BREVO SUPPLY CHAIN ATTACK INJECTS MALWARE INTO 100,000 WEBSITES

Summary from the TLDR InfoSec newsletter

Attackers exploited Brevo SAML SSO handling, accessed 138 accounts, and later used a stolen Cloudflare API key.