The Trump administration is proposing sweeping changes to Medicare payment and value-based care programs that it says will expand accountable care, modernize physician payment, and help shift the ...

Horizon Aid — a Drupal CMS site template recipe for NGOs, nonprofits and humanitarian/aid organizations, built the Varbase recipe-first way. Ships the Vartheme BS5 Horizon Aid theme. By Vardot.

Educare — a Drupal CMS site template recipe for education websites (schools, universities, academies, e-learning), built the Varbase recipe-first way. Ships the Vartheme BS5 Educare theme. By Vardot.

The CMS created a new office dedicated to health technology this week as the agency continues to double down on tech and innovation. The Office of Health Technology and Products will lead the CMS’ ...

The Cybersecurity and Infrastructure Security Agency has added an actively exploited critical Drupal bug to its Known Exploited Vulnerabilities (KEV) catalog. The 9.8 flaw — CVE-2026-9082 — operates ...

CISA has given U.S. government agencies until Wednesday evening to secure their servers against an SQL injection vulnerability in the Drupal content management system (CMS) that it flagged as actively ...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a recently patched critical security flaw impacting Drupal Core to its Known Exploited Vulnerabilities (KEV) catalog, based ...

Drupal is warning users that it has already seen attempts to exploit CVE-2026-9082 and security firms are seeing attacks against thousands of websites. Drupal is warning users that it’s already seeing ...

The Drupal Security Team has officially released SA-CORE-2026-004, patching a highly critical SQL injection vulnerability (CVE-2026-9082) that affects Drupal core’s database abstraction API across ...

Drupal has patched a highly critical vulnerability that could allow threat actors to hack websites powered by the open source content management system (CMS). The developers of the CMS had alerted ...

Drupal has released security updates for a "highly critical" security vulnerability in Drupal Core that could be exploited by attackers to achieve remote code execution, privilege escalation, or ...

The Drupal Security Team is releasing patches for all supported core branches today, May 20, 2026, between 17:00 and 21:00 UTC — and every administrator of a Drupal-powered website should be at their ...