Brevo Supply-Chain Attack Infected Over 100,000 Websites

Security Affairs feed covering major cybersecurity developments, including a Brevo supply-chain compromise affecting more than 100,000 websites, a Gyazo breach exposing approximately 23 million records, Android and Windows malware campaigns, attacks against maritime critical infrastructure, DDoS-for-hire disruption, and newly cataloged actively exploited vulnerabilities. The most urgent item is Check Point CVE-2026-91843, a CVSS 9.8 unauthenticated root code-execution flaw, alongside CISA KEV additions affecting Cisco ISE, Acronis Backup, and Google Pixel devices.