Security blog posts

This is the latest GDPR update. It's about the two rights; the right to be forgotten and the right to port data. How do we as a company comply to these should you want to be forgotten by Umbraco - find out here

Here is the 3rd update on Umbraco and our GDPR efforts. This information is relevant to all our current and future Umbraco Cloud customers.

General Data Protection Regulation (GDPR). Perhaps not the most inviting name but anyhow, it’s on everyone’s lips - including ours

If you have installed Umbraco Forms, you need to update now | Contour is not affected and Umbraco Cloud customers have all been updated automatically

A newly found security issue could lead to disclosure of private information - We have provided a fix for the affected sites | Read more about it here

A routine security audit conducted by Umbraco’s third party security analyst, Dionach has identified a vulnerability in our add-on product Umbraco Forms

If you're still running Umbraco sites that are of versions between 4.5.0 and 4.7.1.1 you need to update your site today with the patches provided here

Update: this information is now obsolete, a new vulnerability was found and a new update is required | Version 4.5 - 7.1.9 is affected

Today we're publishing the results of 2 independent security audits that uncovered issues that you need to be aware of & fix in your Umbraco installations