Experts warn threat actors are scanning the web for Drupal installs vulnerable to Drupalgeddon2Security Affairs·Apr 13, 18:59 UTC · Apr 13, 2018Threat actorCVE-2018-760060
Exploit in the Wild: #drupalgeddon2 - Analysis of CVE-2018Palo Alto Unit 42·Jan 28, 21:25 UTC · Jan 28, 2022Exploit / PoC in the wildCVE-2018-760060
Hacked Drupal sites involved in mining campaigns, RATs distributions, scamsSecurity Affairs·May 21, 12:00 UTC · May 21, 2018Threat actorCVE-2018-7600CVE-2018-760260
CVE-2018-7602 - Drupal addressed a new vulnerability associated with Drupalgeddon2 flawSecurity Affairs·Apr 26, 12:49 UTC · Apr 26, 2018Vulnerability in the wildCVE-2018-7602CVE-2018-7600CVE-2017-1027160
New Drupal RCE vulnerability under active exploitation, patch ASAP!Help Net Security·Apr 26, 00:00 UTC · Apr 26, 2018Vulnerability in the wildCVE-2018-7602CVE-2018-760060
Make-A-Wish website compromised to serve cryptojacking scriptHelp Net Security·Nov 17, 15:17 UTC · Nov 17, 2023VulnerabilityCVE-2018-7600CVE-2018-760260
Cisco Talos Honeypot Analysis Reveals Rise in Attacks on Elasticsearch ClustersCisco Talos·Feb 26, 18:56 UTC · Feb 26, 2019Vulnerability in the wildCVE-2014-3120CVE-2015-1427CVE-2018-7600+2 CVEs60
Hackers continue to hack Drupal installs to install backdoors and inject cryptocurrency malwareSecurity Affairs·May 8, 06:56 UTC · May 8, 2018MalwareCVE-2018-7600CVE-2018-760260
Experts are observing Drupalgeddon2 (CVE-2018Security Affairs·Apr 19, 04:02 UTC · Apr 19, 2018Exploit / PoCCVE-2018-7600CVE-2017-1027160
ShadowSilk Hits 35 Organizations in Central Asia and APAC Using Telegram BotsThe Hacker News·Aug 28, 03:59 UTC · Aug 28, 2025Exploit / PoCCVE-2018-7600CVE-2018-76020CVE-2024-2795650
Network Attack Trends: Internet of Threats (November 2020Palo Alto Unit 42·Jun 6, 13:24 UTC · Jun 6, 2024Exploit / PoC in the wildCVE-2020-28188CVE-2020-17519CVE-2020-29227+62 CVEs60
US, UK, Australia issue joint advisory on today's top exploited vulnerabilitiesThe Record·Dec 12, 00:00 UTC · Dec 12, 2022VulnerabilityCVE-2019-19781CVE-2019-11510CVE-2018-13379+26 CVEs147
Muhstik Botnet Targeting Redis Servers Using Recently Disclosed VulnerabilitySecurity Affairs·Mar 28, 20:43 UTC · Mar 28, 2022VulnerabilityCVE-2022-0543CVE-2019-2725CVE-2017-10271+1 CVEs47
Muhstik botnet adds Oracle WebLogic and Drupal exploitsSecurity Affairs·Mar 28, 08:49 UTC · Mar 28, 2022MalwareCVE-2019-2725CVE-2017-10271CVE-2018-760047
Muhstik Botnet Targeting Redis Servers Using Recently Disclosed VulnerabilityThe Hacker News·Mar 28, 06:59 UTC · Mar 28, 2022Vulnerability in the wildCVE-2022-0543CVE-2017-10271CVE-2018-7600+3 CVEs60
Top 15 Vulnerabilities Attackers Exploited Millions of Times to Hack Linux SystemsThe Hacker News·Aug 23, 13:27 UTC · Aug 23, 2021Vulnerability in the wildCVE-2017-5638CVE-2017-9805CVE-2018-7600+12 CVEs60
Top 30 Critical Security Vulnerabilities Most Exploited by HackersThe Hacker News·Aug 4, 09:03 UTC · Aug 4, 2021Vulnerability in the wildCVE-2019-19781CVE-2019-11510CVE-2018-13379+26 CVEs60
