CISA orders feds to patch actively exploited Drupal vulnerability

By Sergiu Gatlan

CISA has given U.S. government agencies until Wednesday evening to secure their servers against an SQL injection vulnerability in the Drupal content management system (CMS) that it flagged as actively exploited. [...]

Read full article at BleepingComputer

More from BleepingComputer

"City-Forum" data-theft attacks target Salesforce, ServiceNow portals 7 hours ago Android malware combo takes out loans and relays victims' credit cards 8 hours ago Hackers exploit critical Adobe Commerce flaw to hijack customer accounts 9 hours ago Hundreds of fake Chrome VPN extensions route traffic through a proxy 11 hours ago Plug and Pwn attack uses fake USB devices for Windows SYSTEM access 14 hours ago