A botnet has exploited a highly critical Drupal CMS vulnerability, which was previously disclosed by Drupal in March.
Source: Threadpost