Rcon password stealing

6 Months ago, my server killed by using rcon (which isn’t from Admin side)
and I checked log file i saw this:

" Received broadcast message from master server which is not authoritative "

" rcon from xxx: killserver "

What’s this?
Can this happen again to my server?
This is a security bug?

any replay???