Between 200,000 and 240,000 Magento online stores will reach EOL next year

guest · Nov 6, 2019

Between 200,000 and 240,000 Magento online stores will reach EOL next year
November 6, 2019
https://www.zdnet.com/article/betwe...gento-online-stores-will-reach-eol-next-year/

A large chunk of today's e-commerce ecosystem will run on unsupported software starting June 2020, next year, when the Magento 1.x branch is scheduled to reach End-of-Life (EOL) and won't receive security updates anymore.
The number of impacted online stores is currently estimated to be between 200,000 and 240,000, according to different statistics sources.

Store owners who fail to do so will face the risk of having sites hacked and infected with code that steals customers' payment details. This is a pretty plausible scenario on the backdrop of an increase in the number of web skimming (Magecart) attacks.
MOST MAGENTO STORES TODAY ARE RUNNING 1.X, NOT 2.X
Magento is, by far, today's most popular technology for hosting an online store.
Due to the large amount of breaking changes between the two versions, many store owners did not upgrade to the newer 2.x branch [...]
This is why, even today, usage of the 1.x branch dwarfs the 2.x version, despite the newer release being both technically and feature-wise superior to the older one.
Click to expand...

MAGECART, MAGECART, MAGECART
"It's no secret that a CMS without support will develop vulnerabilities," Art Martori, a security researcher for GoDaddy's Sucuri website security division, said today in a blog post.
Click to expand...

Sucuri: Magento 1 End of Life

guest · Apr 9, 2020

Visa urges merchants to migrate e-commerce sites to Magento 2.x
April 9, 2020
https://www.bleepingcomputer.com/ne...ts-to-migrate-e-commerce-sites-to-magento-2x/

Payments processor Visa is urging merchants to migrate their online stores to Magento 2.x before the Magento 1.x e-commerce platform reaches end-of-life (EoL) in June 2020 to avoid exposing their stores to Magecart attacks and to remain PCI compliant.

Web stats site BuiltWith currently shows more than 179,000 live Magento installs out of which around 53,000 are Magento 2.x online shops, with the platform powering 12% of all online shopping sites per HostingTribunal's stats.
Magento 1.x stores exposed to Magecart attacks
Because no security fixes will be provided by Adobe for Magento 1 after it reaches its EoL, "any sites that have failed to migrate will be vulnerable to security breaches and pose an increased risk to the security of payment card data," explains Visa's advisory.

"Acquirers should use this information to take risk-based decisions and encourage their merchants to migrate to a supported version or alternate platform to remain PCI compliant."
Click to expand...

Migrate to remain PCI compliant

"PCI DSS Requirements 6.1 and 6.2 address the need to keep systems up to date with vendor-supplied security patches to protect systems from known vulnerabilities," Visa adds.
"Hence, failing to migrate a Magento 1 e-commerce website will cause merchants to fall out of PCI DSS compliance because no security patch will be available for new vulnerabilities after June 2020.
Click to expand...

guest · Jun 27, 2020

Adobe, Mastercard, Visa warn online store owners of Magento 1.x EOL
Almost 110,000 online stores are still running the soon-to-be-outdated Magento 1.x CMS
June 27, 2020
https://www.zdnet.com/article/adobe-mastercard-visa-warn-online-store-owners-of-magento-1-x-eol/

The Visa and Mastercard payment processors, along with Adobe, have tried last-ditch efforts this month to get online store owners to update their platforms.

In three days, on June 30, the Magento 1.x platform is set to reach its official end-of-life (EOL) date, after which Adobe plans to stop offering security updates.
Stores that haven't updated to the latest 2.x branch and are still running Magento 1.x installations will become highly vulnerable to attacks from hackers.
MASTERCARD AND VISA GET INVOLVED
Earlier this week, payments processor Mastercard has issued a security alert to its customers on the topic.
Click to expand...

In a copy of this alert seen by ZDNet, the company said that its Mastercard Account Data Compromise (ADC) team, responsible for investigating security breaches impacting cardholder data, found that web skimming incidents have been growing in occurrence in recent years. Most of these have been traced back to websites running older versions of the Magento web store software.

But while Mastercard took a lighter tone with its customers, Visa was very blunt in its warning, making it clear that if merchants failed to update away from the Magento 1.x branch they would eventually fall out of compliance with the PCI DSS standard.
ADOBE DELAYED MAGENTO 1.X EOL TWICE
But the two payments processors weren't the only ones who have been warning their customers about the Magento 1.x EOL. So has Adobe, the company that now owns the Magento software and the cloud server for hosting Magento shops.
Click to expand...

Log in or Sign up

Between 200,000 and 240,000 Magento online stores will reach EOL next year

guest Guest

guest Guest

guest Guest

Log in or Sign up

Between 200,000 and 240,000 Magento online stores will reach EOL next year

guest Guest

guest Guest

guest Guest

Useful Searches