#Drupal

At DrupalCon Rotterdam on September 29, Dries Buytaert showed multilingual and headless Drupal Canvas, a public Drupal AI demo and Tool module work for AI assistants, and launched a Drupal Association program that gives contribution credit for advocacy.

Learn how the complex Drupal SQLi vulnerability (CVE-2026-9082) exploits PostgreSQL environments and its data theft risks — and how to ensure you’re protected.

Now that some drupal.org projects are having their issue queues moved to Gitlab , this is probably a good time to start getting used to the new interface and all the new functionality.…

Dries is the Founder and Project Lead of Drupal and the Co-founder and Executive Chair of Acquia.

The Drupal Security Team has released SA-CORE-2026-004, confirming that the highly critical issue previewed in yesterday’s advance advisory is an anonymous SQL injection vulnerability affecting Drupal sites running PostgreSQL databases.…

AIs are eating our websites, and we need to adapt by bringing AI into our websites to enhance our content and user experience and provide a five-star dining experience.

Last week, the PreviousNext team headed over to Wellington for DrupalSouth 2026, and what a week it was.

Keyword search struggles with natural language and exploratory questions. Daniel walked the DrupalSouth 2026 audience through how OpenSearch and Skpr enable semantic search that understands intent and meaning, and how Retrieval-Augmented Generation (RAG)…

Ahead of Global Accessibility Awareness Day, contributors associated with A11yTalks and the Drupal community discussed how accessibility initiatives deteriorate when governance, training, and operational responsibility are not sustained over time.…

AI is accelerating content creation, making estate-scale governance critical. Learn the 5 dimensions of content governance and why it must live natively in your CMS.

How many Drupal Core change records (CR) has there been over the years? Is it a manageable amount for contrib maintainers? How many are about something new or deprecated? This is what it looks like since 2018. For visual effect I grouped CRs in 4 buckets:

Drupal Core Accessibility Maintainer Mike Gifford says organisations risk accelerating inaccessible digital experiences when accessibility remains dependent on isolated advocates instead of embedded governance systems.…

Discover top acronyms that shape your Drupal website, like TLS, HTTPS, CDN, CTA, NID, APIs, and more. Learn what they mean with beginner-friendly explanations.

Johanna Bates reflects on Drupal’s nonprofit ecosystem, the value of structured content, and the long-term stewardship required to support contributors, clients, and mission-driven organisations.

Does your content team know how much Drupal accessibility depends on them? From headings to tables, the choices editors make every day shape whether assistive tech users can navigate your site.

Cybersecurity remained a central concern across enterprise and open-source ecosystems this month as multiple high-profile incidents and critical vulnerability disclosures affected widely deployed platforms.…

Dries is the Founder and Project Lead of Drupal and the Co-founder and Executive Chair of Acquia.

A required part of this site couldn’t load. This may be due to a browser extension, network issues, or browser settings. Please check your connection, disable any ad blockers, or try using a different browser.

Tag1's Pilar Belhumeur reports from Drupal AI Summit NYC 2026 — covering Drupal as an AI harness, autonomous agents, and the rise of an agent-ready web.

Walking the layers of AI tooling I built for Drupal work, and why orchestration of a named capability needs an artifact format the existing layers don't have.