Security News

Drupal patches 10 security flaws, critical issues (ZDNet)
2016-02-26 13:10

Drupal drips out ten new patches, one worthy of immediate attention (The Register)
2016-02-26 06:10

Drupal Update Fixes 10 Vulnerabilities, One Critical (Threatpost)
2016-02-25 17:30

Drupal addressed 10 vulnerabilities in the CMS this week, including a critical access bypass issue and another issue that could lead to remote code execution.

Critical Drupal Updates Patch Several Vulnerabilities (SecurityWeek)
2016-02-25 10:10

Drupal uncrosses fingers, promises secured patching (The Register)
2016-01-12 05:27

Drupal moves to fix flaws in update process (Help Net Security)
2016-01-11 16:28

After IOActive researcher Fernando Arnaboldi publicly revealed three crucial vulnerabilities in Drupal's update process last Thursday, the Drupal Security Team published a response on the Drupal Group...

Drupal Starts Patching Update Process Flaws (SecurityWeek)
2016-01-11 09:55

Drupal install process appears to be dripping (SC Magazine)
2016-01-07 19:40

All Drupal Versions Susceptible To Code Execution, Credential Theft Vulnerabilities (Reddit)
2016-01-07 16:10

Bugs in Drupal's update process could lead to backdoored updates, site compromise (Help Net Security)
2016-01-07 11:06

Drupal's update process is deeply flawed, says IOActive researcher Fernando Arnaboldi. He recently discovered three separate flaws in it, the worst of which could be exploited by attackers to swap ...