malware

TC Drupal People,

I've had two Drupal sites running 7.43 and all modules that needed security updates have been updated. No red warning for updates. All FTP & user logins have very strong passwords that change a lot.

However, these sites still got hacked!

My question: Is there something I'm missing or suggestions on must update or better way to protect my Drupal sites?

I do have them monitored and cleaned for Malware, plus multiple back ups to restore from.

Please chime in if you have any feedback or advice for me (from a Drupal viewpoint or not).

Thank you,
Corey

I've seen this post today:

http://www.welivesecurity.com/2013/05/07/linuxcdorked-malware-lighttpd-a...

It looks like something went terrible.

What should we do with our servers and Drupal installations?