News summary · Threat Intelligence

Brevo Supply-Chain Attack Infected Over 100,000 Websites

Reported by Security Affairs (Pierluigi Paganini)

Summary by Cyber Security News19 Sep 2026, 18:30 CESTOriginally published 18 Sep 2026

About this summary. This is a short, independently written summary of an article first published by Security Affairs. Cyber Security News did not report or verify the underlying story. Read the original: https://securityaffairs.com/199355/hacking/brevo-supply-chain-attack-infected-over-100000-websites.html

Brevo Supply-Chain Attack Infected Over 100,000 Websites — Image: Security Affairs

A Brevo supply-chain attack used compromised Cloudflare access to inject malware into websites, potentially affecting over 100,000 sites. Brevo, formerly known as Sendinblue, is a French cloud-based marketing and customer communication platform whose clients include eBay, Louis Vuitton and Michelin.

Read the full article at Security Affairs →

Cryptocurrency Phishing

Source attribution: headline and facts are from Security Affairs (securityaffairs.com). Summary method: excerpt of the source description. See our source attribution policy and corrections policy.

Related coverage

EtherHiding Exposed: Inside a Blockchain-powered Malware Campaign Hiding in Plain Sight

Tajin Group: Guarantee Marketplace Vendor Involved in Phishing and Chinese Money Laundering Group

Search results are sending people to fake Bitrefill checkouts

CVE-2026-76461: Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild

HBO Max ads on a compromised Reddit account exposed a massive PasteSwitch ClickFix operation

Ambry Genetics Pays $700,000 Penalty to Settle HIPAA Violations