Tag Archives
Latest News from Tag Archives
CubeCart Security Releases: What 6.7.3, 6.7.5 and 6.7.6 Fixed
Ten responsibly disclosed vulnerabilities were fixed across three CubeCart releases, including one rated CVSS 9.0. Here is what was found, and why authenticated-only is less reassuring than it sounds.
CubeCart Audit, Request and Error Logs: Knowing What Your Store Did
CubeCart now records every admin action with actor, IP and a diff, logs outbound HTTP calls, and deduplicates error rows so the log is actually readable.
Hotlink Protection: Worth Enabling, Easy to Overdo
Other sites displaying your images from your server costs you bandwidth and gives away your product photography. Blocking it is a checkbox, and breaking your own Google Images traffic is just as easy.
Website Security: The Measures That Actually Matter
Almost nobody attacking your site has chosen you. That is good news, because the defences that stop automated attacks are unglamorous, mostly free, and take an afternoon.
Argon2id Password Hashing in CubeCart: What It Means for Your Store
CubeCart now hashes passwords with Argon2id and migrates existing accounts transparently on login. Why memory-hard hashing matters, and the hosting requirement that could mean you are not getting it.
Is Your WordPress Website Being Used in a DDoS Attack?
WordPress sites are recruited into attacks on other people constantly, and the owner usually notices nothing beyond the site feeling slow. How to check your logs, and the two-minute fix.
How to Find and Read Email Headers
When email goes missing, lands in spam, or looks forged, the answer is in the headers. Where to find them in every major mail client, and how to read the one line that answers most questions.
Two-Factor Authentication in CubeCart: Why You Should Turn It On Today
Nearly every CubeCart vulnerability fixed this year requires an existing admin session. Two-factor authentication is the control that breaks that chain, and it takes five minutes per account.
The End of Passwords: How Passkeys Actually Work
We first wrote about the end of passwords in 2013 and the candidates all failed. Passkeys are different, because the browser and operating system makers built it in themselves. How they work, and where they still fall short.
How to Secure Your Email Accounts
Your email account can reset almost every other account you own, which makes it the most valuable thing you have online. The checks that matter, including the one almost everyone misses.
- 1
- 2