Starting next month (October 2025), Washington businesses and residents will be paying sales tax on a slew of new services -- including custom web development, IT services, digital advertising, and even temporary workers.
In the past couple days I've gotten two different questions regarding building functionality out in WordPress. This seems a bit...weird with timing, given that Drupal CMS just launched three days ago!
Yesterday a client asked us to install Rules module (again, repeating an earlier request, when he had missed my answer that we had installed ECA instead).
For the holidays, we're highlighting some awesome Free/Open Source software -- three amazing platforms that have gone far beyond any commercial/proprietary competitor.
New versions of Drupal core dropped today, to fix a file handling issue.
After assessing the patches, statements, and risks associated with this update, we have decided this is an important update to apply, but not urgent for most of the sites we manage.
No, you should not. You should let us worry about them, and go back to your business.
Seriously, we're getting questions from all kinds of people about whether this matters. I'm a bit surprised that there is any question about that. Would you be concerned if your top salesperson was selling for somebody else? If your cashiers were jotting down credit card numbers when they charged a card? If your office became a well-known spot for illicit drug or gun dealers? If your office had a bunch of scammers squatting and running a pyramid scheme? If your confidential client information could be revealed as easily as using a bic pen on an old Kryptonite lock?
Bic Pen vs Kryptonite Lock
We've seen some variation of every single one of those scenarios. And all of them are possible with a remote code execution flaw in a web application, like yesterday's Drupal security vulnerability.