Live and recent posts from across the Fediverse tagged #teamupdraft, aggregated by home.social.
UpdraftPlus data breach exposed customer data and keys now used in an UpdraftCentral backdoor campaign. Update to 1.26.12 and check your sites.
#UpdraftPlus #UpdraftCentral #DataBreach #WordPress #Backdoor #WordPressSecurity #TeamUpdraft
https://securityonline.info/updraftplus-data-breach/?utm_source=mastodon&utm_medium=jetpack_social
TeamUpdraft, developer of the WordPress backup plugin UpdraftPlus, disclosed unauthorized access to its main website.
The incident may have exposed personal details, hashed passwords, and remote management keys for UpdraftCentral.
Researchers observed attackers using valid connection keys to install malicious plugins on WordPress sites on October 18-19.
Affected administrators should update to UpdraftPlus 1.26.12 or 2…