Tia N.List

Reported by 2 outlets

Supply-chain breach. One compromised marketing tool just hit 100k+ websites: • Flawed SAML SSO exposed Cloudflare API key • Injected rogue J

hot0.0
Why this score
Breadth
1.00 / 2.0 · 2 sources
Authority
1.00 / 2.0 · best outlet weight
Severity
0.80 / 5.0 · CVSS + content signals
Velocity
0.00 / 2.0 · updates in 48h
Pickup speed
0.60 / 0.6 · time to second source
Recency
× 0.00 temporal multiplier
Community
+ 0.00 / 1.5 · reddit signal
Score
0.0 / 10 = base × recency + community
buymeacoffee.comworldtimeshindi.com first seen 21d ago

Analysis

A supply-chain breach through a compromised marketing tool affected over 100,000 websites. The incident involved a flawed SAML SSO that exposed a Cloudflare API key and injected rogue JavaScript. Monitor for malicious CDN or script injections across properties using the affected tool.

Timeline

  1. original reporting

    Supply-chain breach. One compromised marketing tool just hit 100k+ websites: • Flawed SAML SSO exposed Cloudflare API key • Injected rogue J

    buymeacoffee.com · 21d ago · September 23rd, 2026

    Supply-chain breach. One compromised marketing tool just hit 100k+ websites: • Flawed SAML SSO exposed Cloudflare API key • Injected rogue J

    via Mastodon https://buymeacoffee.com/sandeepraiza/one-compromised-marketing-tool-100-000-websites-infected-the-brevo-supply-chain-attack-explained

  2. mentioned by worldtimeshindi.com

    Supply-chain breach. One compromised marketing tool just hit 100k+ websites: • Flawed SAML SSO exposed Cloudflare API key • Injected rogue J

    worldtimeshindi.com · 21d ago · September 23rd, 2026

Covered in

digest 2026-09-23

Source on GitHub