Universities can replace a CMS or reorganise their websites without knowing how difficult it would be to change providers again. The missing evidence lies in contracts, documentation and the cost of transferring technical responsibility.
Patching the vulnerability may not be enough for affected Drupal Commerce stores. The Security Team has also instructed operators to check their orders for inconsistencies.
...more
Organisations without in-house developers may have a new way to support the maintainers behind the Drupal modules they depend on. How would that responsibility fit into certification?
...more
Companies already contributing to Drupal may find that their work carries more weight. A higher contribution score, however, does not automatically mean a higher Certified Partner tier.
...more
A new CISA deadline raises the urgency of the PHP2Shell response. Specbee's account of emergency Drupal patching shows why deploying fixes and establishing what happened before them are separate challenges.
...more
Sixty-three maintained Drupal AI projects, one per job, each with its install count, latest release and security advisory status from Drupal.org.
...more
A second workplace platform may help governments survive a technology disruption. Whether it also gives them the freedom to leave a dominant supplier is a harder test.
...more
An existing contractor has received a six-month extension while the US government assesses future website support. The new requirements cover Drupal maintenance, federal cloud security and the transfer of technical responsibilities.
...more
Drupal.org accepts AI-assisted work only from contributors who have checked it, can explain every change and say when a tool wrote a significant share.
...more