Magento hit by largest automated hacking since 2015

[2twenty2]

Magento stores hit by largest automated hacking attack since 2015

https://www.bleepingcomputer.com/ne...-largest-automated-hacking-attack-since-2015/

 

[Couriant]

" Of the hacked stores, the majority were Magento version 1, which no longer receives security updates since June 2020 when it reached the end of support. "

So the owners of their sites didn't update to the new version...

 

[lunarlander]

A lor of business owners think web sites are a one time cost thing. After initial developement they just focus on updating their inventory on the site. Upgrades are minor details to them and the cost of re-development makes them avoid it even more. Security concepts ought to be taught in business schools now that everything is in whole or in part a web business. At the very least it should be budgeted for.