Strengthening Magento 2 Security in CI/CD Pipelines with Sansec Ecomscan
Learn how to integrate Sansec Ecomscan into Magento 2 CI/CD pipelines to detect malware, enforce security patches, and secure build artifacts. Step-by-step guides for GitHub Actions and Bitbucket Pipelines included.
Check if your Magento site is safe from Session Reaper (CVE-2025-54236)
How to guide on checking if your Magento 2 store is safe from the Session Reaper (CVE-2025-54236) exploit. And guidance on how to patch and secure your site if it is not.
Magento Trojan Orders (CVE-2022-24086) - addAfterFilterCallback
Magento 2 Trojan Orders (CVE-2022-24086) are back, lets talk about how to patch so we are safe. And other identifiers aside from addAfterFilterCallback
Check if your Magento site is safe from CosmicSting (CVE-2024-34102)
How to guide on checking if your Magento 2 store is safe from the CosmicSting (CVE-2024-34102) exploit. And guidance on how to patch and secure your site if it is not.
Adobe Commerce - Improved Magento Vars Store Code Configuration
A simplified version of the magento-vars.php store code configuration. That catches both CNAME alias' and dynamic integration urls