Security alerts
What to fix right now.
Short alerts when a serious flaw hits sites like yours: what happened, who is affected, how to check your site and what to do. The important ones from the past year are here too, in case you missed them. Every alert cites its official sources.
Security alerts
September 2026
Magento and Adobe Commerce zero-day used to take over shops: patch and rotate keys
An exploited Magento flaw let attackers run code on online shops without logging in. Adobe asks merchants to patch and rotate credentials.
June 2026
JCE editor for Joomla let anyone upload code: update and check for intrusions
A critical flaw in JCE, a popular Joomla editor, was exploited to plant scripts on sites without logging in. Update and look for traces.