An attacker managed to gain access to the marketing platform Brevo by exploiting a residual Cloudflare API key left in the source code. This was used to deploy a malicious Cloudflare Worker that installed harmful scripts and a backdoor plugin on tens of thousands of WordPress sites. Visitors to the affected websites were subsequently presented […]
