This is a complex procedure that’s best left to Magento, as security patches will be part of their regular updates. However, if your Magento website is no longer supported, you will need to install a website application firewall (WAF). This provides virtual patching, giving you extra time to find a fully supported CMS.