Vulnerabilities
Drupal patches critical RCE in Field UI module affecting core versions
Fixes released on October 14 address a critical remote code execution flaw in Drupal core that requires contributed modules to exploit.
Web Application Firewall
Everything Threat Times has reported about Web Application Firewall: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
AWS WAF Vulnerabilities Allow HTTP/2 Multi-Frame Request Bypass
AWS issued a security bulletin for two CVEs in WAF that could let attackers bypass inspection rules via HTTP/2 multi-frame requests.