Security

Security

Security

Chrome 153 Starts Two-Week Release Cycle with 230 Security Fixes and an Exploited V8 Flaw

Share

× SHARE

Drupal teams now have a shorter interval between major Chrome milestones to catch interface and JavaScript regressions before the supported browser window advances. ...more

Read Full Content
Security

Drupal Security Team Publishes 20 Contributed-Project Advisories, 11 for SAML SSO

Share

× SHARE

Updating alone is not enough for every affected site. One module introduces a new permission requirement, while another has no fixed release and should be uninstalled. ...more

Read Full Content
Security

WordPress REST Probes Appear in Drupal Site Logs

Share

× SHARE

Internet-facing sites routinely receive probes for software they do not run. The useful signal is how each layer of the stack handles and records that unsolicited traffic. ...more

Read Full Content
Security

OpenAI Includes Open-Source Maintainers in $1 Billion Daybreak Access Commitment

Share

× SHARE

Resource-constrained maintainers can now seek subsidised cyber access, but OpenAI has not published criteria showing how independent open-source projects will qualify. ...more

Read Full Content
Security

Drupal Issues 16 Contributed-Project Advisories, Including Five Critical Flaws

Share

× SHARE

Critical ratings are only part of the triage. Project reach varies sharply, and one advisory requires administrators to clean stored data after updating. ...more

Read Full Content
Security

Drupal Security Advisories Cover Information Disclosure, Access Bypass and Cross-Site Scripting

Share

× SHARE

Sites that missed the 26 August security batch still have a clear task: identify affected contrib versions and apply the available fixes. ...more

Read Full Content
Security

LiteLLM Supply-Chain Findings Highlight External Dependencies in Drupal AI Workflows

Share

× SHARE

Drupal AI integrations can depend on services whose runtimes, build pipelines and credentials sit outside the site's Composer-managed code. The LiteLLM incident shows how that external trust boundary can become part of the security picture. ...more

Read Full Content
Security

StepSecurity Says It Tracked 56 Open-Source Supply-Chain Compromises in 12 Months

Share

× SHARE

The incidents put familiar build-time assumptions under scrutiny for Drupal teams that rely on Composer and automated CI. ...more

Read Full Content
Security

Actively Exploited MLflow Flaw Can Expose Cloud Credentials

Share

× SHARE

AI services operating beside a Drupal site can create their own attack surface, even when Drupal itself is fully updated. ...more

Read Full Content
Security

Joomla Fixes Ten Security Flaws as Umbraco Patches High-Severity CMS Issue

Share

× SHARE

Unsupported CMS branches can turn a security patch into a major-version project. The 18 August releases show how support status changes the remediation burden across mixed CMS estates. ...more

Read Full Content
Security

WordPress 7.0.4 Fixes Authenticated Remote Code Execution Through File Uploads

Share

× SHARE

File-upload permissions become more consequential when a CMS hands untrusted content to external media processors. ...more

Read Full Content
Security

Drupal Security Team Marks 16 Contributed Projects Unsupported in Ten Weeks

Share

× SHARE

The latest three projects have limited reported use, but the pattern extends beyond their reach. For affected site teams, the recurring security response is to uninstall the project rather than install an update. ...more

Read Full Content

Latest

Is There a Future for Drupal in the AI World?

14 September 2026
Chrome 153 Starts Two-Week Release Cycle with 230 Security Fixes and an Exploited V8 Flaw

14 September 2026
EU Cyber Resilience Act Reporting Rules Take Effect for Manufacturers

14 September 2026

Follow @thedroptimes