Security News

Unpatched Drupal Flaws Expose Sites to Attacks (SecurityWeek)
2016-01-07 10:09

'You're updated!' Drupal says, with fingers crossed behind back (The Register)
2016-01-07 05:24

All Drupal Versions Susceptible to Code Execution, Credential Theft Vulnerabilities (Threatpost)
2016-01-06 21:34

A number of issues exist in the content management system Drupal that could lead to code execution and the theft of database credentials via a man-in-the-middle attack, a researcher warns.

Security Flaws Patched in Joomla, Drupal (SecurityWeek)
2015-10-22 18:51

Drupal addresses Twitter module vulnerabilities (SC Magazine)
2015-09-11 16:50

Pair of Drupal Modules Patch Access Bypass Flaws (Threatpost)
2015-09-10 14:36

A pair of modules included in the Drupal content management system have been updated to fix access bypass vulnerabilities that could allow an attacker to take actions on the behalf of some users....

Drupal 6.37 and 7.39 released, critical vulnerabilities addressed (SC Magazine)
2015-08-20 20:52

Drupal Security Updates Patch Five Vulnerabilities (SecurityWeek)
2015-08-20 13:53

Several Critical Flaws Patched in Drupal Module (Threatpost)
2015-07-23 17:27

There are several critical vulnerabilities in a middleware layer used in Drupal, including both cross-site scripting and cross-site request forgery bugs, that can be exploited remotely. The...

Drupal Updates (June 18, 2015) (SANS Newsbites)
2015-06-20 05:43