Source: https://www.drupal.org/PSA-2014-003 Source: http://www.thewhir.com/web-hosting-news/drupal-tells-users-assume-drupal-7-websites-compromised