Auto Added by WPeMatico
Currently our Magento is using Fastly. Last month, we got attacked by bots. They are trying to place order as a guest thru an API call. Is there any VCL script that I can write in Fastly, so I can… Read More »custom VCL script for Fastly to prevent bots attack
I’m hoping this isn’t an indication of some kind of breach/vulnerability. We recently discovered two orders where the buyers attempted to execute php using the ShipTo name. The code meant to append a line to the pub/health_check.php file. It didn’t… Read More »Magento 2.3.7 orders mysteriously disappeared
The hijacking of YouTube accounts to promote bogus cryptocurrency schemes is nothing new. At Netcraft, we’ve previously blogged about the scale of cryptocurrency scams, and we saw attacks on at least 2,000 distinct IP addresses every month in the past… Read More »LinusTechTips YouTube channels hacked to promote cryptoscams
Our client Is asking us to set up this behavior, we know how to configure everything but we wonder if on Magento or in general there is a security vulnerability to consider. Thanks
The collapse of Silicon Valley Bank (SVB), once the go-to financial institution for early-stage technology businesses and startups, is being exploited by cybercriminals. In this blog post, we discuss some of the tactics and techniques Netcraft has already detected criminals… Read More »Cybercriminals capitalize on Silicon Valley Bank’s demise
I’m relatively new to the Magento framework. I am using Magento 2.4.4. I am trying to figure out how one would code sign their custom components for future distribution. Is there an easy way to do this within the framework?… Read More »What is the preferred way to sign code in Magento?
for my Magento site marketing I use backlink,so some backlinks are right and some others are not not ok I need to block my site access from unknow sites backlink. i used htacces code but that not working # ———————————————————————-… Read More »How can i check Magento site request comes from other unknown website in Magento 2?
Ready-to-go phishing kits make it quick and easy for novice criminals to deploy new phishing sites and receive stolen credentials. Phishing kits are typically ZIP files containing web pages, PHP scripts and images that convincingly impersonate genuine websites. Coupled with… Read More »Hidden Email Addresses in Phishing Kits
We noticing since last few months that Magento instances are affecting of malware on the Magento2 sites? For example: health_check.php attack – this file compromised Credit card fields were update with “_hook” post fix Please let us know if someone… Read More »Magento2 Malware and security issues
Some of our shops are still running on 2.4.3-p3. From how I understand the most recent security patch notes, the security issues concerning Cross-Site Scripting are only relevant for 2.4.4 and 2.4.5 systems and our older systems are not affected… Read More »Are the security fixes for Cross-Site Scripting introduced in 2.4.5-p1 and 2.4.4-p2 relevant to 2.4.3 systems?