SecuritySep 17, 2026
Brevo supply-chain attack injects ClickFix scripts on customer sites
The Brevo supply-chain attack leveraged a compromised Cloudflare API key to inject ClickFix scripts into thousands of WordPress sites.
Cloudflare
1 report filed under this subject.