
When Adrian from Softescu reached out to me it was the first time i heard about the Drupal HackCamp. A whole camp focused on security – SURE!
I’ll write more about the camp later. Let’s start with my slides here first!
Slides
Conclusions
- Web Application Firewalls buy you time till you update your site
- Update your core and modules regularly (at least the critical Modules)
- Automate your processes! Sometimes you only have a couple of hours till attacks roll in.
- Have several layers of security – It will pay out in the long run
- It’s not humans that exploit your site – It’s bots
- We should come up with a better naming than shouting Drupalgeddon 😉
Resources
There are many many resources linked directly in the talk but I’ll highlight a few here:
- Checkpoint Research Blog article on exploiting SA-CORE-2018-002
- Article on Exploiting Drupal sites to mine Cryptocurrencies
- Fastly on mitigating SA-CORE-2018-002
- Github Security Scanning
- Drupal Automatic Updates Initiativef
- Attacks we saw rolling in at amazee.io after the exploit was published