Incident Response Analyst Report of 2019Kaspersky Securelist·Aug 6, 10:00 UTC · Aug 6, 2020Ransomware57
New Lucifer DDoS botnet targets Windows systems with multiple exploitsSecurity Affairs·Jun 26, 06:42 UTC · Jun 26, 2020MalwareCVE-2019-9081CVE-2014-6287CVE-2018-1000861+7 CVEs60
Have you patched these top 10 routinely exploited vulnerabilities?Help Net Security·May 13, 00:00 UTC · May 13, 2020VulnerabilityCVE-2017-11882CVE-2017-0199CVE-2017-5638+9 CVEs60
Hackers continue to exploit the Drupalgeddon2 flaw in attacks in the wildSecurity Affairs·Oct 8, 05:32 UTC · Oct 8, 2019Exploit / PoCCVE-2018-760060
Cryptomining Campaign involves Golang malware to target Linux serversSecurity Affairs·Jul 5, 19:27 UTC · Jul 5, 2019MalwareCVE-2019-9082CVE-2019-3396CVE-2018-760035
DNS Hijacking Abuses Trust In Core Internet ServiceCisco Talos·Apr 17, 15:00 UTC · Apr 17, 2019Threat actor45
Multiple threat actors are targeting Elasticsearch ClustersSecurity Affairs·Feb 27, 19:00 UTC · Feb 27, 2019Threat actorCVE-2014-3120CVE-2015-1427CVE-2018-7600+2 CVEs50
Hackers target Drupal servers chaining several flaws, including Drupalgeddon2 and DirtyCOWSecurity Affairs·Nov 20, 20:23 UTC · Nov 20, 2018VulnerabilityCVE-2018-760035
Hackers targeting Drupal vulnerabilities to install the Shellbot BackdoorSecurity Affairs·Oct 12, 11:21 UTC · Oct 12, 2018VulnerabilityCVE-2018-7600CVE-2018-7602CVE-2017-563860
Crypto Me0wing attacks: Kitty cashes in on MoneroHelp Net Security·Jun 26, 21:20 UTC · Jun 26, 2018Exploit / PoCCVE-2018-760060
Crooks exploit CVE-2018-7602 Drupal flaw, aka Drupalgeddon3 to deliver Monero minerSecurity Affairs·Jun 22, 17:19 UTC · Jun 22, 2018VulnerabilityCVE-2018-7602CVE-2018-7600CVE-2014-0160+3 CVEs60
Over 115,000 Drupal Sites Still Vulnerable to Drupalgeddon2 ExploitThe Hacker News·Jun 5, 08:06 UTC · Jun 5, 2018Exploit / PoC in the wildCVE-2018-760060
Over 115,000 Drupal Sites still vulnerable to Drupalgeddon2, a gift to crooksSecurity Affairs·Jun 5, 06:56 UTC · Jun 5, 2018Exploit / PoCCVE-2018-760060
Release of PoC Exploit for New Drupal Flaw Once Again Puts Sites Under AttackThe Hacker News·Apr 26, 12:32 UTC · Apr 26, 2018Exploit / PoC in the wildCVE-2018-7602CVE-2018-760060
Third Critical Drupal Flaw Discovered—Patch Your Sites ImmediatelyThe Hacker News·Apr 26, 11:04 UTC · Apr 26, 2018Vulnerability in the wildCVE-2018-7600CVE-2018-760260
Hackers Exploiting Drupal Vulnerability to Inject Cryptocurrency MinersThe Hacker News·Apr 18, 09:50 UTC · Apr 18, 2018Vulnerability in the wildCVE-2018-7600CVE-2017-1027160
Hackers Have Started Exploiting Drupal RCE Exploit Released YesterdayThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2018VulnerabilityCVE-2018-760060
Drupal addressed the critical CVE-2018Security Affairs·Mar 29, 12:24 UTC · Mar 29, 2018Exploit / PoCCVE-2018-7600CVE-2014-370460