Friendly reminder to Drupal admins: Secure your sh!t before latest RCE-holes get you

Last week's disclosures are now this week's live attacks

Just days after a remote code execution flaw in open-source web publishing software Drupal was made public, researchers have already spotted live exploits in the wild - reinforcing the need for admins to patch and update their sites immediately."