Stolen UpdraftCentral keys used to backdoor WordPress sites

By Bill Toulas · BleepingComputer · Wednesday, 21 October 2026 at 01:01 (1h ago) · Original article ↗

A threat actor breached TeamUpdraft's website, a developer of popular WordPress backup and security plugins, potentially compromising UpdraftCentral connection keys that can send commands to connected websites. [...]

You're reading a preview. The full article is published by BleepingComputer on their website.

Read the full story on BleepingComputer

Security

Mozilla, Google, Apple block compromised eMudhra CA certificates

Certificate authority eMudhra revoked eight compromised intermediate certificates after researchers found their private keys were so weak that anyone could recover them almost instantly and use them to forge trusted certificates for legitimate websites. [...]

BleepingComputer 2h ago

Security

Indian certification authority eMudhra’s private keys compromised – one of them was the number ‘4’

Massive clean-up job under way because this mess makes it possible to impersonate any website or service

The Register 4h ago

Security

Auto tech startup claims it traced hack attempt back to rival's IP address

IQ.Lvbs implies that rival Comma.ai isn't playing fair

The Register 5h ago

Stolen UpdraftCentral keys used to backdoor WordPress sites

More Security & Privacy

Mozilla, Google, Apple block compromised eMudhra CA certificates

Indian certification authority eMudhra’s private keys compromised – one of them was the number ‘4’

Auto tech startup claims it traced hack attempt back to rival's IP address