Drupal Security

Drupal 7's end-of-life date is January 5, 2025. Discover essential FAQs, key dates, and action steps to ensure your Drupal website remains secure and compliant. ...more

Max Pogonowski from Sitback highlights a recent vulnerability in Drupal sites linked to polyfill.io, where malware was injected into scripts by the new owners. He advises updating Drupal modules or using Cloudflare for protection. The post also introduces the Frontend Bundler Initiative to reduce reliance on third-party CDNs. ...more

The Drupal Security Team has issued a PSA highlighting the need for site owners to actively manage third-party library security. Recent concerns include malicious content from polyfill.io, prompting updates and new security measures. Learn more about the recommended tools and actions to ensure compliance. ...more

Discover how the Drush Firewall module fortifies Drupal websites against unintended alterations caused by specific commands. Explore its role in bolstering security and stability while enabling administrators to fine-tune command execution based on environmental conditions. ...more

Drupal issues a security advisory for the Image Sizes module, prompting users to upgrade to version 3.0.2 due to a moderately critical access bypass vulnerability. ...more

Drupal has released a security advisory for the Migrate queue importer module, urging users to upgrade to version 2.1.1 to address a moderately critical CSRF vulnerability. ...more

Drupal has issued a security advisory for the REST & JSON API Authentication module, urging users to upgrade to version 2.0.13 to address a moderately critical access bypass vulnerability. ...more

Strengthen your Drupal site with top security practices. Learn about key vulnerabilities and effective strategies like regular updates, secure user accounts, and utilizing Pantheon’s automated tools. Stay ahead in securing your Drupal environment. ...more

Explore Najam's comprehensive guide on securing Drupal websites, recently published by TutorialChip. Learn essential strategies and advanced techniques to safeguard your website effectively against potential threats and vulnerabilities. ...more

Explore Philip Norton's comprehensive guide on bolstering user account security on Drupal platforms. It features expert insights and practical measures to safeguard sensitive data without sacrificing user experience. ...more

Discover the transformative power of the Tagify module. It elevates Drupal's entity reference fields with seamless autocomplete and enhanced user experience, ensuring unparalleled data consistency and accessibility. ...more

Join Benji Fisher as he delves into the intricacies of Drupal security, highlighting common vulnerabilities and best practices to safeguard websites in his MidCamp 2024 session. ...more