News
cybersecurity Microsoft 365: let an app send mail from chosen mailboxes only - Pro CISO cybersecurity Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack - BleepingComputer cybersecurity Drupal patches critical RCE flaws, warns exploits may emerge soon - BleepingComputer threat-intel Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups - GBHackers cybersecurity ConnectWise SkyKick Credentials Abused in Microsoft 365 Attacks, Backup Services Shut Down - CyberPress cybersecurity Encryption Is Getting Squeezed From All Sides - Wired Security cybersecurity MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon - The Hacker News cybersecurity Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery Channel - SecurityWeek threat-intel Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years - GBHackers threat-intel Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication - GBHackers threat-intel OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root - GBHackers threat-intel GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories - GBHackers threat-intel SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data - GBHackers cybersecurity Anthropic’s Claude AI Solves 25-Year-Old NSA Cryptography Mystery in Under 30 Minutes - CyberPress threat-intel New GhostBat Android Malware Targets 60 Banking and UPI Apps to Steal PINs - GBHackers
1 / 15
All news ›
Cybersecurity

Drupal patches critical RCE flaws, warns exploits may emerge soon

BleepingComputer ·

Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content management system. [...]

Continue on BleepingComputer ↗ ‹ All news Get the newsletter