Several Critical Remotely Exploitable Flaws Found in Drupal Modules, patch ASAP!

 Wednesday, July 13, 2016  
drupal-security-update
The extraordinary 'Panama Papers leak' from Law firm Mossack Fonseca that exposed the tax-avoiding efforts by the world's richest and most influential members was initially believed to be the result of an unpatched vulnerability in the popular content management systems: Drupal and WordPress.

Now, we are quite sure that the Panama Papers, which implicated 72 current and former heads of state, was due to vulnerabilities in Drupal and WordPress that allowed hackers to get into the law firm's system and stole over 11.5 Million files (around 2.6 Terabytes of data).

The Drupal Security Team has announced that critical patches to address several security issues in Drupal contributed modules, including several highly critical Remote Code Execution (RCE) vulnerabilities, will be released today at 16:00 UTC.

According to an advisory, the critical arbitrary remote PHP code execution vulnerability (PSA-2016-001) affects up to 10000 Drupal websites. However, “Drupal core is not affected. Not all sites will be affected.”

Although technical details about the critical flaws have not released yet due to security reasons, the team has warned its users to apply upcoming patches without giving opportunities to hackers who are desperately waiting for the bug details to develop exploits within hours or days.

If you own a Drupal website, you are advised carefully to review the list of affected contributed modules and apply the security patches as soon as possible.

Comments

Post a Comment

Popular posts from this blog

100+ Awesome Web Development Tools and Resources

Image
100+ Awesome Web Development Tools and Resources Keshav technosys  |  UPDATED:  JULY 5, 2016 The best and worst thing about being a web developer is that the web is constantly changing. While this is exciting it also means that web developers must always be proactive about learning new techniques or programming languages, adapting to changes, and be willing and eager to accept new challenges. This could include tasks such as adapting existing frameworks to meet business requirements, testing a website to identify technical problems, or optimizing and scaling a site to better perform with the back-end infrastructure.  We thought we would compile a comprehensive list of  web development tools and resources  that can help you be more productive, stay informed, and become a better developer. Web Development Tools and Resources for 2016 A lot fo these web development tools below are ones we use at KeyCDN on a daily basis. We can’t include everything, but here are a couple of o
Read more
Image
FBI 'Double Agent' Pleads Guilty to Selling 'Classified Information' to China   Monday, August 01, 2016     An FBI electronics technician has pleaded guilty to acting as a Chinese secret agent and passing along sensitive information about the Feds to a Chinese government official. Kun Shan "Joey" Chun , 46, admitted in federal court in Manhattan on Monday that he violated his security clearance on several occasions between 2011 and 2016 in an effort to pass on secret information to China in exchange for money. Chun is a 19-year FBI veteran from Brooklyn who was born in China but was employed by the FBI in 1997. His duties with the FBI included " accessing sensitive and, in some instance, classified information ." The g-man, as a double agent, sent confidential government information – including the identity and travel plans of an FBI special agent, the internal structure of the FBI and spying technology used by the Bureau – to a Chi
Read more

facebook marketing ajmer,facebook marketing agency ajmer,facebook marketing companies in ajmer,Facebook marketing company ajmer,facebook marketing company in ajmer,Facebook marketing companies ajmer.

facebook marketing ajmer,facebook marketing agency ajmer,facebook marketing companies in ajmer,Facebook marketing company ajmer,facebook marketing company in ajmer,Facebook marketing companies ajmer. : facebook marketing ajmer,facebook marketing agency ajmer,facebook marketing companies in ajmer,Facebook marketing company ajmer,facebook marketing company in ajmer,Facebook marketing companies ajmer.
Read more