","Microsoft Sentinel","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-sentinel-siem","Cloud SIEM and automated response, built on Azure.",{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":129,"product_name":130,"url":131,"description":132},"vega","Vega","\u002Fvendor-logos\u002Fvega.png","vega-agentic-detection","Agentic Detection","https:\u002F\u002Fvega.io\u002Fplatform\u002Fagentic-detection","Detection rules that run across security data in the stores where it already lives, so logs do not have to be moved into a central SIEM first.",[],{"slug":135,"title":136,"body":137,"framework_refs":138,"framework_notes":152},"unenforced-entra-id-controls-exposed-fifa-world-cup-streams-to-takeover","Unenforced Entra ID Controls Exposed FIFA World Cup Streams to Takeover","The root cause of this vulnerability was the failure to properly enforce Microsoft Entra ID (formerly Azure AD) access controls on FIFA's World Cup streaming infrastructure, leaving broadcast systems exposed to unauthorized remote access. Misconfigured or unenforced identity and access management policies are a critical gap, as they can allow attackers to bypass authentication entirely and gain administrative-level control. In high-profile, high-availability environments like live sports broadcasting, such a compromise could result in content manipulation, reputational damage, or full service disruption affecting millions of viewers. This incident underscores that deploying an identity platform is insufficient — organizations must actively validate that access policies are correctly enforced and continuously tested. Even when no exploitation occurs, the existence of such a flaw in critical media infrastructure represents an unacceptable risk.",[139,140,141,142,143,144,145,146,147,148,149,150,151],"CIS Control 5 – Account Management","CIS Control 6 – Access Control Management","CIS Control 16 – Application Software Security","NIST SP 800-53 AC-2 – Account Management","NIST SP 800-53 AC-3 – Access Enforcement","NIST SP 800-53 IA-5 – Authenticator Management","NIST SP 800-53 CM-6 – Configuration Settings","NIST CSF PR.AC-1 – Identities and credentials are managed","NIST CSF PR.AC-4 – Access permissions are managed","Microsoft Azure CIS Foundations Benchmark v2.0 – Section 1 (Identity and Access Management)","ISO\u002FIEC 27001:2022 – A.5.15 Access Control","ISO\u002FIEC 27001:2022 – A.8.2 Privileged Access Rights","GDPR Article 32 – Security of Processing (where EU viewer data is involved)",{}]