Ecommerce platforms (cough, Magento) need patching before Black Friday, warns UK's National Cyber Security Centre

If you run a small online business powered by the Magento ecommerce platform, Britain's National Cyber Security Centre (NCSC) is begging you to make sure it's fully patched ahead of Black Friday. "Retailers are urged to ensure that Magento – and any other software they use – is up to date," said the GCHQ offshoot in a …

[ecarlseen]

Magento updates are a mess

One of the big reasons people don't update Magento as much as they should is that the update process is a complete trash fire. Since Adobe took over the updates have been of the quality we expect from the people who brought us Flash. For example, a recent security patch in the 2.3 release train cut out compatibility with PHP 7.2, and if you have critical third-party modules that don't like PHP 7.3 or 7.4 yet then tough luck. For complex sites it can take several weeks or months of re-development work to fix this, and to have it dumped on you without any notification is just sloppy.

[EnviableOne]

Re: Magento updates are a mess

this is the reason it's bottom of every review of e-commerce platforms