Stolen UpdraftCentral Keys Leveraged to Compromise WordPress Installations

A threat actor successfully infiltrated TeamUpdraft's website, the developer behind widely-used WordPress backup and security plugins. The breach…

If you use UpdraftCentral, immediately revoke existing connection keys from your TeamUpdraft account and regenerate new ones. Audit activity logs across your connected WordPress sites for suspicious actions. Enable multi-factor authentication on your TeamUpdraft account and monitor the company's official channels for remediation guidance.