# Active attacks target Drupal Commerce, Ivanti and Synology systems

_Published Monday, November 2, 2026 at 4:18 AM EST · Security · Latest · Tier 2 — Notable_

![Active attacks target Drupal Commerce, Ivanti and Synology systems — Primary](https://heise.cloudimg.io/v7/_www-heise-de_/imgs/18/5/1/9/2/6/7/5/shutterstock_2602293623-f08980add41e8127.jpg?func=bound&height=1200&org_if_sml=1&q=85&width=1200)

Attackers are exploiting vulnerabilities in Drupal Commerce Core, Ivanti Connect Secure and Synology DSM, heise reports, citing security advisories. Ivanti released additional patches late last week for flaws attackers chain to bypass authentication, escalate privileges and execute malicious code.

Drupal says inadequate protection of routes and entity fields can expose merchants to financial harm. Commerce Core 3.3.13 or 8.x-2.41 or later fixes the flaw; administrators should check orders for inconsistencies.

Synology warns that ransomware gangs are encrypting data on outdated DSM systems. Its fixes date to December 2024. Ivanti recommends regularly running its Integrity Checker Tool to look for signs of compromise; its attacks apparently began in early October.

## Sources

- [heise](https://www.heise.de/en/news/Flaws-in-Drupal-Ivanti-Connect-Secure-and-Synology-exploited-11507550.html)

---
Canonical: https://techandbusiness.org/newswire/XFqlS_Oq86R1NPseB48rNO
Published: 2026-11-02T09:18:37.412Z
Story chronology: 2026-11-02T08:30:00.000Z
Retrieved: 2026-11-02T11:31:32.584Z
Publisher: Tech & Business (techandbusiness.org)