InfoSecBulletin Cybersecurity for mankind
The French Football Federation (FFF) has reported a major cybersecurity breach that led to the theft of personal data from members and licensees. The federation announced that hackers had breached the centralized software used by football clubs to handle memberships and daily tasks. The breach happened not because of software flaws, but due to unauthorized access from a compromised user account.
The compromised credential gave attackers admin access, enabling them to move through the system and steal sensitive databases before they were stopped.
CISA adds PHP2Shell to KEV, PHP Releases New Security Updates to Fix Critical HTTP2Shell flaw
Cloudflare Unveils Emergency WAF Ruleset Update on Brotli flaw
Daily Cyber security update for 26.10. 2026
The Washington Post report
Ex-DOGE AI startup Cathedral Breaches Anthropic Internal Systems within 12 Hours
Daily Cyber security update for 25. 10. 2026
Daily Cyber security update for 24. 10. 2026
PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation
US banks faced unauthorized access by AI agents in customer accounts: Axios reports
Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager
Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed
The disclosure reads, “The FFF reports that the software used by clubs for their administrative management, and in particular that of their members, has been the victim of a cyberattack and data theft.
Upon detection of this unauthorized access through the use of a compromised account, the FFF services took the necessary steps to secure the software and data, including immediately disabling the account in question and resetting all user account passwords.
A complaint has been filed and the relevant authorities (ANSSI, CNIL) have been informed of this attack. Furthermore, the FFF will send a communication to the individuals whose email addresses were listed in the database.
This breach is limited to the following data only: name, surname, gender, date and place of birth, nationality, postal address, email address, telephone number and license number.
The FFF is committed to protecting all the data entrusted to it and is constantly strengthening and adapting its security measures in order to cope, like many other actors, with the increasing number and new forms of cyberattacks.
We recommend that you exercise the utmost vigilance regarding any suspicious or unusual communications you may receive (SMS, call, email, etc.) that appear to originate from the FFF, your Club or another sender (for example, inviting you to open an attachment or to provide your account details and passwords or banking information).”
