TechBleepingComputer1h ago
Stolen UpdraftCentral keys used to backdoor WordPress sites
TL;DRHackers stole WordPress plugin keys and used them to attack thousands of websites.
Why it matters: If you use UpdraftCentral, your site could be compromised without your direct involvement.
A threat actor breached TeamUpdraft's website, a developer of popular WordPress backup and security plugins, potentially compromising UpdraftCentral connection keys that can send commands to connected websites. [...]
Read full articleSource: BleepingComputer · Opens in new tab