Tag: supply-chain-attack

Reverse-Engineering the Brevo ClickFix Injection: How a Trusted Marketing Script Became a Dropper

pr0h0•September 18, 2026

A technical teardown of how attackers turned Brevo's trusted marketing script into a ClickFix dropper served across 100,000+ customer websites, plus what web teams can do to govern third-party JavaScript.

supply-chain-attackclickfixthird-party-scripts

How AI-Discovered Zero-Days Fueled a Supply Chain Attack on Developer Tools in June 2026

pr0h0•June 12, 2026

This walkthrough examines how AI-discovered zero-day vulnerabilities were chained into a June 2026 supply chain compromise of developer tools, mapping the attack path, impacted ecosystems, and concrete defenses for maintainers and developers.

cybersecuritysupply-chain-attackzero-day