Brevo confirms ClickFix supply-chain attack tied to stolen Cloudflare key
Sept. 20, 2026 update: Brevo’s public status page marks the Sept. 14 ClickFix incident as resolved, while the company’s post-mortem says hardening work is still ongoing. Brevo says a compromised …