Drupal, the poor content management system cousin of WordPress, always the bridesmaid but never the bride, has finally become popular, only in terms of it now becoming so entirely insecure that it’s become the favorite CMS target of cryptomining hackers. The latest range of attacks targeting Drupal, which seems to be perpetually in the news for yet another security issue, targets CVE-2018-7600 and CVE-2018-7602, two vulnerabilities that had a fix in the form of a patch issued last month that most Drupal websites are yet to apply.

Read full news article on SiliconANGLE