After the PHP security release: auditing your Drupal sites

Updating PHP closes the door, but it does not tell you whether anyone came through it first. With honeypot evidence of exploitation attempts from 17 October, four days before the fix was public, here is how the Drupal Association is auditing Drupal.org, and what our research suggests site owners should check on their own servers.

Vibe Coding Drupal: The Pragmatic Middle Path

Author: Martin Anderson-Clutz (mandclu)
Republished with permission from Acquia

Contribution credit updates: higher weights for core and core security work

Contribution credit weights for Drupal core and core security work have gone up, and the core sponsorship table now covers Security Team, Topic Maintainers and Subsystem Maintainers. Here’s what changed, why, and what’s still to come.

The work that just happens: the DA Insider for September 2026

This post is adapted from the DA Insider, the Drupal Association's monthly newsletter. Subscribe here to get it in your inbox each month.

October 2026 Drupal for Nonprofits Chat

Join us THURSDAY, October 15 at 1pm ET / 10am PT, for our regularly scheduled call to chat about all things Drupal and nonprofits. (Convert to your local time zone.)

We don't have anything specific on the agenda this month, so we'll have plenty of time to discuss anything that's on our minds at the intersection of Drupal and nonprofits. Got something specific you want to talk about? Feel free to share ahead of time in our collaborative Google document at https://nten.org/drupal/notes!

All nonprofit Drupal devs and users, regardless of experience level, are always welcome on this call.

This free call is sponsored by NTEN.org and open to everyone.

Leading the Open AI Conversation: Drupal at Digital Leaders' AI Week 2026

The narrative around enterprise AI is changing. Digital leaders — from CMOs looking for campaign velocity to CISOs managing vendor risk — are no longer just asking for new AI features. They are asking for AI infrastructure they can actually trust. They want to know how to maintain brand sovereignty, ensure content provenance, and scale AI operations without creating unmanageable compliance risks.

This shift in the market perfectly aligns with the mission of the Drupal AI Initiative: to establish Drupal as the premier open-source AI platform for digital experiences.

This October, the conversation takes a national stage at Digital Leaders' AI Week 2026, the UK's largest online festival of AI learning. And the Drupal community is front and center.

While Drupal AI is fundamentally a technology initiative, its real-world impact comes from the thought leadership of the people building it. At AI Week, members of the Drupal ecosystem will share strategies that go far beyond the CMS, showing how open-source principles are solving the hardest challenges in enterprise AI adoption.

Here is a look at two key sessions you won't want to miss.

Optimizing Drupal Core CI

This is a cross-post of a blog by Nathaniel Catchpole, Senior Performance Engineer and Technical Lead at Tag1

State of Drupal presentation (September 226)

This blog has been re-posted and edited with permission from Dries Buytaert's blog.

Drupal is now light-years ahead of its reputation. Closing that gap is our #1 challenge, and it was the main message of my DrupalCon Rotterdam keynote.

Welcoming Four New Full Members to the Drupal Security Team

The Drupal Security Team is pleased to announce that four provisional members have been added as full members of the team: Pierre Rudloff (prudloff), Joseph Zhao (pandaski), Bram Driesen (bramdriesen), and Swan Kalata (akalata).

Speed, Safety, and Smarter Journeys: What Drupal AI 1.5 Means for Digital Marketing Leaders

Author: Will Huggins

In enterprise digital experience, the conversation around generative AI has shifted dramatically. Digital leaders are no longer asking whether AI can write a paragraph or spin up a page. They are asking: 

  • Can our AI deliver seamless customer journeys?
  • Can it scale without diluting our brand voice?
  • Will our IT and compliance teams actually approve it?

The release of Drupal AI 1.5 directly answers those questions.

Pages

Subscribe to all posts