Stolen UpdraftCentral keys used to backdoor WordPress sites

A threat actor breached TeamUpdraft's official website, the developer behind popular WordPress backup and security plugins including UpdraftPlus and UpdraftCentral. The attacker potentially compromised UpdraftCentral connection keys, which are used to authenticate and send commands to connected WordPress websites. This supply chain-style attack could allow the attacker to issue malicious commands to any WordPress site connected via the stolen keys. The breach raises significant concerns for WordPress site owners relying on UpdraftCentral for centralized management. Affected users are advised to rotate their connection keys and monitor their sites for unauthorized changes or backdoors. The incident highlights the risks of centralized WordPress management platforms as high-value attack targets.