Whoo boy.

[theweaselking]

"You should proceed under the assumption that every Drupal 7 website was compromised unless updated or patched before Oct 15th, 11pm UTC"

Comments

[pappy-legba.livejournal.com]

Yeah... no one needs to follow the security mailing list until suddenly they absolutely need to.