Incident Report
Two sites, one leaked key: how UpdraftCentral was used to plant backdoors
Two WordPress sites went down after an attacker used valid UpdraftCentral keys to plant backdoors. Here’s how we traced the installs, ruled out a suspected vulnerability, and revoked remote access across our hosting fleet.