Security

Alithya will hold a PHP and Drupal meetup on Tuesday, September 30th, at 6 pm Montréal time, in Montreal, featuring expert talks on Drush command security and migrating to asymmetric translations. The event targets web developers and Drupal professionals. ...more

Ensure PCI DSS v4.0 compliance on your Drupal Commerce site using a Content Security Policy (CSP). Learn how CSP headers and the Security Kit module help protect payment pages from client-side threats like XSS and unauthorised scripts. ...more

Grzegorz Bartman of Droptica presents 17 tested Drupal 11 modules for faster administration, better navigation, enhanced security, and streamlined configuration management. The list includes tools for bulk content editing, automated backups, security audits, and SEO task tracking, all verified in real-world projects. ...more

DDEV version 1.24.7 introduces a separate ddev-hostname binary to manage hosts file edits with reduced privileges. This update improves local development security, simplifies WSL2 integration, and removes unnecessary dependencies. ...more

Governments worldwide rely on Drupal for secure, accessible, and scalable digital infrastructure. Specbee’s Priyanka Phukan explains why, with global examples and a case study on New York’s Department of Health. ...more

Alex Lyzo shares a hands-on guide to securing Drupal sites—from update routines to login protection and role audits. Learn which modules to use, what mistakes to avoid, and how to layer your defenses effectively. ...more

Drupalize.me outlines the Automatic Updates feature for applying Drupal core security and bug-fix releases via a Composer-powered, UI-driven workflow. The guide covers Composer 2.7+ requirements, file system permissions, backup strategies and a decision matrix to help site owners choose the best update method. ...more

INE examines the CVE-2018-7600 Drupalgeddon2 remote code execution vulnerability and its enduring effects on web application security. The article details the Form API sanitization patch, security updates for Drupal 7.58 and 8.5.1, and underscores the ongoing need for timely patch management and secure coding practices. ...more

Nonprofits face rising digital censorship risks. Learn how to protect your Drupal or WordPress site with strategic hosting, secure backups, and anti-censorship planning. ...more

Drupal 10.5.1 is now available with important bug fixes for production sites. Site owners are reminded that Drupal 10.3.x no longer receives security support—upgrading to 10.4.x or later is strongly recommended to maintain site security through June 2026. ...more

Is your healthcare website unintentionally exposing patient data? Adrian Ababei of OPTASY breaks down what HIPAA compliance really means for digital platforms in the healthcare sector. Learn the must-follow steps—and common pitfalls—to secure protected health information online. ...more

ImageX’s Bjorn Thomson outlines six Drupal advantages for healthcare sites: enterprise-grade security with HIPAA-aligned practices, modular multisite and multilingual support, WCAG accessibility compliance, seamless EHR/CRM integrations, scalable content workflows, and open-source cost efficiency. ...more