DNotes LLC response to Drupal security release SA-CORE-2014-005
Yesterday, October 15, Drupal 7.32 was released, addressing a critical security flaw in Drupal 7 core. This flaw was as critical as it gets: it allowed anyone to do almost anything on almost any Drupal 7 site. There were no known exploits running before yesterday, but by this morning automated scripts were peppering the internet with attacks meant for Drupal 7 sites.