Millions of Drupal websites at risk from failure to patch

You should assume that your Drupal 7 website has been compromised if you didn’t patch it within 7 hours of the release of Drupal 7.32 on 15 October 2014.