🚨 Brevo supply-chain attack: 100,000+ WordPress sites potentially exposed. Attackers reportedly abused a stolen, long-lived Cloudflare API key to modify Brevo’s edge infrastructure and inject malicious JavaScript. The payload could: • Target logged-in WordPress admins via CSRF/session riding • Upload and activate a malicious plugin • Install a persistent PHP backdoor • Show ClickFix overlays to ordinary visitors • Deliver infostealers such as Lumma/Vidar The attack window: Sept. 14, 2026, 16:05–20:13 UTC. Technical breakdown + IoCs: https://thecybersecguru.com/news/brevo-supply-chain-attack-wordpress-backdoor/ #InfoSec #CyberSecurity #WordPress #Brevo #Cloudflare #SupplyChainAttack #Malware