Bug in FIFA World Cup internal system gave anyone ability to modify TV stream

A security researcher uncovered a serious vulnerability in FIFA's internal systems, enabling her to gain unauthorized access to various platforms used during the World Cup. Operating under the alias BobDaHacker, she revealed that by registering as a player agent on FIFA’s official registration site, she exploited a significant flaw in the backend API. This flaw failed to verify whether users had the necessary permissions, granting her control over crucial broadcasting systems. The findings were startling. BobDaHacker noted that she could manipulate what viewers saw on their screens and what information was available to commentators. The implications of such a breach were alarming; she suggested that a malicious user could potentially hijack all camera feeds simultaneously, even going so far as to say, "An attacker could have rickrolled the entire FIFA World Cup." She reported the vulnerability late Tuesday evening, Japan time, and FIFA responded promptly, addressing the issue within hours. However, the organization did not publicly acknowledge the researcher’s discovery. Attempts to obtain a comment from FIFA by TechCrunch were met with silence.