Cyber-criminals use weaknesses in software and apps to attack your devices and steal your identity. Software updates are designed to fix these weaknesses and installing them as soon as possible will keep your devices & data secure.
This post contains important, time sensitive information about the security of your website if you’re running Drupal version 7.57 or below or Drupal 8.5 or below.
For the past several years, Google has been leading the charge towards a more secure web by strongly advocating that website owners adopt HTTPS encryption. Beginning in July of this year, with the release of Chrome 68, Google's Chrome browser (the most popular browser in use today) will mark all HTTP sites as “not secure”.
Switching to HTTPS encryption for your website is now essential. If your visitors see a big "not secure" warning when they visit your site they will go elsewhere, most likely to a competitor who has already made the switch.
With all the interest in Russian hackers and a certain presidential campaign you'd be forgiven for thinking that only high-profile websites and individuals are targets for hackers. Not so.
Over the past week we’ve seen a 1900% (yes one thousand nine hundred) percent increase in the number of malicious login attempts to websites hosted on our servers. And we’re not alone. Across the internet Drupal based websites are seeing a worrying increase in suspicious password reset requests and malicious login attempts.
WordPress & Drupal sites are prime targets for hackers. These hackers don't want to bring you down because they dislike you, in fact most of these hacks originate from bots crawling the web, looking for WordPress and Drupal sites that are vulnerable. If the bots identify your site as a WordPress or Drupal site, they will then set up shop and start looking for vulnerabilities.
Unfortunately, most people don't take this topic seriously until after their site or sites have been hacked. It is only then that they realize that they may lose days of work just trying to regain control over their sites. More importantly, if Google identifies your site as being compromised, they will down grade your site in the search results
Google’s efforts to encourage the web’s transition to HTTPS are beginning to pay off. The company has now announced plans to extend the effort with the “Not secure” badge scheduled to show up on more HTTP pages.
Google’s end goal is to show a “Not secure” warning for all HTTP pages and encourage the adoption of more secure pages.
