Security
The security of a Drupal instance is ensured by the regular update of the core and modules. All updates and their severity can be found on www.drupal.org/security
For example, for Drupal core, a "Highly critical - Remote code execution" alert should induce a core update as soon as possible.