❌

Reading view

In the Open with Tiffany Farriss: Security in the age of AI | Drupal Association

In the Open with Tiffany Farriss: Security in the age of AI | Drupal Association

Drupal Association Interim CEO Tiffany Farriss on how AI is making vulnerabilities cheap to find, and what the Drupal community is doing to keep fixing them safely.

In this episode:
• Why AI-assisted analysis is “an everyone problem” for open source security
• What five months of Alpha-Omega funded SEIR work has meant for the Drupal Security Team and its volunteers
• How site owners, hosts, and organizations can help, starting with Drupal Steward coverage

Read the full transcript: https://www.drupal.org/association/blog/in-the-open-security-in-the-age-of-ai

In the Open with Tiffany Farriss is a weekly series from the Drupal Association, the non-profit that maintains Drupal.org, coordinates Drupal security, and supports the global Drupal community. New episodes every week. Subscribe to follow along.

Produced with thanks to Stephen Cross of Second Signal Media.

submitted by /u/cmkn to r/drupal
[link] [comments]
  •  

Do you like having secure Drupal sites? Help fund xjm. | xjm

Funding for essential roles is falling, when we need it more than ever.

Here's the hard truth: Funding for Drupal core's stability and security is at its lowest since 2012,** **while our needs (especially for core security) are at an all-time high.

Some quick facts:

- Core release management funding is currently at less than half its 2013-2023 levels.
- In 2022 and 2026, respectively, two organizations that had each sponsored a Drupal core release manager for a decade ended their respective sponsorships.
- Release timelines for Drupal 11.4, 11.5, and 12.0 have all slipped well past their planned schedules. This is the first time this has happened since Drupal 8 development in 2013-2015*.*
- Before 2026, the all-time maximum of Drupal core security advisories in a single year was 15. The Drupal Security Team has issued 16 already this year… and there will likely be more.
- In August, September, and October 2026 alone, we issued 198 contributed project security advisories. This is more advisories than any entire year before 2026… and there will absolutelybe more.

submitted by /u/cmkn to r/drupal
[link] [comments]
  •  

In the Open with Tiffany Farriss: Sustaining the Drupal commons | Drupal Association

In the Open with Tiffany Farriss: Sustaining the Drupal commons | Drupal Association

Drupal Association Interim CEO Tiffany Farriss on why Drupal’s commons is under pressure, how the Drupal Certified Partner program is evolving, and what it takes to keep free software running for the next 25 years.

In this episode:
• What the ecosystem and business surveys revealed
• Why the Drupal Certified Partner program is becoming the Drupal Certified program
• The $40 in donated services every Drupal site receives each year, and who shoulders that cost
• Making contribution visible, expected, and recognised

In the Open with Tiffany Farriss is a weekly series from the Drupal Association, the non-profit that maintains Drupal.org, coordinates Drupal security, and supports the global Drupal community. New episodes every week. Subscribe to follow along.

Produced with thanks to Stephen Cross of Second Signal Media.

submitted by /u/cmkn to r/drupal
[link] [comments]
  •  
❌