Blog

For increased security, merchants will only be able to use HTTPS when posting messages back to PayPal via their Instant Payment Notification (IPN) service. In the past, PayPal has allowed the use of HTTP for these postbacks. As of June 30, 2017, PayPal Instant Payment Notifications will no longer allow HTTP to post messages back to PayPal for verification. To comply with these changes, all Magento merchants using PayPal must upgrade or implement the Magento Security Patch SUPEE-8167.

Magento has released new updates to increase product security and functionality. The releases contain over 15 security enhancements and Magento 2.x updates that also address image resizing and MasterCard BIN number expansion. We strongly recommend that all merchants upgrade to these versions as soon as is reasonably possible.

MasterCard is expanding their BIN series. MasterCard® has received an additional range of 2-series numbers to add to the 5-series that they currently provide. The 2-series BINs operate in the same way as the 5-series. MasterCard customer financial institutions can expect to be issued 2-series BINs starting in 2017. Bank Identification Numbers (BINs), which are the first six digits of the account number, are fundamental to payments. They identify the issuing institution for the account and ensure that each transaction is routed correctly.