Drupal 6 Hits the End-of-Life Milestone

Drupal 6 has been around since 2008 and has been used by thousands of websites as a content management system (CMS). However, Naked Security reported that the version reached its end-of-life (EOL) mark and is now officially unsupported. No further security updates or patches will be supplied for the version 6 core or its modules as of Feb. 24, 2016.

The Implications

While WordPress is still the most popular CMS for websites, Drupal is the second. Figures show that about 1 in 10 of the sites on the Web that use it run version 6, according to Naked Security. Now that this version has reached the end of its supported life, those sites become targets for criminals. Like Windows XP, it will be unpatched and unsupported by the developers, becoming vulnerable to any exploits found in the future.

When Drupal version 8.0 was announced in 2013, the EOL date for version 6 was set. Even then, some wondered about this legacy situation and whether the version 6 sites that are out there — and are rather difficult to upgrade anyway due to significant amounts of custom code — would ever be maintained.

OSTraining noted that there are major differences in how version 6 and higher versions of the CMS operate. Even changing from version 6 to 7 is not as simple as an update; it’s more like a full migration.

Long-Term Outlook for Drupal Users

The program and its community found three vendors who have agreed to provide a form of long-term support, according to a Drupal announcement. The companies have agreed to post security patch notifications on a community page.

MyDropWizard is one of these vendors. It announced one-year support for older CMS versions for a sliding fee that depends on the complexity of the customer’s instance. Tag1 Consulting will also provide long-term support, but the pricing is at a fairly high level of about $2,000 a month.

Additionally, Acquia is asking interested parties to contact it for more information about security supports for the earlier CMS versions. These three companies will provide a form of support as long as they can be paid for their efforts, but they and others will help users migrate to the latest version of the CMS, Drupal 8.

The only true way out of the situation seems to be migrating away from version 6 to one of the newer, supported versions. That’s the best way for users to ensure they are staying ahead of threats and receiving the latest updates.

Larry Loeb

Principal, PBC Enterprises

Airplane cybersecurity: Past, present, future

4 min read - With most aviation processes now digitized, airlines and the aviation industry as a whole must prioritize cybersecurity. If a cyber criminal launches an attack that affects a system involved in aviation — either an airline’s system or a third-party vendor — the entire process, from safety to passenger comfort, may be impacted.To improve security in the aviation industry, the FAA recently proposed new rules to tighten cybersecurity on airplanes. These rules would “protect the equipment, systems and networks of transport…

Protecting your digital assets from non-human identity attacks

4 min read - Untethered data accessibility and workflow automation are now foundational elements of most digital infrastructures. With the right applications and protocols in place, businesses no longer need to feel restricted by their lack of manpower or technical capabilities — machines are now filling those gaps.The use of non-human identities (NHIs) to power business-critical applications — especially those used in cloud computing environments or when facilitating service-to-service connections — has opened the doors for seamless operational efficiency. Unfortunately, these doors aren’t the…

Communication platforms play a major role in data breach risks

4 min read - Every online activity or task brings at least some level of cybersecurity risk, but some have more risk than others. Kiteworks Sensitive Content Communications Report found that this is especially true when it comes to using communication tools.When it comes to cybersecurity, communicating means more than just talking to another person; it includes any activity where you are transferring data from one point online to another. Companies use a wide range of different types of tools to communicate, including email,…

Security Intelligence

{{title}}

{{title}}

{{title}}

Topics

The Implications

Long-Term Outlook for Drupal Users

More from

Airplane cybersecurity: Past, present, future

Protecting your digital assets from non-human identity attacks

Communication platforms play a major role in data breach risks

Topic updates