Hackers Actively Exploiting Latest Drupal RCE Flaw Published Last Week

Cybercriminals have actively started exploiting an already patched security vulnerability in the wild to install cryptocurrency miners on vulnerable Drupal websites that have not yet applied patches and are still vulnerable.

Last week, developers of t… Continue reading Hackers Actively Exploiting Latest Drupal RCE Flaw Published Last Week

Another Critical Flaw in Drupal Discovered — Update Your Site ASAP!

Developers of Drupal—a popular open-source content management system software that powers millions of websites—have released the latest version of their software to patch a critical vulnerability that could allow remote attackers to hack your site.

Th… Continue reading Another Critical Flaw in Drupal Discovered — Update Your Site ASAP!

Symfony Flaw Leaves Drupal Sites Vulnerable to Hackers—Patch Now

It’s time to update your Drupal websites.

Drupal, the popular open-source content management system, has released a new version of its software to patch a security bypass vulnerability that could allow a remote attacker to take control of the affected… Continue reading Symfony Flaw Leaves Drupal Sites Vulnerable to Hackers—Patch Now

Over 115,000 Drupal Sites Still Vulnerable to Drupalgeddon2 Exploit

Hundreds of thousands of websites running on the Drupal CMS—including those of major educational institutions and government organizations around the world—have been found vulnerable to a highly critical flaw for which security patches were released al… Continue reading Over 115,000 Drupal Sites Still Vulnerable to Drupalgeddon2 Exploit

Release of PoC Exploit for New Drupal Flaw Once Again Puts Sites Under Attack

Only a few hours after the Drupal team releases latest updates to fix a new remote code execution flaw in its content management system software, hackers have already started exploiting the vulnerability in the wild.

Announced yesterday, the newly dis… Continue reading Release of PoC Exploit for New Drupal Flaw Once Again Puts Sites Under Attack

Third Critical Drupal Flaw Discovered—Patch Your Sites Immediately

Damn! You have to update your Drupal websites.

Yes, of course once again—literally it’s the third time in last 30 days.

As notified in advance two days back, Drupal has now released new versions of its software to patch yet another critical remote co… Continue reading Third Critical Drupal Flaw Discovered—Patch Your Sites Immediately

Another Critical Flaw Found In Drupal Core—Patch Your Sites Immediately

It’s time to update your Drupal websites, once again.

For the second time within a month, Drupal has been found vulnerable to another critical vulnerability that could allow remote attackers to pull off advanced attacks including cookie theft, keylogg… Continue reading Another Critical Flaw Found In Drupal Core—Patch Your Sites Immediately

Hackers Exploiting Drupal Vulnerability to Inject Cryptocurrency Miners

The Drupal vulnerability (CVE-2018-7600), dubbed Drupalgeddon2 that could allow attackers to completely take over vulnerable websites has now been exploited in the wild to deliver malware backdoors and cryptocurrency miners.

Drupalgeddon2, a highly cr… Continue reading Hackers Exploiting Drupal Vulnerability to Inject Cryptocurrency Miners

Hackers Have Started Exploiting Drupal RCE Exploit Released Yesterday

Hackers have started exploiting a recently disclosed critical vulnerability in Drupal shortly after the public release of working exploit code.

Two weeks ago, Drupal security team discovered a highly critical remote code execution vulnerability, dubbe… Continue reading Hackers Have Started Exploiting Drupal RCE Exploit Released Yesterday