Skip to main content
Back to feed
CyberSingle-sourceHighDevelopingFeatured
6.8

Brevo Supply Chain Attack Injects Malware Into 100,000 Websites via Compromised API Key

Attackers used a compromised API key to deploy a Cloudflare worker that injected malicious scripts into websites using Brevo's services, affecting up to 100,000 sites. The full scope and payload details remain unclear, but this represents a significant supply-chain compromise with broad reach.

SecurityWeek2 days agoengCredibility 31%View source

Score Breakdown

Mosaic Score6.8
Confidence0.5
Significance0.8
Source credibility0.3

Intelligence Tags

#supply-chain#malware#cloudflare#api-key#website-compromise

Entities

concept
Source

Part of a situation

activePoliticsTech1h ago

United States — 121 developments

→ stable·86 signals·US, EU, GB +1Score 5.0

Related signals

8 found