Cybersecurity

At DrupalCon Barcelona 2024, Theódór Ragnar Gíslason, CTO of Syndis, presented Defend Iceland, a pioneering initiative aimed at building safer digital communities through a nationwide bug bounty platform. This community-driven approach empowers citizens, ethical hackers, and organizations to collaborate on strengthening cybersecurity. In his keynote, Theódór shared how Iceland’s model for collective cyber resilience can be scaled globally, offering a fresh perspective on tackling digital threats in an increasingly interconnected world. ...more

Krishna Sharma of Skillions Infotech discusses common software development challenges, including technology changes and security issues, and provides actionable strategies for teams to improve software quality and scalability. ...more

In web security, maintaining a secure Drupal site involves more than just core updates—it's about managing a complex web of dependencies. In this article, Grzegorz Pietrzak explores the critical steps every Drupal site maintainer should take to safeguard their sites against potential vulnerabilities. From keeping Composer and dependencies up-to-date to leveraging automated tools, discover practical strategies to fortify your Drupal site against modern threats. Stay ahead of security risks with these essential tips and insights. ...more

HackTricks details methods for exploiting Remote Code Execution vulnerabilities in older Drupal versions, focusing on the PHP Filter module and backdoored modules. Learn how attackers gain control and how to mitigate these risks. ...more

Webcurl's blog post, "LocalGov Drupal Security 101: Features and Best Practices Explained," emphasizes the importance of robust cybersecurity compared to securing a house with a sturdy lock—LocalGov Drupal benefits from ongoing security scrutiny by over 1 million community members and a dedicated security team. Key measures include using Drupal Steward, a web application firewall, and best practices like handling unauthorized file uploads, enforcing strong passwords, and configuring essential security headers. ...more

Explore Najam's comprehensive guide on securing Drupal websites, recently published by TutorialChip. Learn essential strategies and advanced techniques to safeguard your website effectively against potential threats and vulnerabilities. ...more

Discover how the Eclipse Foundation and major open-source foundations collaborate to establish cybersecurity standards in line with the EU's Cyber Resilience Act, aiming to unify and enhance security practices across the open-source ecosystem. ...more

Discover the journey of Zoocha, a leading Drupal Development Agency renowned for its commitment to innovation, sustainability, and client success. Since its inception in 2009, Zoocha has demonstrated a profound dedication to open-source technology and agile methodologies, earning notable certifications and accolades. With a portfolio boasting collaborations with high-profile clients across various sectors, Zoocha excels in delivering customized Drupal solutions that meet unique client needs. This article delves into Zoocha's strategies for engaging talent, promoting Drupal among younger audiences, and its ambitious goal to achieve carbon neutrality by 2025. Explore how Zoocha's commitment to quality, security, and environmental sustainability positions it as a trusted partner in the dynamic world of web development. ...more

The Cyber Resilience Act (CRA) has undergone amendments in response to concerns from the open-source community, highlighting the EU's proactive approach to cybersecurity regulation. The revised legislation emphasizes the exclusion of open-source projects, introducing the concept of an "open-source steward" and extending the implementation phase to early 2027. ...more

Discover how Acquia tackles Automated BOT Traffic in their latest blog post. Learn about the challenges posed by bots and strategies to minimize risks for your business. Stay ahead with expert insights from Acquia! ...more

Balint Pekker, a security researcher and Ph.D. candidate at Harvard University, questions the effectiveness of patching software vulnerabilities in his recent blog post. Pekker argues that patches can sometimes create new vulnerabilities and that a more nuanced approach is needed to mitigate security risks. ...more

Discover the robust security features of Drupal CMS and how they protect your digital assets from cyber threats. Learn about the cybersecurity risks organizations face today and the mechanisms available to secure your Drupal website. ...more