Drupal is warning that hackers are attempting to exploit a "highly critical" SQL injection vulnerability announced earlier ...
On December 30, 2024, a 'Chinese government-sponsored advanced persistent threat actor' breached a system managing confidential data for the U.S. Treasury Department. It was discovered that the ...
US cyber authorities have added a critical Drupal Core SQL injection flaw to their exploited-vulnerabilities list after attacks began targeting unpatched websites using PostgreSQL databases, ...
In its warning, Drupal said a vulnerability in this API allows an attacker to send specially crafted requests resulting in ...
Drupal warns users that it has seen attempts to exploit CVE-2026-9082 and security firms are seeing attacks against thousands ...
Attackers are currently targeting websites created with the CMS Drupal. However, pages are only vulnerable if they use ...
Drupal released security updates for a highly critical Drupal Core vulnerability affecting sites that use PostgreSQL.
Attackers who exploited a zero-day vulnerability in BeyondTrust Privileged Remote Access and Remote Support products in December likely also exploited a previously unknown SQL injection flaw in ...