Brian Donohue and Chris Brook discuss late breaking news of an announcement from Drupal warning customers that they should assume their sites have been compromised unless they installed an update from mid-October withing hours of release. This and more in the October edition of the Talk Security monthly news round-up podcast.