Security AffairsPierluigi Paganini
Drupal SQL Injection Bug Exploited Live, Extortion Tactics Surge
The Security Affairs newsletter Round 578, authored by Pierluigi Paganini, highlights significant Cybersecurity incidents and threats. Key points include a critical SQL injection flaw in Drupal (CVE-2026-9082) currently under attack, the rise of pure extortion in cybercrime over traditional ransomware, and arrests related to the Kimwolf botnet. The newsletter also discusses the U.S.
CISA's addition of vulnerabilities from Trend Micro and Microsoft to its catalog, various exploits affecting SonicWall and NGINX, and ongoing operations against cybercriminal infrastructures, notably in the MENA region. Overall, it underscores the evolving landscape of cybersecurity threats and the importance of timely updates and awareness.
Story timeline CVE-2026-9082
Full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Thu 21 May · 11:01 UTC | SecurityWeek | Drupal patches PostgreSQL SQL injection flaw CVE-2026-9082 |
| Fri 22 May · 17:32 UTC | SecurityWeek | Drupal Critical SQL Flaw CVE-2026-9082 Prompts Urgent Patch |
| Fri 22 May · 19:31 UTC | CISA | Drupal Core Critical Flaw CVE-2026-9082 Allows RCE |
| Fri 22 May · 23:05 UTC | CISA | CISA Flags Drupal SQL Injection Flaw CVE-2026-9082 in KEV Catalog |
| Sat 23 May · 17:30 UTC | Security Affairs | Critical Drupal SQLi flaw exposes thousands of PostgreSQL sites |
| Sun 24 May · 08:31 UTC | Security Affairs | CISA adds Drupal SQL flaw CVE-2026-9082 to KEV catalogue |
| Sun 24 May · 12:31 UTC | Security Affairs | Drupal SQL Injection Bug Exploited Live, Extortion Tactics Surge (this article) |
| Mon 25 May · 10:32 UTC | SecurityOnline | Poisoned Code: Stealthy Malicious Go Module Backdoor Discovered in Long-Running Typosquat |