The update mechanism of the popular Drupal content management system is insecure in several ways, allowing attackers to trick administrators into installing malicious updates. Researcher Fernando ...

Thousands of websites running one of the world's most popular open source web content management systems (CMS) may have been compromised by a "highly critical" security flaw. The team at Drupal ...

The Drupal CMS team has fixed a highly critical security flaw that allows hackers to take over a site just by accessing an URL. Drupal site owners should immediately —and we mean right now— update ...