Third-Party Trust Exploited: Brevo, Clop, and RMM Abuse

Podcast: Threat Analysis : Cyber News for Small Business · The Small Business Cyber Security Guy

Opublikowano: 2026-09-18

Third-Party Trust Exploited: Brevo, Clop, and RMM Abuse On 14 September 2026, attackers compromised Brevo’s infrastructure, injecting malicious code into JavaScript assets that reached over 100,000 customer websites. WordPress administrators had backdoor plugins silently installed while logged in; regular visitors faced ClickFix credential-harvesting overlays. Meanwhile, the Clop threat group continues exploiting CVE-2026-12569 in PTC Windchill with a custom web shell built for rapid data exfiltration, targeting UK manufacturing and engineering supply chains. A third campaign involves Settra ransomware maintaining persistence via MeshAgent, a legitimate remote monitoring tool that endpoint security often trusts by default. All three attacks share on...