Gold sponsors
Fastest growing markets
30d
1 🇮🇷 Iran +11%
2 🇮🇩 Indonesia +10.3%
3 🇨🇨 Cocos (Keeling) Islands +8.4%
4 🇨🇳 China +7.2%
5 🇱🇻 Latvia +6.3%
6 🇳🇬 Nigeria +5.9%
7 🇪🇪 Estonia +4.9%
8 🇨🇴 Colombia +4.5%
9 🇲🇾 Malaysia +4.4%
10 🇸🇮 Slovenia +4.3%
Market moves last 30 days
1dnsimple.com+124.3%
2webnic.cc+51.4%
1ns.de−7.9%
3strato.de+0.7%
4wix.com+1.1%
5ionos.com+1.5%
Industry buzz live
Backed by hosting's best
Their support keeps us independent so we can help the hosting industry stay a step ahead through honest, no-BS coverage.
BECOME A SPONSOR →
Latest news
See all news →
Security
Cloudflare Reached FedRAMP High Without Building a Separate Government Cloud
by Natalia Nowak · 11 Aug 2026
Cloudflare reached FedRAMP High without a separate gov cloud: one network, U.S.-only processing, 22 agencies on board. One catch: it brands the milestone Class D, a certification FedRAMP's roadmap only pilots next fiscal year. The Pentagon's IL4 is the next target.
Security
Zapscape Breaks the Linux KVM Boundary. A Server Without a Single VM Can Still Be in Range.
by Natalia Nowak · 10 Aug 2026
Zapscape lets an attacker who controls a guest climb out and seize the Linux host as root. Wherever /dev/kvm is open to ordinary users, a plain shared-hosting box is in range too, because a local user can spin up their own guest. Exploit code is public; patched kernels are rolling out.
Security
Roundcube Shipped Eleven Security Fixes Without a Single CVE Number
by Natalia Nowak · 10 Aug 2026
Roundcube shipped eleven security fixes across its current and LTS branches, including an IMAP command injection and a conditional code execution flaw. The notes name no CVE identifiers, so version-matching scanners stay quiet, and cPanel has historically taken five to nine days to follow.
Industry reports
Porkbun Passed 4 Million Domains. The More Interesting Number Is 750,000.
by Natalia Nowak · 7 Aug 2026
Porkbun announced its fourth million domains under management, reached in nine months by the company's own count. The number underneath it matters more: 750,000 customers, up from 450,000 at the last milestone, meaning the registrar is adding people faster than it is adding domains.
Security
An AI Model Found the WordPress Flaw in Ten Hours for $25. Attackers Weaponized the Patch in Ninety Minutes.
by Natalia Nowak · 7 Aug 2026
WordPress shipped its second security release in three weeks. Around the first one, both ends of the vulnerability lifecycle collapsed: an AI model found the critical chain in 10 hours for about $25, and exploitation began 90 minutes after the patch shipped. Hosting companies own the gap in between.
Interviews
10,000 Sites Flagged in Weeks: Patchstack and Hostinger on npm Scanning by Default
by Natalia Nowak · 6 Aug 2026
A month after Hostinger enabled Patchstack's npm scanning by default, the first numbers are in: vulnerable dependencies on more than 10,000 sites. In a dual Q&A, both companies talk auto-fixes, the limits of scanning, and whether hosts will patch dependencies for everyone.
Browse the full archive
657 articles, filterable by category & tag
View all news →
Konrad Keck
Łukasz Gawior
Hosting M&A Desk with Konrad & Łukasz · M&A advisors
Hosting M&A Desk
Sell or acquire a hosting company with expert guidance. We connect sellers with 250+ verified buyers worldwide. Private deals, real valuations, and full support – from strategy to closing.
250+Verified buyers
100%Private & discreet
Check more
Stay ahead of the hosting industry

Be where 1,000+ hosting pros already are. News, M&A, market moves, security alerts — weekly, no bull.