A Drupal breach compromises a large number of accounts. Oddly enough, the attacker did not exploit a vulnerability directly within Drupal; perhaps this would have been too easy. In this metaphor, Java doesn't need a facelift so much as to have a doctor slice it open and use a Shop Vac to remove all contents. …