Within the past few days an announcement was made with regards to a severe Joomla! vulnerability. There were no details provided about this security issue and you can imagine why - disclosing such information would pose existing websites and business at risk.
Good news for RSFirewall! users: You were protected the whole time!
The announcement was made on 16 October 2015 and the patch was released on 22 October. Congratulations to the Joomla! Security Strike Team for the prompt response and solution.
The reported vulnerabilities resided in the Joomla! core and were pretty severe as it affected Joomla! installations from version 3.0 through 3.4.4. SQL injections and ACL violations are certainly not to be taken lightly. If you would like to learn more on this, have a look at the Joomla! 3.4.5 release announcement.
Luckly, RSFirewall!, already incorporates an SQL injection protection mechanism, thus keeping your website as safe as possible. This doesn't mean that you should lay back and light up a cigarette. Given that this was a public announcement, hackers will concentrate their efforts on particular Joomla! versions such as these to exploit your website in any way possible.
Advice!
- Keep your Joomla! installation updated at all times. Updates can be applied rather easily. Ignorance will eventually take its toll!
- Keep RSFirewall! updated at all times. We are constantly improving our security extension so your website can be kept safe.
Didn't think you need a security specialized extension? Perhaps it is time to think again. Here is an incentive - 30% discount on all RSFirewall! licenses (coupon code available until 30 October):
RSFJ345
PS: Existing RSFirewall! subscribers can renew the license with a built-in 30% discount as well.
