Stolen UpdraftCentral keys used to backdoor WordPress sites
-
A threat actor has breached the website of TeamUpdraft, the developer behind widely used WordPress backup and security plugins, in an incident that may have exposed UpdraftCentral connection keys. These keys are significant because they allow commands to be sent to connected WordPress sites, meaning stolen keys could potentially be abused to backdoor those installations.
At this stage, the exact scope of the compromise and the number of affected sites are not fully clear. Site administrators running UpdraftPlus or other TeamUpdraft products connected to UpdraftCentral should treat their connection keys as potentially compromised and review their installations for signs of unauthorized access. Rotating keys and auditing connected sites is advisable until official guidance confirms the full impact.
Source: BleepingComputer
Has your organization rotated UpdraftCentral keys or audited connected WordPress sites in response to this disclosure?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login