CISA has given U.S. government agencies until Wednesday evening to secure their servers against an SQL injection ...

A critical-level flaw in a popular CMS, patched months ago, is now being abused.

Drupal CVE-2026-9082 exploitation hit 15,000 attempts across 65 countries, forcing urgent patches by May 27, 2026.

Drupal has patched CVE-2026-9082, a highly critical vulnerability that could allow threat actors to hack websites.

A large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject malicious ...

Drupal released security updates for a highly critical Drupal Core vulnerability affecting sites that use PostgreSQL.

In its warning, Drupal said a vulnerability in this API allows an attacker to send specially crafted requests resulting in ...

[The following is excerpted from "Anatomy Of A SQL Injection Attack," a new report posted this week on Dark Reading's Database Security Tech Center.] It started with a vulnerability on a password ...