Security News

New Drupal versions fix admin account hijack flaw (Help Net Security)
2015-06-19 08:15

New versions of popular open source content management system Drupal are out, and fix a series of vulnerabilities, including a critical one that can result in an attacker taking over administrator acc...

Drupal Fixes Critical OpenID Bug (Threatpost)
2015-06-18 13:22

Drupal has patched several vulnerabilities in versions 6 and 7 of the content-management system, including a critical bug that enables an attacker to hijack administrators’ accounts and take...

Hackers Offered Up to $1,000 for Vulnerabilities in Drupal 8 (SecurityWeek)
2015-06-05 14:11

Drupal SQL injection vulnerability attacks persist, despite patch release (SC Magazine)
2015-03-20 21:38

Drupal Flaw Allows Attackers to Forge Password Reset URLs (SecurityWeek)
2015-03-19 20:35

Did Drupal Drop The Ball? Users Who Didn't Update Within 7 Hours 'Should Assume They've Been Hacked'
2014-10-30 14:38

http://www.forbes.com/sites/thomasbrewster/2014/10/30/did-drupal-drop-the-ball-users-who-didnt-update-within-7-hours-should-assume-theyve-been-hacked/ By Thomas Fox-Brewster Forbes.com 10/30/2014