Stolen UpdraftCentral keys used to backdoor WordPress sites

A threat actor breached TeamUpdraft’s website, potentially compromising UpdraftCentral connection keys that can be used to send commands to connected WordPress websites, BleepingComputer reports. TeamUpdraft develops popular WordPress backup and security plugins, and the stolen keys could be used to backdoor sites that use the service.