The Tocsin24 blog
Security, vulnerabilities and maintenance for Magento 2 stores and WordPress sites.
WordPress hacked? Spot a new administrator or a modified file
WordPress hacked? Spot an unknown administrator or a modified file with WP-CLI, then take back control without destroying the evidence.-
Magento 2 maintenance: daily, monthly and yearly tasks
Magento 2 maintenance checklist: cron, message queues, indexes, disk, patches, accounts, backups, certificate and domain. What to check, and how often. -
Critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619): update your Magento store or WordPress site
Two critical PHP vulnerabilities let attackers take over a server. Fixed versions, what it means for Magento and WordPress, and how to update on Debian and Ubuntu. -
Card skimmer (Magecart) on Magento: how to spot it
A Magecart skimmer steals card details on the Magento checkout page: where it hides, the warning signs and what to do if you find one. -
Magento 2 hacked: the warning signs and what to do next
Magento 2 store hacked? The warning signs, what not to do, who to notify and how to regain control without destroying the evidence you will need. -
Magento admin accounts, integrations and API tokens: how to spot suspicious access
Unknown admin, recent integration or stray API token on Magento 2? Where to look, the warning signs and what to do without wiping the traces. -
Adobe security patches (APSB): check they are really applied to your Magento store
Magento security patches (APSB): read your version, check that each patch is really applied, and find out when Adobe stops supporting it. -
Magento 2 security audit: a 10-point checklist
A 10-point Magento 2 security audit: version, patches, extensions, accounts, 2FA, files, backups and logs. How to check each one, and how often. -
Magento store disk full: find out what is taking up the space
Magento disk full? Find what is using the space (logs, reports, cache, backups), free some up safely and check whether you have run out of inodes. -
How to secure Magento 2: the essential hardening settings
Secure Magento 2 step by step: patches, 2FA, admin URL, production mode, file permissions and security headers, ranked by impact, plus the traps to avoid.
Articles 1 to 10 of 11
Have your store monitored
Tocsin24 monitors the security and health of your Magento store or WordPress site, and warns you at the first sign.