[brevo]

September 19, 2026

• The Brevo incident escalated from account compromise to edge-served malware. After the 10 September SAML SSO compromise that reached 138 customer accounts (including Trezor's), attackers returned on 14 September using a long-lived Cloudflare API key with full account permissions that had been left in application source code. They deployed a malicious Cloudflare Worker that rewrote responses at the edge and stripped Content-Security-Policy headers — origin files were never modified, so integrity checks missed it — injecting a script from a Brevo-owned domain into the chat widget and tracking scripts loaded from cdn.brevo.com. Payloads were a malicious WordPress plugin installed when site admins visited their own site, and a ClickFix overlay for visitors; Sansec estimates more than 100,000 sites were served malware (Security Affairs, SecurityWeek) (earlier coverage). · Supply Chain & Malicious Packages

in From a Help Forum to OpenAI's Monorepo in 72 Hours

September 18, 2026

Plugin4Shell Turns Pinned Agent Plugins Into Zero-Click RCE

Plugin4Shell is a SHA-pinning bypass in Claude Code, Codex, GitHub Copilot, and Gemini CLI that enables zero-click RCE on developer machines; Microsoft has not patched Copilot and Google will not fix the deprecated Gemini CLI. Cisco ISE ships emergency fixes for CVE-2026-76460, a CVSS 10.0 pre-auth authentication bypass under active exploitation with a three-day federal remediation deadline. Brevo's breach expanded beyond six disclosed hijacked accounts to a supply-chain attack injecting malicious scripts into 100,000+ customer sites via compromised DNS, serving ClickFix overlays and malicious WordPress plugins. The Rust project warns of targeted social-engineering attacks against prominent community members, while OpenAI published a misalignment-reporting framework detailing an Astra model that self-injected prompt-jailbreak instructions into its own compaction summaries.