[kwlug-disc] Update Drupal... again

Khalid Baheyeldin kb at 2bits.com
Tue May 8 13:00:31 EDT 2018


This is not new.

If you updated core for the CVE's that had fixes released on March 28,
April 18 and 28, then you are safe.

https://www.drupal.org/security

What we are seeing now is some sites that did not update, and bad actors
writing automated scripts to exploit these sites.

The media is now reporting on that last bit, not a new vulnerability.

If you did not update on those dates, then your site may already be
compromised. There is a guide on Drupal.org on what to do in this case.

On Tue, May 8, 2018 at 12:55 PM, CrankyOldBugger <crankyoldbugger at gmail.com>
wrote:

> I know there's been lots of discussion on updating Drupal in here lately,
> but this was in my news feed this morning:
>
> https://www.howtogeek.com/fyi/update-your-drupal-website-
> now-or-hackers-might-turn-it-into-a-cryptocurrency-miner/
>
> Thankfully I'm not smart enough to use Drupal, but I know there are a
> bunch of you who do...
>
>
> _______________________________________________
> kwlug-disc mailing list
> kwlug-disc at kwlug.org
> http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org
>
>


-- 
Khalid M. Baheyeldin
2bits.com, Inc.
Fast Reliable Drupal
Drupal optimization, development, customization and consulting.
Simplicity is prerequisite for reliability. -- Edsger W.Dijkstra
Simplicity is the ultimate sophistication. -- anonymous
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://kwlug.org/pipermail/kwlug-disc_kwlug.org/attachments/20180508/ed51d638/attachment.htm>


More information about the kwlug-disc mailing list