Stolen UpdraftCentral keys used to backdoor WordPress sites
2026-10-21T01:23:22Z•10c6bfc87ca676998a92663ecf680aedaa783ebb2206aa49e5eda39a303ccd46
AOMEIOVHcloudPHPRank MathUpdraftCentralWordPressbackdoorcertificate-authoritycertificate-forgerycloud-securitycritical-vulnerabilitycyberattackdata-breacheMudhramalwaresecret-theftservice-disruptionsoftware-compromisespearphishingstolen-credentialssupply-chain-attack
What happened
A BleepingComputer security news digest covering multiple significant incidents and vulnerabilities, including supply-chain compromises of WordPress plugins and OVHcloud CLI releases, stolen credentials and API keys, compromised certificate authority keys, major data breaches, critical PHP flaws awaiting emergency patches, and widespread cyberattack-related service disruptions. The most immediate risks involve active backdooring and malware distribution through trusted software or plugins, certificate forgery, and potentially exploitable critical PHP vulnerabilities.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 10c6bfc87ca676998a92663ecf680aedaa783ebb2206aa49e5eda39a303ccd46
- Enrichment time
- 2026-10-21T01:23:22Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.