If you are an administrator of a website that uses Drupal, a patch for what Drupal is calling a “highly critical security” flaw in both Drupal 7 and 8 cores is due to be released at the end of March. The patch will cover several versions of Drupal, including versions 8.3.x and 8.4.x, even though they are not supported any longer. Yep, this flaw is that critical.
Keeping all systems and software updated with the latest patches is critical in itself. That’s because bad actors like to take advantage of systems that are left open to known vulnerabilities. This method has been successful too many times to count. In fact, that is how WannaCry started as well as the recent SamSam attacks.
Drupal is a content management systems (CMS) and is second in popularity only to WordPress, which has its own vulnerability issues. Joomla comes in third. All have had previous serious flaws.
In the advisory that Drupal sent to developers, it urged them to plan time to update their systems as soon as the patch is released.
Although a fix is indeed being released for unsupported versions of this product, that should never be expected. It has happened in the past with Microsoft Windows. At that time, Windows XP has ceased to be supported, but because of a very serious flaw, Microsoft issued a patch anyway. In any case, it’s highly recommended that all systems be kept updated with patches and that if a product you use is no longer supported, upgrade to one that is as soon as possible. There is no guarantee that developers will update outdated systems, even if the issue is critical.
For banks and credit unions
Share this article with your members
Copy a ready-made summary and link for your newsletter, website or social posts.
