- For our loyal and new customers, we are offering a 13.37% discount on all penetration tests and security audits, provided the binding order is received by August 31, 2025, and the work commences before this date.
If you are planning penetration testing or security audits this year, consider rescheduling them for the summer. Not only will you save money, but we can start working on them almost immediately. Unfortunately, we are usually swamped and challenging to reach in the fall and winter. - Our long-time colleague Ian Budd has made (and continues to produce) a series of great hacking videos with varying degrees of difficulty. If you want to learn how to hack like a pro, you will appreciate these videos.
- The world’s largest hacking camp, WHY2025, is completely sold out. If you were lucky enough to get a ticket, let us know and we’ll be happy to meet you there on August 8-12!
Critical security problem in UpdraftCentral: an attacker holding the service’s keys planted a backdoor on our websites
October 19, 2026
On the night of 19 October 2026 an attacker abused UpdraftCentral, the remote management service built into UpdraftPlus, a backup plugin with more than 4 million installations, and planted a backdoor on two of our three websites. Our sites were fully up to date and the fault was not on our side: the attacker signed the commands with valid keys that the UpdraftCentral Cloud service generates and keeps. We publish an analysis of the backdoor, indicators of compromise and a way to check your own sites. The vendor later confirmed that the attacker obtained the teamupdraft.com customer database, including UpdraftCentral keys.
