Nexcess Server Incident History

1. investigatingOct 27 · 15:39 UTC

   We are aware of a recently reported security issue involving compromised eMudhra Certificate Authority (CA) certificates that may be present in certificate trust stores across some environments. At this time, we have not identified any service interruptions or confirmed customer impact related to this issue. Our Security and Engineering teams are actively evaluating the situation and working to determine and implement the appropriate mitigation across affected environments. Additional information regarding this issue is available from Sansec: https://sansec.io/guides/compromised-certificate-authority We will provide additional updates as more information becomes available and as our remediation efforts progress. If you have any questions or concerns, please don't hesitate to contact us via live chat or by opening a support case.

Reported by Nexcess Server on their status page.

1. identifiedOct 27 · 14:12 UTC

   Patch deployment is progressing well across the affected environments. To check the PHP version currently running on your site, please refer to this help article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

Reported by Nexcess Server on their status page.

1. resolvedOct 26 · 17:28 UTC

   Our Engineering teams have completed the patching process for all affected Magento sites where the available Adobe security patch could be successfully applied. For sites where the patch could not be applied, individual support cases have been created, and affected customers have been contacted with additional information and recommended next steps. Our patching efforts related to this incident are now complete. We encourage all customers to remain vigilant and keep their Magento installations up to date with the latest available security patches and supported versions. Thank you for your cooperation and patience while our teams worked through this security event. If you have any questions or require assistance, please reach out via chat or support case.

Reported by Nexcess Server on their status page.