Bug in FIFA World Cup internal system gave anyone ability to modify TV stream

A researcher discovered a missing authorization check in FIFA’s agent registration backend API that allowed her, after registering as a player agent, to access internal platforms controlling broadcasters' TV streams and commentators' displays—potentially allowing an attacker to hijack live World Cup camera feeds. The flaw was reported and patched by FIFA within hours; there is no reported evidence of malicious use.