Cyber Security

A recent analysis by Dan Frost argues that effective security response depends on preparation rather than patching speed alone. The article examines how testing workflows, deployment governance, rollback planning, and infrastructure awareness help organisations manage security updates without introducing new operational risks. It positions patch management as one component of a broader resilience strategy focused on stability, risk assessment, and recovery readiness. ...more

CISA has ordered U.S. federal agencies to patch the highly critical Drupal vulnerability CVE-2026-9082 following confirmed exploitation attempts targeting PostgreSQL-powered sites. The flaw enables unauthenticated SQL injection attacks that could lead to data exposure, privilege escalation, or remote code execution. Security researchers and monitoring firms have reported thousands of attack attempts against Drupal installations worldwide. ...more

Salsa Digital will host a webinar on November 26 to help Australian government digital teams patch Drupal websites effectively. Led by Jorge Castro, the session will cover practical strategies to reduce downtime, balance risk, and align with the Essential Eight compliance framework. ...more

Drunic is accelerating digital transformation in Nicaragua and Latin America through Drupal. From e-commerce to AI-enhanced platforms, the company harnesses Drupal's security and scalability to deliver cutting-edge solutions. By leveraging the latest in headless architecture and workflow automation, Drunic helps local businesses stay globally competitive — proving that innovation from Nicaragua can scale internationally. ...more

The Drupal Association teams up with CrowdSec to bring behaviour-based, open source threat detection to Drupal websites—combining community intelligence with real-time protection. ...more

Acquia and Lullabot will present a free webinar on May 6, 2025, hosted by Carahsoft. The webinar will focus on modernising government digital services with secure and scalable solutions. Registration is open. ...more

Key recommendations include keeping Drupal core and contributed modules up to date, leveraging Composer for streamlined dependency management, and securing server technologies such as Apache and MySQL. ...more

Security, cloud hosting, performance, and budget allocation emerged as the dominant areas of focus in the survey. ...more

A range of advanced vulnerability scanners now offers proactive solutions to address security challenges. Tools like 'Pentest-Tools', 'SUCURI', 'Astra', 'Detectify', 'Snyk', and 'HTTPCS' provide comprehensive audits to detect and address vulnerabilities. ...more

Learn how the 2018 "Drupalgeddon 2" vulnerability led to widespread botnet attacks on unpatched Drupal sites. Acquia’s detailed analysis reveals the importance of timely security updates to prevent remote code execution and crypto-mining malware. ...more

Explore the crucial role of Two-Factor Authentication (TFA) in Drupal website security, as expertly detailed by José Carlos Raya in Solucionex's latest blog post. ...more