Panama Papers hack: Unpatched WordPress, Drupal bugs to blame?
▻http://www.theregister.co.uk/2016/04/07/panama_papers_unpatched_wordpress_drupal
“The lesson of course is patch, patch, PATCH. WordPress has made big strides in this area by allowing for automated security updates and one-click plugin updates. Drupal, however, still requires you to manually install updates, and updating the core Drupal software requires additional efforts that result in people putting off updates for months.”