BREVO SUPPLY-CHAIN ATTACK SPREADS MALWARE TO CUSTOMER SITES

Brevo confirmed attackers stole a Cloudflare API key and injected malicious ClickFix scripts into its websites and customer JavaScript files. The compromise enabled malware distribution across multiple sites.