Here's an update from a story we covered last month.
In February, Magento released a patch to fix a very serious security hole. Around 90 days later, Magento still had not added the patch to their downloads, and they had not made any attempt to spread awareness outside of their own narrow ecosystem.
Along with several other blogs, we called them out for their terrible security policies.
[[ This is a content summary only. Visit
http://OSTraining.com for full links, other content, and more! ]]
Published on May 20, 2015 21:51