Last week’s CMS news was WordPress-heavy, but the Drupal Security Team also took an important step.