Building a public Shopify app? Your deadline is 20 Nov.
Apps that call the Admin API must turn on an IP allowlist, or get delisted from the App Store.
Shopify's reason: a leaked token won't work anywhere but your own servers.
Is yours set up?
#Shopify#ShopifyDev#webbytroops
6/ Black Friday is 27 Nov. Not the week to find a web shell.
Reply AUDIT and our team will run a free store audit: patch level, planted files, admin users and injected scripts.
#Magento#AdobeCommerce
1/ Patched your #Magento store for PolyShell? It can still be compromised.
The patch blocks new uploads. It doesn't delete files attackers already planted.
CISA added this flaw to its exploited list on 27 Oct. What to check:
5/ Checks to run after patching:
1. Unexpected files in pub/media/custom_options/
2. Search for accesson.php
3. Block web access to that folder
4. Scan CMS blocks and pages for scripts
5. Remove admin users you don't recognise
6. Rotate DB, admin and API passwords
๐โจ May Lord Krishna bless you with happiness, prosperity, good health, and endless positivity.
May Govardhan Puja bring new beginnings, peace, and success into your life.
Happy Govardhan Puja from Team WebbyTroops! ๐ธ๐ช
#HappyGovardhanPuja#GovardhanPuja2026#WebbyTroops
Black Friday is 27 Nov.
Our team's rule: the riskiest change in BF week is the one nobody tested under load.
When does your store stop shipping code?
#ecommerce#BlackFriday
๐ชโจ May the festival of lights bring happiness, prosperity, and endless opportunities!
Let's light up new dreams and celebrate success together.
Wishing everyone a bright & beautiful Happy Diwali from Team WebbyTroops! ๐
#HappyDiwali#Diwali2026#WebbyTroops
5/ Shopify says the later dates are not extra migration time. Custom and merchant-created apps aren't affected.
Our advice: list every app on your store this month and ask each vendor for their plan.
Bookmark this for your Q1 roadmap.
4/ 1 Jan 2027: public apps calling the Admin API must use expiring offline tokens. Unmigrated apps get removed from the App Store for new installs.
15 Jan: merchants see an admin warning.
1 Apr: old tokens get HTTP 403.
Adobe Commerce 2.4.6 lost standard support on 11 Aug 2026.
If that's your version, you have 2 real paths:
- #Hyvรค: stay on Magento, fix speed. Fits complex catalogs and B2B.
- #Shopify: drop server and upgrade work. Fits lean teams.
Reply MIGRATE for a free fit check.
Shopify's Fall '26 Edition shipped 150+ updates on 28 Oct.
The headline: Shop Pay checkout inside more AI agents.
Our take: if your discounts or checkout rules live in theme hacks, agent buyers may never see them.
Is your checkout agent-ready?
#Shopify#checkout
Patched Magento or Laravel last month?
Your server can still be exposed. On 21 Oct, PHP fixed two critical RCE flaws. Every PHP install serving web requests is affected.
Patched: 8.5.12, 8.4.27, 8.3.36, 8.2.35.
What does php -v show on yours?
#PHP#Magento
Using Laravel's token guard on MySQL or MariaDB? Check config/auth.php today.
A critical bypass (CVSS 9.2) lets an unauthenticated attacker get authenticated as another user.
Fixed in 12.68.0 and 13.29.0. Run composer update laravel/framework, then composer audit.
#Laravel#php