Configuring security notifications
Moodle has set up a dedicated site at moodle.org/security that deals with security issues. If you register your Moodle instance, which is highly recommended, your email address will automatically be added to the security alerts mailing list, which gives you advanced notice of vulnerabilities and updates a couple of days prior to public release. To set this up, go to Site administration | General | Registration, fill in the required information, and click on the Register your site button.
Alternatively, follow the @moodlesecurity Twitter handle to be notified of any Moodle security announcements.
Once you are up to date with general security issues, it is time to focus on being aware of any potential issues on your Moodle system. In the remainder of this section, we will deal with setting up Moodle notifications and inspecting the built-in system report.