Tweet Adobe / Magento released an emergency patch on Sunday February 13th for all Magento 2.3.3-p1 and higher stores. The Security Bulletin (APSB22-12) describes a remote code execution (rce) vulnerability for Magento 2 stores (both Commerce and Open Source). An RCE allows a hacker to run code or upload a file on a store without […]

Tweet The latest zero-day Apache log4j vulnerability has surprised the online community with how pervasive this issue is in many systems and software packages. It allows hackers to run commands on any server that is running this vulnerable software. Here at LexiConn, we have patched all vulnerable applications like SOLR and Tomcat, or have verified […]

Tweet E-commerce sites can suffer from hackers injecting pieces of JavaScript to sniff credit card or other sensitive data. It’s usually a checkout page with payment forms where JS code could be placed. There is a simple yet effective way to catch it. You store the original checkout page HTML and then regularly compare your […]

Tweet Magento has recently released version 2.4.2 of both its open source and commerce editions. This release has many bug fixes, performance improvements, and security patches. The release also backports the security patches to 2.4.1-p1 and 2.3.6-p1. On the security side of things, there are a number of exploitable vulnerabilities that were patched. The more […]

Tweet Recently the free Let’s Encrypt SSL service had a major issue with over 3 million certs that were issued. They were revoked today, and it caused all sorts of headaches for many sites. Let’s Encrypt is fine for test sites and temporary scenarios, but this is one of the reasons we here at LexiConn […]

Tweet With the push by Google (both SEO in search results and the Chrome web browser) and the Firefox web browser to make the entire web secure (using SSL on all pages), website owners have been scrambling to make sure they use an SSL certificate, and that all of their web pages are fully secure […]

Tweet Magento recently released a number of security patches for both Magento 1 and 2. For Magento 1, the patch is named SUPEE-11086. For Magento 2, they issued a specific patch for just the SQL injection attack named PRODSECBUG-2198. These patches and upgrades address a number of issues. Most of the issues require some form of […]

Tweet The biggest change with regards to SSL and using HTTPS links on all pages is: The Google Chrome web browser has begun rolling out Version 68, which will mark any website as “insecure” that is not using an SSL certificate for any web page. The browser now shows this explicitly: Previously, the words “Not […]

Tweet As part of our hosting service for our Magento clients, we provide pro-active security patching when Magento releases a security patch. It is not something that many hosting providers offer. There’s a reason for this… It’s not as easy as it sounds. Here’s a small peek behind the curtain of what goes into this […]

Tweet If it seems “quiet” here on the blog, that doesn’t mean we haven’t been busy… Just the opposite. Behind the scenes we’ve been working on a number of things… From infrastructure improvements, to making sure all servers will support TLS 1.2, there has been a lot of activity going on at LexiConn these past […]