Skip to main content

Millions of websites hit by Drupal hack attack

Anyone who had not yet updated should do so immediately, it warned.

However, the team added, simply applying this update might not remove any
back doors that attackers have managed to insert after they got access.
Sites should begin investigations to see if attackers had got away with
data, said the warning.

"Attackers may have copied all data out of your site and could use it
maliciously," said the notice. "There may be no trace of the attack." It
also provided a link to advice that would help sites recover from being
compromised.

Mark Stockley, an analyst at security firm Sophos, said the warning was
"shocking".

The bug in version 7 of the Drupal software put attackers in a privileged
position, he wrote. Their access could be used to take control of a server
or seed a site with malware to trap visitors, he said.

He estimated that up to 5.1% of the billion or so sites on the web use
Drupal 7 to manage their content, meaning the number of sites needing
patching could be as high as 12 million.

Drupal should no longer rely on users to apply patches, said Mr Stockley.

"Many site owners will never have received the announcement and many that
did will have been asleep," he said. "What Drupal badly needs but doesn't
have is an automatic updater that rolls out security updates by default."

http://www.bbc.com/news/technology-29846539

my motto is "Keep it simple" and "don't leave anything for tomorrow that can
be done today."

Regards Gerald Crawford

Stellenbosch South Africa
Cell: +27-0720390184 (mobile)
E-mail: gerald@webcraft.ws


---
This email is free from viruses and malware because avast! Antivirus protection is active.
http://www.avast.com

Comments

Post a Comment

Popular posts from this blog

What Is Internet Website Content?

What Is Internet Website Content? Content is made up of multiple elements, and is primarily the; * On-page visible text * Images and image Alt text * Anchor text in hyperlinks to internal or external pages * Hyperlink titles in links and menus * The descriptive Title and Description meta-data In the context of Google, a picture is NOT worth a thousand words! Moreover, words must be accessible, not embedded in images or Flash movies, JavaScript, slide shows etc. In 15 years as an SEO consultant, if there's one common denominator evident on websites, it's that there is a profound reluctance to expend time, money, and creative energy on unique text content. Brevity is the watchword - economical use of words is encouraged by design, branding and marketing advisers! * The branding gurus want you to use the textual equivalent of sound bites - bullet points and short sentences! * The website designers want the entire content of the page to be above ...
Post a Comment
Read more

Local Business Online Visibility Tips – Use What You Do Every Day

When you think about online visibility for your local business it's so easy to get wrapped up and overloaded with what you should be doing on the internet to promote your website. Yet, small changes to your every day business routine can make a big difference. Often, business owners think about being visible online as a way of reaching people whom you have had no contact with at all. That's true in many cases. Sometimes, online visibility is as simple as making sure that people you interact with (even briefly) as part of your usual business routines are aware of your online presence. Not everyone wants to pick up the phone or call in to your premises to find out basic information like your opening hours or who to contact. Sometimes people just want to find out a bit more about you and your company. In this day and age of always being plugged in to the Internet, your website is the first p...
Post a Comment
Read more

The REAL Value of Keywords

An important question in SEO is how much intrinsic value resides in a specific keyword and, whether SEO has the potential to take everybody on a fool's errand? When it comes to bigger companies, for instance, can a massive SEO investment in trying to achieve top ranking for almost-generic, ultra-competitive keywords be worth all the disappointment and soul-searching? Surely, in so many cases, there has to be a better way? At the other end of the scale are smaller companies with a limited marketing budget, particularly in the business-to-business sphere. There is often a fine balance to achieve when it comes to investing in SEO for what can only be low-traffic keywords in niche sectors, even where higher gross margins per sale indicate otherwise. Realizing this, many companies will skip the on-line sales dance, or resign themselves to having a website that is little more than an 'on-line brochure' presence or a support mechanism for Pay-Per-Click or social media activities. ...
Post a Comment
Read more