Security News > 2018 > June > Drupalgeddon 2 wreaking havoc on 900+ sites because IT still hasn't applied updates
![Drupalgeddon 2 wreaking havoc on 900+ sites because IT still hasn't applied updates](/static/build/img/news/alt/antivirus-stats-medium.jpg)
2018-06-07 14:38
Despite the fact that the Drupal exploit was reported-and patched-in March 2018, some 115,000 websites are still vulnerable.