Attackers Abuse UpdraftCentral Keys to Plant Backdoors on WordPress Sites

The Hacker News · Wednesday, 21 October 2026 at 09:01 (4h ago) · Original article ↗

Unknown threat actors breached TeamUpdraft's website and potentially gained unauthorized access to customers' connection keys for UpdraftCentral, UpdraftVault, and UpdraftClone, using them to backdoor WordPress sites.

TeamUpdraft is the developer behind UpdraftPlus, a popular WordPress backup plugin with over four million active installations. The vendor also offers UpdraftCentral, a remote

You're reading a preview. The full article is published by The Hacker News on their website.

Read the full story on The Hacker News

Security

Microsoft PowerToys adds CursorHide, Button Lock mouse tools

Microsoft has released PowerToys 0.102, with two new mouse utilities, new command-line tools, and Command Palette improvements. [...]

BleepingComputer 11m ago

Security

Apple blocks web certificates that could be used by scammers, but Mac vulnerability remains

Apple has blocked eight web security certificates that could have been used by scammers to impersonate legitimate websites. However, one cryptography engineer has warned that Macs may continue to trust the compromised certificates because macOS does not check for revocation ……

9to5Mac 15m ago

Security

Cyber chiefs tell websites to make critical safety update or go offline

Two critical vulnerabilities have been identified with PHP, a programming language which is widely used across the internet.

BBC Technology 17m ago

Attackers Abuse UpdraftCentral Keys to Plant Backdoors on WordPress Sites

More Security & Privacy

Microsoft PowerToys adds CursorHide, Button Lock mouse tools

Apple blocks web certificates that could be used by scammers, but Mac vulnerability remains

Cyber chiefs tell websites to make critical safety update or go offline