Taking back control of your Joomla & WordPress Core updates
Both WordPress and Joomla now push automatic updates without asking. That sounds great until a security patch breaks your site at 3am or a Joomla update jumps you to a major version you weren't ready for.
This week WordPress screwed up with their update, crashing some sites globally, when automatic updates were pushed out to WordPress. I've written a detailed blog post about it. You must upgrade to 6.9.4 to remain secure — 10 security fixes were applied in that version.
This week I also published four in-depth guides covering exactly how to manage this — for WordPress and for Joomla (including a deep dive into the TUF security model behind Joomla's new auto-update system). The Astroid Framework vulnerability post has been updated with new findings, and there's a new guide explaining those uptime alerts you've been getting.
All guides are free to read on the blog
|