---
id: 4629
title: "Rickrolling the World Cup, unleashing AI across Google, 0-click stored XSS on Next.js – ethical hacker roundup"
source_domain: yeswehack.com
source_url: "https://www.yeswehack.com/news/rickrolling-fifa-ai-google-xss"
published_at: "2026-07-21 08:36"
tags: ["ai-security", "vulnerability-research", "github", "web-security", "xss", "vulnerability-disclosure", "nextjs", "roundup", "fifa"]
phying_url: "https://phying.com/item/4629"
lang: en
---

# Rickrolling the World Cup, unleashing AI across Google, 0-click stored XSS on Next.js – ethical hacker roundup

## Summary

Ethical hacker roundup: a FIFA platform flaw that could have rickrolled World Cup broadcasts, a one-click github.dev OAuth token theft, and a 0-click stored XSS in Next.js.

## Intelligence Metadata

- **Sources:** yeswehack.com
- **Published:** 2026-07-21 08:36
- **Original:** https://www.yeswehack.com/news/rickrolling-fifa-ai-google-xss
- **Phying News:** https://phying.com/item/4629