Skip to content
June 23, 2026
  • Linkedin
  • Twitter
  • Facebook
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Watchtower
  • Cyber Criminals
  • Data Leak
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Vulnerability Report
Light/Dark Button
  • Home
  • Technique
  • Should the Sports World Start Worrying About Cyber Threats?
  • Technique

Should the Sports World Start Worrying About Cyber Threats?

Do Son June 16, 2021 3 minutes read
Programming language Cybersecurity

Cubed background in different sizes and red colors aligning to a row of glowing information security icons surrounding the word cybersecurity 3D illustration

At first glance, the worlds of pro sport and cybersecurity seem to be completely unrelated. But, like anything else, sports are now heavily dependent on technology, and technology always comes with risks. Like any business, pro sports are also finding themselves dealing with all sorts of threats, and many leagues are not prepared for this. We can also expect sports leagues to become a bigger target for cybercriminals in the future who will exploit these vulnerabilities. So, should the sports world worry about cyber threats?

The Numbers

So, how big of an issue is cybersecurity in sports? Well, it’s a big one if we look at a UK study that was conducted by the National Cyber Security Centre. As it turns out, more than two thirds of all the sports teams in the country suffered a cybersecurity attack of harmful cyber activity in their last year. That’s more than double the rate of all businesses. So, sports teams are even more vulnerable to these threats.

Why and How are Sports Organizations Targeted?

One of the most alarming facts about the aforementioned study is that most teams were attacked using rudimentary techniques like phishing and password spraying. This means that they were more a question of negligence than anything. And, like with most cybersecurity attacks, the main goal is usually financial gain, with the biggest attack resulting in financial losses of over 5 million dollars.

While financial gain is the biggest motive, attacks can sometimes be government-sponsored and the most widespread attacks often had state sponsors behind them. One example is the huge WADA breach where Russian Military Intelligence stole private documents from the anti-doping agency and made them public. There was another attack on the 2018 Winter Olympics in Pyongyang which disrupted both the website and opening ceremony.

How are Teams Getting Prepared?

While many teams and leagues are still largely unprepared for cybersecurity threats, they’re not the only ones. There are many reasons to look forward to Super Bowl LV, including all the new cyber security measures that the league is implementing. The league deployed an extensive cybersecurity policy in 2019 that laid guidelines for teams to follow.

When it comes to the NFL, money is not the biggest motive for cyber-attacks. There are usually two main assets to protect: the playbook and injuries. To protect the playbook, players are often given secured iPads with plays in them. For injuries, teams like the Broncos went as far as creating their own electronic medical record system to keep players safe. This is because knowledge of an injury could push other teams to target the area and cause career-threatening injures for players.

That’s not the only thing teams are doing, however. Some have started beefing up their security by closely monitoring the activity on their networks. The increasing number of connected devices is making things difficult, and one team in the NFL is said to be using Dell’s SecureWorks to monitor activity, which is a step in the right direction.

Cybersecurity should be a priority for any sports league or pro team. They owe it to their fans and players, and they need to do everything they can to keep everyone’s information safe.

Share this article:

Facebook Post LinkedIn Telegram

Search

Translation

CVE WATCHTOWER
🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

Upgrade Package

🔴 Live Critical Threats

  • CVE-2026-12866CVSS 9.8
    All versions of the package expr-eval are vulnerable to Code Execution via...
  • CVE-2026-54352CVSS 9.6
    ## Summary `POST /api/pwa/process-zip` at `packages/server/src/api/routes/static.ts:24` accepts a builder-uploaded `.zip`, extracts it...
  • CVE-2026-48746CVSS 9.1
    vLLM is an inference and serving engine for large language models (LLMs)....
  • CVE-2026-48170CVSS 9.1
    ## Summary `scim-patch` performs prototype pollution when applying a SCIM PATCH operation...
  • CVE-2026-46495
    ## Summary **Description** A Deserialization of Untrusted Data (CWE-502) issue in OpenDJ's...
  • CVE-2026-56348CVSS 9.1
    n8n before 2.20.0 contains a credential exfiltration vulnerability in the POST /rest/dynamic-node-parameters/options...
  • CVE-2026-46488
    ### Summary An authentication bypass vulnerability exists due to improper trust in...
  • CVE-2026-44203CVSS 9.3
    ### Summary The OAuth 2.0 / OpenID Connect authorization endpoint does not...
  • CVE-2026-44179CVSS 9.9
    ### Summary The excerpt-include macro does not properly escape the title of...
  • CVE-2026-10789CVSS 9.6
    A maliciously crafted webpage, when visited by a user with Autodesk Fusion...
Powered by CVE WATCHTOWER

🚨 Active Exploits in the Wild

  • CVE-2026-20230CVSS 8.6
    A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified...
  • CVE-2026-4020CVSS 7.5
    The Gravity SMTP plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and...
  • CVE-2026-10735
    Multiple plugins by ShapedPlugin contain a backdoor in various versions. This makes it possible for unauthenticated attackers to...
  • CVE-2026-20262CVSS 6.5
    A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated,...
  • CVE-2026-54420CVSS 8.5
    LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a...
  • CVE-2026-53435CVSS 8.8
    In Jenkins 2.567 and earlier, LTS 2.555.2 and earlier, it is possible for attackers to have Jenkins deserialize...
  • CVE-2026-10795CVSS 8.1
    The UpdraftPlus: WP Backup & Migration Plugin plugin for WordPress is vulnerable to Authentication Bypass in all versions...
  • CVE-2026-11645
    Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker...
  • CVE-2026-50751CVSS 9.3
    A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows...
  • CVE-2026-20245CVSS 7.8
    A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, local...
Powered by CVE Watchtower

Our Websites
  • Penetration Testing Tools
  • The Daily Information Technology
  • Daily CyberSecurity

    • About SecurityOnline.info
    • Advertise with us
    • Announcement
    • Contact
    • Contributor Register
    • Login
    • About SecurityOnline.info
    • Advertise on SecurityOnline.info
    • Contact Us

    When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

    • Disclaimer
    • Privacy Policy
    • DMCA NOTICE
    • Linkedin
    • Twitter
    • Facebook
    • Youtube
    © 2017 - 2026 Daily CyberSecurity. All Rights Reserved.