Drupal Security

Explore the expected changes in Drupal 11, from improved content modelling and performance to enhanced security and easier upgrades. This comparison with Drupal 10 highlights what's new for developers and site maintainers. ...more

Discover the top reasons why Drupal CMS stands out for website development. Explore its flexibility, robust security, and scalability, making it a preferred choice for businesses of all sizes. ...more

With Drupal 7 reaching end-of-life in January 2025, Tag1 Consulting offers an extended support service to keep your site secure and maintained. Learn how this service can protect your Drupal 7 investment and provide more time for future planning. ...more

Drupal 7's end-of-life date is January 5, 2025. Discover essential FAQs, key dates, and action steps to ensure your Drupal website remains secure and compliant. ...more

Max Pogonowski from Sitback highlights a recent vulnerability in Drupal sites linked to polyfill.io, where malware was injected into scripts by the new owners. He advises updating Drupal modules or using Cloudflare for protection. The post also introduces the Frontend Bundler Initiative to reduce reliance on third-party CDNs. ...more

The Drupal Security Team has issued a PSA highlighting the need for site owners to actively manage third-party library security. Recent concerns include malicious content from polyfill.io, prompting updates and new security measures. Learn more about the recommended tools and actions to ensure compliance. ...more

Discover how the Drush Firewall module fortifies Drupal websites against unintended alterations caused by specific commands. Explore its role in bolstering security and stability while enabling administrators to fine-tune command execution based on environmental conditions. ...more

Drupal issues a security advisory for the Image Sizes module, prompting users to upgrade to version 3.0.2 due to a moderately critical access bypass vulnerability. ...more

Drupal has released a security advisory for the Migrate queue importer module, urging users to upgrade to version 2.1.1 to address a moderately critical CSRF vulnerability. ...more

Drupal has issued a security advisory for the REST & JSON API Authentication module, urging users to upgrade to version 2.0.13 to address a moderately critical access bypass vulnerability. ...more

Strengthen your Drupal site with top security practices. Learn about key vulnerabilities and effective strategies like regular updates, secure user accounts, and utilizing Pantheon’s automated tools. Stay ahead in securing your Drupal environment. ...more

Explore Najam's comprehensive guide on securing Drupal websites, recently published by TutorialChip. Learn essential strategies and advanced techniques to safeguard your website effectively against potential threats and vulnerabilities. ...more