GoKawiil
Tech News
An Entrepreneur contributor argues that many website Request for Proposal documents specify CMS platforms, sitemaps, templates, integrations and launch dates in such granular detail that agencies are left simply pricing a predetermined solution rather than solving a business problem. The piece recommends organizations separate firm requirements from assumptions and explicitly invite agencies to challenge the brief.
A group of Democratic senators, including Elizabeth Warren and Richard Blumenthal, sent a letter demanding CMS administrator Mehmet Oz disclose any communications with groups pushing unfounded claims that left-wing organizations are stealing votes from nursing home residents. The letter asks CMS to rescind a July memo that replaced prior guidance allowing nursing home staff to assist residents with mail-in voting or transportation to polls, and to reinstate the 2020 and 2024 voting guidance instead.
At his DrupalCon Rotterdam keynote, Drupal creator Dries Buytaert said the platform has outpaced its public reputation and announced a new advocacy program to showcase recent progress. He detailed updates including multilingual support for the Drupal Canvas page builder, React-based code components for JavaScript developers, and continued improvements to Drupal Core and Drupal CMS, which combines Site Templates, Recipes, Drupal AI and Canvas.
At its first Config event in India, Figma introduced Figma Specs, a Markdown-based editor that lets teams define design language and guidelines as a reference for both humans and AI agents. The company also moved its code layers feature, which adds code to canvas designs for interactive prototypes, from private to public beta, and announced integration with the Payload content management system.
The Clop ransomware group has relaunched its dark web leak site at a new Tor address after ShinyHunters defaced the original server, exploiting an unpatched path traversal vulnerability in Grav CMS. ShinyHunters claims to have stolen source code, plugins, server logs and Tor private keys, and demanded a ransom, but Clop denies any contact with the group and disputes that sensitive data was taken.
ShinyHunters, a data-theft and extortion group, defaced rival ransomware gang Clop's dark web leak portal over the weekend, claiming to have exploited an unpatched file-upload flaw in the site's Grav CMS. The attackers say they stole Clop's source code, plugins, system logs and private encryption keys, and are now demanding an unspecified eight-figure Bitcoin payment from Clop while threatening to expose details of victims who paid ransoms.
The extortion group ShinyHunters says it exploited an unauthenticated file upload flaw in Grav CMS to compromise the Tor-based data leak site run by the Clop ransomware operation. The attackers uploaded a taunting message, later fully defaced the site with Pokémon-themed ASCII art, and claim to have exfiltrated source code, CMS plugins, system logs and other server files. BleepingComputer confirmed the defacement was live on Clop's infrastructure and that the uploaded file could be downloaded from the site.