What the Numbers Say About FIFA 2026 Cyber Risk

The FIFA World Cup 2026 opened on June 11. By that date, according to Check Point Research, the fraud infrastructure targeting it had already been built, staged, and partially deployed. Threat actor activity was pre-planned, months out, across three sectors and at least ten languages. Check Point...

EUVD-2026-21388

Cross Site Scripting vulnerability in Altenar Sportsbook Software Platform SB2 v.2.0 allows a remote attacker to obtain sensitive information and execute arbitrary code via the URL parameter...

CVE-2026-31262

Cross Site Scripting vulnerability in Altenar Sportsbook Software Platform SB2 v.2.0 allows a remote attacker to obtain sensitive information and execute arbitrary code via the URL parameter...

CVE-2026-31262: Exposure of Sensitive Information to an Unauthorized Actor

Cross Site Scripting vulnerability in Altenar Sportsbook Software Platform SB2 v.2.0 allows a remote attacker to obtain sensitive information and execute arbitrary code via the URL parameter...

Altenar Sportsbook Software Platform SB2 安全漏洞

The Altenar Sportsbook Software Platform SB2 is a betting platform and odds management system developed by the Malta-based company Altenar, aimed at the sports betting industry. Version 2.0 of the Altenar Sportsbook Software Platform SB2 contains a security vulnerability. This vulnerability stems...

CVE-2026-31262

Cross Site Scripting vulnerability in Altenar Sportsbook Software Platform SB2 v.2.0 allows a remote attacker to obtain sensitive information and execute arbitrary code via the URL parameter...

CVE-2026-31262

Cross Site Scripting vulnerability in Altenar Sportsbook Software Platform SB2 v.2.0 allows a remote attacker to obtain sensitive information and execute arbitrary code via the URL parameter...

CVE-2026-31262

The Altenar Sportsbook Software Platform (SB2) version 2.0 is susceptible to a Cross Site Scripting (XSS) vulnerability. The root cause is the improper handling of URL parameters , which allows a remote attacker to execute arbitrary code and obtain sensitive information . While the vulnerability ...

PT-2026-31928

Cross Site Scripting vulnerability in Altenar Sportsbook Software Platform SB2 v.2.0 allows a remote attacker to obtain sensitive information and execute arbitrary code via the URL parameter...

sportsbook.ag Cross Site Scripting vulnerability OBB-3836287

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malware in sportsbook-env-generator

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in sportsbook-env-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d79654ab4931607762a27f2b9d074eb3e78eab79c6ae9d6799541d54612c3bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-804 Malicious code in sportsbook-env-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d79654ab4931607762a27f2b9d074eb3e78eab79c6ae9d6799541d54612c3bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @sbb2b/ngx.sportsbook (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ccf1238d371f61b48d44f2b32d79ce73e0d25a42508d9e535ce93580010016d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sportsbook-frontend-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e857e092d9cc26492e3c5dd36557c28daec0c8bd5855b77ce893ed2281d0e1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6243 Malicious code in sportsbook-frontend-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e857e092d9cc26492e3c5dd36557c28daec0c8bd5855b77ce893ed2281d0e1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sportsbook-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 406d6055f3ec798d94c6267c0cd303138551c345c9b059490e045de4768579be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sportsbook-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36d019a86dceff6c6145e913f40daf5cb67a7ccd4129e38118330dcecfc94eae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6242 Malicious code in sportsbook-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36d019a86dceff6c6145e913f40daf5cb67a7ccd4129e38118330dcecfc94eae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6241 Malicious code in sportsbook-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 406d6055f3ec798d94c6267c0cd303138551c345c9b059490e045de4768579be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...