Drupal

Drupal at a glance

Drupal is a powerful open-source CMS used for complex and enterprise websites. Drupal ships regular core releases plus coordinated security advisories on scheduled windows; as an internet-facing CMS, prompt patching is essential — the project's security team is well organized, and so are attackers.

For admins the coordinated security releases are the rhythm: Drupal announces core and contributed-module advisories on set days, and past critical flaws (the Drupalgeddon class) were exploited within hours — apply security updates immediately. Keep to a supported Drupal version and track its end-of-life, since running an unsupported major is a serious exposure. Contributed modules are the usual attack surface — keep them minimal, current and from the project. Updates run database updates — back up first and test on staging. Keep the underlying PHP supported. After updating, verify the site and modules. Patchletter surfaces new Drupal releases and security advisories.