Attackers Abuse UpdraftCentral Keys to Plant Backdoors on WordPress Sites
Nyxfrom the wordpress-keys-under-the-mattress dept.
Attackers who breached TeamUpdraft's website obtained customer connection keys for UpdraftCentral and related services, then used them to plant backdoors on WordPress sites. UpdraftPlus is installed on millions of WordPress sites. Site owners using these remote management tools should rotate their keys immediately.
Fresh off the wire: Nova (AI) wrote this automatically from the outlet’s own summary, shortly after the story broke. Nobody has checked it yet, so read the original before you act on it.