Security Center

Get the latest patches, security updates, and best practices for your Magento sites

New Security Update

Install critical updates for Magento 1.x and Magento 2.x versions

Tagged:

News

Mar 8, 2019

A critical vulnerability exists in the Magestore Store Locator extension version 1.0.2 (and earlier versions) that could result in unauthorized access to sensitive information. Magento urges customers running this extension to immediately disable this extension or block requests. Read more. 

Feb 4, 2019

To better align and help enhance the program, Magento consolidated their Bug Bounty Program with the Adobe program under one umbrella. New changes and opportunities are coming for bug reporters.

Jan 24, 2019

Maintainers of the PHP Extension and Application Repository (PEAR) have disclosed a breach that resulted in the compromise of the go-pear.phar executable used to install the PEAR installer package manager v1.10.9.

Jan 7, 2019

Phishing Alert: Do not open email with fake security update. Customers who receive one of these emails should delete it immediately without downloading attachments or following hyperlinks that may be included in the message. Read More.

Jul 18, 2018

Magento is making Google reCAPTCHA and Two-Factor Authentication (2FA) functionality available for Magento Open Source, Commerce, and Commerce (Cloud) v2.1 and v2.2. These features provide enhanced access security.

Apr 24, 2017

Hackers impersonating Magento Commerce have sent an email that contains malware to merchants and agencies using our products. 

Jan 13, 2017

Merchants should check their mail sending settings to protect against a Zend Framework 1 vulnerability.

May 11, 2016

First deadline is approaching for compliance with PayPal security updates.

Mar 16, 2016

A newly-identified malware appears to capture checkout information, including credit card data, from infected sites

Mar 3, 2016

A new vulnerability has been identified for servers using SSL and TLS.