Brevo supply-chain attack injected ClickFix scripts on customer sites

By Bill Toulas

AI Summary

A supply-chain attack against email platform Brevo saw attackers steal a Cloudflare API key to inject malicious ClickFix scripts into Brevo's own websites and JavaScript files embedded on customer sites, enabling downstream malware distribution. The incident illustrates how a single stolen cloud service credential can propagate malicious payloads across thousands of third-party sites relying on shared JS assets.

Read full article → https://www.bleepingcomputer.com/news/security/bre…

Relevance score: 88.0/100

# More from September 18

1
Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks The Hacker News
2
Cisco alerts customers to second actively exploited zero-day in as many days CyberScoop
4
Cyberattacks on Two Oil Tankers Prompt Coast Guard, FBI to Board Vessels SecurityWeek
5
Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root The Hacker News
6
China-Aligned FamousSparrow Deploys SparroWocky Backdoor Across Latin America The Hacker News
7
Gyazo Breach Exposes 23.62 Million User Records and 490 Million Image Metadata Records The Hacker News
8
Revolut Data Breach: 5 Months, 680 High-Profile Accounts, $3M Ransom SecurityWeek
9
BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPS The Hacker News
10
Iran-Linked Handala Hack Tied to HEAVYGRAM Telegram Backdoor That Can Steal Passwords The Hacker News