GoKawiilTeamUpdraft breach exposes UpdraftCentral keys, hackers already backdooring sites
WordPress plugin maker TeamUpdraft disclosed that attackers breached its website over the weekend of October 17-18 and accessed its customer database, including password hashes, two-factor authentication settings, and connection keys for UpdraftCentral, UpdraftVault, and UpdraftClone. The company says payment data was not stored and was unaffected, and that UpdraftPlus plugin files remain untouched, but researcher Oliver Sild of Patchstack says stolen keys are already being used to backdoor WordPress sites.