How to identify and report phishing emails claiming to be from 3CX. 3CX has identified recent phishing attempts targeting partners by impersonating members of the 3CX accounting department. These emails use deceptive tactics to appear legitimate, including mimicking branding, language and known contact names. Summary of the Issue The fraudulent emails are not from 3CX. Their go [...]
Keep your 3CX system up to date if you are not running the latest version. 3CX will be replacing SSL certificates required for PBX activation on February 24, 2025. If you’re running an older version of 3CX, your system will continue to work. From 24 February 2025 onwards, it will not be possible to renew the license if you make changes. We suggest therefore that you update as s [...]
Upgrading to V20 should be scheduled as soon as possible. Debian 10 - upon which V18 for Linux is based - has reached end of life. This means no further security updates will be released by Debian. Quoting from their release “Starting in July, Debian will not provide further security updates for Debian 10. A subset of buster packages will be supported by external parties.” The [...]
Attention 3CX Version 20 (Debian 12 Bookworm) users. A critical vulnerability has been discovered in OpenSSH ("regreSSHion" - CVE-2024-6387). Although nothing to do with 3CX, we’re pleased to have been able to demonstrate our ability to release this update within 24 hours. To protect your 3CX System, please update immediately. How to Update Log in to your 3CX Admin Console. Go [...]
Affected SQL database templates are MsSQL, MySQL, PostgreSQL. On 15th December we informed customers to disable the SQL Database integration following CVE report 2023-49954 (https://cve-2023-49954.github.io/) This issue - identified by independent security researcher Theo Stein - concerned a legacy integration to query customer contact data directly from a SQL server database. [...]
3 major reasons and other common issues for your upgrade failing. So after releasing beta 1 of V20 and Update 9 we’ve already had quite a number of upgrades - enough to be statistically significant. And the results are interesting. These are the top reasons for an upgrade to not start: Number #1 - Insufficient cores - 2+ required The number one reason for an upgrade failure is [...]
Due to an error in our license certificate - the cause of which we are still discussing with our provider - we had to make an update to allow customers to activate or extend licenses. Unless you need to buy or activate a subscription today or tomorrow there is no need to update your system immediately.
We’re pleased to add another marketplace to our ever-growing list. You can now deploy your 3CX directly to your account from the Vultr marketplace: deploy V20 and deploy V18. This is the 5th marketplace where you’ll find 3CX listed - following on from our four earlier entries into the Google Cloud, Amazon AWS, Microsoft Azure and DigitalOcean marketplaces. With a number of cust [...]
Updated Security Debian Linux Packages for Update 7 and 8 The following debian security updates have been applied. These will be downloaded automatically to installs running Update 7 or Update 8. all debian-archive-keyring 2019.1+deb10u2 all distro-info-data 0.41+deb10u7 all libx11-data 2:1.6.7-1+deb10u3 all mariadb-common 1:10.3.39-0+deb10u1 all python-requests 2.21.0-1+deb10u [...]
One more in-road in the 7-step security action plan ‘EFTA’. Security is only as strong as its weakest link! Following the recent supply chain attack we recognise our alert handling plan needed significant improvement. So as promised in our 7 step security action plan ‘EFTA’ we’ve now drawn up new alert handling guidelines to be followed in the event of a security and / or antiv [...]
