Your Vendors Are Under Attack — 3 Supply Chain Breaches That Should Have Every Business Owner on Alert

The ServiceNow Breach: When Your SaaS Platform Opens the Door

ServiceNow, a platform used by over 8,000 enterprise customers including roughly 80% of Fortune 500 companies, disclosed a security incident in which attackers exploited an unauthenticated access flaw through a vulnerable API endpoint. The vulnerability allowed threat actors to query data directly from customer instances without needing valid credentials.

What happened: Attackers discovered and exploited an API endpoint that lacked proper authentication controls. Through this flaw, they could submit crafted queries to pull sensitive data from customer ServiceNow instances — including ticket details, employee information, internal processes, and potentially access credentials stored in knowledge base articles. The flaw was a textbook case of a broken access control vulnerability at the platform level.

How bad was it: The scope is significant because ServiceNow sits at the intersection of IT service management, HR workflows, and security operations for thousands of organizations. Any data stored in an affected instance — incident tickets, change management records, employee onboarding data — was potentially exposed. While ServiceNow has not publicly disclosed exact customer counts or financial impact, the average cost of a data breach in 2025 reached $4.88 million according to IBM's Cost of a Data Breach report, and platform-level breaches tend to compound that figure across multiple victims simultaneously.

How it could have been prevented: ServiceNow should have enforced stricter API authentication requirements, including mandatory token validation and rate limiting on query endpoints. On the customer side, businesses should have been limiting the types of data stored in shared platform instances and implementing their own monitoring for unusual API query patterns.

What to do this week: Audit every SaaS platform that holds sensitive business data. Demand that your vendors provide documentation of their API security testing, authentication enforcement policies, and incident response timelines. If a vendor cannot tell you how they test for unauthenticated access flaws, assume those flaws exist.

ClickFix and Vidar Stealer: When Trusted Websites Betray Your Users

The Australian Signals Directorate's Australian Cyber Security Centre (ASD ACSC) issued an advisory on a campaign using a social engineering technique called ClickFix to distribute Vidar Stealer through compromised WordPress websites, specifically targeting Australian infrastructure and organizations.

What happened: Threat actors compromised legitimate WordPress websites — sites that your employees might visit as part of normal business operations. These sites were then modified to display fake error messages or CAPTCHA prompts instructing visitors to "fix" a problem by copying and pasting a PowerShell command into their terminal. This is the ClickFix technique: it tricks users into executing malicious code themselves, bypassing many traditional security controls. The delivered payload was Vidar Stealer, a well-known information-stealing malware that harvests credentials, browser data, cryptocurrency wallets, and session tokens.

How bad was it: Vidar Stealer is particularly dangerous in a business context because it steals session cookies and saved browser credentials. An attacker with valid session tokens can bypass multi-factor authentication entirely. In previous campaigns, Vidar has been linked to secondary ransomware deployments. Organizations affected through compromised supply chain websites faced credential exposure, potential lateral movement, and the downstream cost of forced password resets, session revocations, and incident investigation — costs that easily reach tens of thousands of dollars per incident for mid-size businesses.

How it could have been prevented: Organizations should have been running web filtering and DNS-level blocking that identifies newly compromised sites. Endpoint detection and response (EDR) solutions tuned to flag PowerShell execution initiated from browser copy-paste actions would catch the ClickFix technique. User security awareness training specifically covering social engineering tactics that instruct users to run commands would reduce click-through rates.

What to do this week: Verify that your organization has web filtering active and that your EDR solution is configured to flag suspicious PowerShell execution. Run a quick awareness refresh with your team covering the ClickFix technique specifically — show them what the fake prompts look like. If any of your vendors or partners host WordPress sites that interact with your business, ask them what their patching and monitoring cadence looks like.

China-Nexus Covert Networks: Nation-State Supply Chain Infiltration

A joint advisory from the ASD ACSC and partner agencies outlined a significant shift in the tactics, techniques, and procedures used by China-nexus cyber actors to build covert networks of compromised devices, targeting organizations through their connected supply chains.

What happened: State-sponsored actors have been systematically compromising network devices — routers, VPN gateways, IoT sensors, and other infrastructure components — to build persistent covert networks. These compromised devices are then used as stepping stones to access the actual target organizations. The advisory highlights a shift toward exploiting supply chain relationships: instead of attacking a hardened target directly, actors compromise a less-defended vendor or partner in the target's supply chain and move laterally through trusted connections.

How bad was it: Nation-state supply chain compromises are among the most damaging incidents because they can persist undetected for months or years. The advisory indicates these actors are targeting critical infrastructure, government agencies, and large enterprises. The cost of discovering and remediating a nation-state-level compromise — including network rebuilds, credential resets across entire organizations, and regulatory reporting — can run into millions of dollars per victim. The broader economic impact of infrastructure disruption compounds this further.

How it could have been prevented: Network segmentation that limits what a compromised device can access. Zero-trust architecture that does not grant implicit trust based on network location. Regular firmware audits of all network-connected devices, especially those from smaller vendors who may not have robust security programs. Mandatory vulnerability disclosure and patching SLAs in vendor contracts.

What to do this week: Inventory every network device your business relies on — routers, switches, VPN appliances, IoT devices — and check each one against current vulnerability databases. Review which vendors have direct network connections to your environment and whether those connections are appropriately segmented. Add a clause to your vendor contracts requiring notification within 24 hours of any security incident that could affect your data.

The OpenClaw Warning: AI Agents Are the New Supply Chain Surface

In a finding that should alarm every business integrating AI tools, researchers demonstrated that the OpenClaw AI email agent fell for phishing attacks across multiple configuration profiles, leaking user data through tactics commonly used against human targets.

What happened: A phishing simulation targeting the OpenClaw AI agent showed that the tool was susceptible to standard social engineering techniques — deceptive links, spoofed sender addresses, and urgent language. The agent, designed to manage email on behalf of users, processed malicious messages and exposed user data that a human operator would likely have flagged as suspicious.

Why this matters for supply chain security: AI agents and copilots are rapidly being integrated into business workflows, often with broad access to email, documents, and internal systems. They represent a new class of supply chain risk: your vendor's AI agent now has access to your data, and if that agent can be phished, your data is exposed. As businesses rush to adopt AI-powered tools, the security of those tools themselves becomes a critical third-party risk factor.

What to do this week: Inventory every AI tool and agent that has access to your business data. For each one, determine what data it can access and what security testing the vendor has performed against social engineering and prompt injection attacks. If the vendor cannot demonstrate robust security testing, restrict the tool's access immediately.

FAQ

Conclusion

Supply chain attacks succeed because they exploit trust — trust in your SaaS platforms, trust in the websites your team visits, trust in your network equipment vendors, and now trust in the AI agents acting on your behalf. The incidents from just the past week demonstrate that this trust is being actively and systematically exploited by criminal and nation-state actors alike.

Your move is straightforward: stop assuming your vendors are secure and start verifying. This week, pick your three most critical third-party tools and demand security documentation. Inventory your internet-facing devices and check them against known vulnerabilities. Talk to your team about ClickFix-style social engineering. And if you have not mapped out every AI agent with access to your business data, do it now.

Visit consult.lil.business for a free cybersecurity assessment and find out where your supply chain vulnerabilities are before someone else does.

References

1. ASD ACSC Advisory — ClickFix distributing Vidar Stealer via WordPress targeting Australian infrastructure
2. ASD ACSC Advisory — Defending against China-nexus covert networks of compromised devices
3. ServiceNow discloses security incident exposing customer data — BleepingComputer
4. NIST SP 800-161 Rev. 1 — Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations