News - Security News
- Details
- Written by: Bjørn Ove Bremnes
- Parent Category: News
- Category: News - Security News
HTProtect is presented as a security-focused Joomla extension or service for organisations managing multiple Joomla sites. This independent overview considers where a central dashboard may improve operational visibility, what administrators should validate before deployment, and why it must complement—not replace—routine patching and established Joomla security controls.
Read more: HTProtect: An Independent Look at a Security-Focused Joomla Fleet Dashboard
- Details
- Written by: Bjørn Ove Bremnes
- Parent Category: News
- Category: News - Security News
A critical Joomla extension vulnerability, CVE-2026-77995, affects miniOrange OAuth Client versions 1.0.0 through 3.1.9. Administrators should update to version 3.2.0 or later without delay, or disable the extension until they can do so.
Read more: Critical miniOrange OAuth Client Flaw: Update to 3.2.0 or Disable
- Details
- Written by: Bjørn Ove Bremnes
- Parent Category: News
- Category: News - Security News
A critical Fabrik vulnerability, CVE-2026-66915, affects Joomla sites running Fabrik versions 1.0.0 through 4.6.8. Administrators should verify their installed version and update to Fabrik 4.6.9 or later as soon as possible.
Read more: Fabrik RCE: Update Joomla Sites to 4.6.9 or Later
- Details
- Written by: Bjørn Ove Bremnes
- Parent Category: News
- Category: News - Security News
To secure Joomla administrator login access effectively, do not rely on a single setting or a hidden URL. A safer approach combines supported Joomla software, a long and unique password, Multi-factor Authentication (MFA), carefully limited user permissions, clean extension management, prepared recovery options, and hosting-level restrictions where they are operationally appropriate.
This beginner-friendly guide is intended for Joomla administrators and hosting customers working primarily with Joomla 6.1.x and 5.4.x. It explains what each security layer does, how to introduce the layers without locking yourself out, and how to test the result. Joomla uses the term Multi-factor Authentication; the familiar phrase Joomla two factor authentication, or 2FA, refers to the common case in which two factors are used.
Before changing authentication or server rules, make a tested backup, preserve an authenticated administrator session, verify a separate recovery route, and make sure you can reverse hosting-level changes. Administrator login hardening is an ongoing maintenance process, not a one-time installation task.
Read more: Secure Joomla Administrator Login: A Layered Security Guide
