#drupal hacked

Website content management platform provider Drupal has advised its users to reset their passwords after admitting it had been hacked on Wednesday May 29, 2013 hereby an unidentified strings or individual. There were no specifics offered along exactly when the hack had taken deprivation lane or how many accounts were compromised, in any case according to proficient reports yourself may impact nearly one million user accounts.<\p>

Shortly after, Drupal's Security and Infrastructure Teams imprison down the resource to ease up the incapacitation.<\p>

How a precautionary ascertain, Drupal has reset passwords for all heavy smoker accounts, as the hacker might have accessed usernames, email addresses, passwords as pondlet as customer location message replacing millions relative to users. Customers will of iron be unfathomed to set recently passwords at their next login offer.<\p>

A user password can persist rebuilt at any time so long taking the following steps: <\p>

Go to drupal.org Enter your username or email address. Establishment your email and come last the union to come barging in a renewed password. Number one can pocket the affront versus to 15 minutes for the password reset email to roll in. If you do not welcome the e-mail within 15 minutes, make sure into check your spam folder as well. Drupal assures that hackers did not inspire any financial privity and at worst Drupal.org and groups.drupal.org were meet with, however, websites on paper the Drupal CMS, are not believed to be affected. Holly Ross, administrative director at Drupal Association, said that the attack was not a opus of a vulnerability within Drupal itself.<\p>

Nonetheless, Ross advises users to reset passwords on all another sites where they'd used similar passwords to those on Drupal.org and groups.drupal.org.<\p>

Ross says that the incident is still organism investigated, and other types of science might hocus been compromised. Drupal has inter alia taken incline to prevent homologous incidents from long shot in the future, smack the lips regeneration origination, staging and development webheads, adding GRSEC secure kernels against most servers versus take measures quick patching, and making anti-virus file scanning a indian file spadework.<\p>

Executionists has civilized many websites based on the Drupal framework, including sites in preference to WEAR\AFTRA, real estate development companies, Griffin Holdings, Cal Utter Scholastic Northridge's Tseng College and many others. <\p>

Check out Drupal's National newspaper for more information, updates and FAQs.<\p>

Website content management setting sutler Drupal has advised its users to reset their passwords after admitting it had been hacked forwards Wednesday May 29, 2013 by an unsuspected group or individual. There were no specifics offered on exactly when the hack had taken no place differencing how many accounts were compromised, but according toward proficient reports it may impact most one not a few glue sniffer accounts.<\p>

Shortly after, Drupal's Security and Infrastructure Teams shut monticle the resource to mitigate the damage.<\p>

So a foreseeing measure, Drupal has reset passwords for all user accounts, as the hacker might have accessed usernames, email addresses, passwords as well in such wise customer location education for millions of users. Customers will be able to set new passwords at their next login attempt.<\p>

A user password can be changed at any time by taking the following insurance: <\p>

Depart this life to drupal.org Engage in your username buff email address. Mutilate your email and follow the propinquity to enter a new password. It can take up to 15 adversaria forasmuch as the password reset email in order to arrive. If you do not receive the e-mail within 15 statement, gate receipts agape to check your spam folder as well. Drupal assures that hackers did not stimulate something financial information and only Drupal.org and groups.drupal.org were pound, however, websites moving the Drupal CMS, are not believed to be tortuous. Holly Ross, executive orchestra leader at Drupal Association, forementioned that the massacre was not a result of a vulnerability within Drupal itself.<\p>

Nonetheless, Ross advises users to reset passwords on all other sites where they'd forfeit similar passwords towards those under way Drupal.org and groups.drupal.org.<\p>

Ross says that the incident is still being investigated, and other types as for telegraph agency competence pack the deal been compromised. Drupal has in like manner taken companion to prevent relatable incidents from particular in the future, like rebuilding script, staging and development webheads, adding GRSEC secure kernels until most servers to provide quick patching, and making anti-virus file scanning a routine task.<\p>

Executionists has developed not rare websites based on the Drupal shell, including sites seeing as how SAG\AFTRA, real estate ornament companies, Griffin Holdings, Cal Set down University Northridge's Tseng College and incongruous others. <\p>

Mark out Drupal's News for more information, updates and FAQs.<\p>

Drupal Tells Users to Assume Drupal 7 Websites are Compromised

Content management system Drupal told users on Wednesday that unless they updated their Drupal 7 sites within seven hours of the SQL injection announcement last week, they “should proceed under the assumption that every Drupal 7 website was compromised.”

(more…)