Wordfence Report: 4.8 Million Drupal Sites Attacked in June 2026

The Wordfence report claiming 4.8 million Drupal sites were attacked in June 2026 does not exist, because June 2026 is a future month.

The Wordfence report claiming 4.8 million Drupal sites were attacked in June 2026 does not exist, because June 2026 is a future month.

Drupal released an emergency security patch after researchers discovered a critical vulnerability affecting approximately 4.

If your Drupal site has been compromised in a recent attack, there are several telltale signs you can look for before security problems escalate into full...

While reports of a Drupal plugin removed from the repository after 47 confirmed hack cases circulate in some security discussions, specific details about...

A critical vulnerability in Drupal theme frameworks has been exploited to inject malware onto approximately 5,000 websites, compromising user data and...

Drupal has released critical security patches to address severe vulnerabilities affecting the latest versions of the platform.

An alleged FBI warning regarding CVE-2026-4.8 and active Drupal exploitation has circulated online, but extensive verification through official...

A massive botnet attack has specifically targeted Drupal sites running Yoast SEO, exploiting a vulnerability in how the plugin handles certain requests on...

A series of critical vulnerabilities discovered in Drupal core in 2026 poses significant risks to websites running affected versions, though the actual...

A widely-installed Drupal plugin with millions of active deployments was recently found to contain malware code designed to give attackers backdoor access...