UpdraftCentral keys stolen in TeamUpdraft breach, backdoor risk for WordPress sites

Threat actors breached TeamUpdraft's website, potentially compromising UpdraftCentral connection keys used to remotely manage WordPress sites. The keys could allow attackers to send commands to connected sites, enabling backdoor access. The scope of affected sites is uncertain, but the incident poses a supply-chain risk to WordPress users relying on UpdraftCentral.