
Data Breaches
Stolen UpdraftCentral Keys Used to Backdoor WordPress Sites After TeamUpdraft Breach
Attackers exploited stolen connection keys from the TeamUpdraft breach to inject backdoors into managed WordPress websites.
Everything Threat Times has reported about Patchstack: 2 stories, newest first. Part of our Data Breaches coverage.

Attackers exploited stolen connection keys from the TeamUpdraft breach to inject backdoors into managed WordPress websites.

Patchstack reports active wild exploitation of CVE-2026-85097, a maximum-severity flaw in Bricksforge allowing unauthenticated remote code execution on WordPress sites.