<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">You may have seen this, but worth posting for Drupal heads:<div class=""><br class=""></div><div class=""><span style="color: rgb(34, 34, 34); font-family: 'Lucida Grande', 'DejaVu Sans', 'Bitstream Vera Sans', Verdana, Arial, sans-serif; font-size: 13px; line-height: 17.9999942779541px; background-color: rgb(255, 255, 255);" class="">"You should proceed under the assumption that every Drupal 7 website was compromised unless updated or patched before Oct 15th, 11pm UTC, that is 7 hours after the announcement"</span></div><div class=""><span style="color: rgb(34, 34, 34); font-family: 'Lucida Grande', 'DejaVu Sans', 'Bitstream Vera Sans', Verdana, Arial, sans-serif; font-size: 13px; line-height: 17.9999942779541px; background-color: rgb(255, 255, 255);" class=""><br class=""></span></div><div class=""><span style="background-color: rgb(255, 255, 255); line-height: 17.9999942779541px;" class=""><font color="#222222" face="Lucida Grande, DejaVu Sans, Bitstream Vera Sans, Verdana, Arial, sans-serif" size="2" class=""><a href="https://www.drupal.org/PSA-2014-003" class="">https://www.drupal.org/PSA-2014-003</a></font></span></div></body></html>