Author: Natalia Nowak

A critical VMware flaw may let a guest VM run code on the ESX host, and Broadcom ships no workaround for it.

cPanel's per-account pricing keeps rising, and a real field of alternatives has grown around it, from hosts running their own panel to free independents.

ICANN says Web3 naming can enter the DNS root, under a strict same-name, same-owner rule. ENS incorporated and is chasing .ens rather than .eth.

WordPress 7.0.4 fixes a flaw where an image hiding PostScript runs code on the server. It needs an author account, and multi-author sites should hurry.

Google's field data, broken out by host: Wix customers pass Core Web Vitals at 80%, HostGator's at 39%. A measured speed ranking for the industry.

A CVSS 10 flaw let attackers become Metabase admins without logging in. Cloud instances were patched by the vendor. Self-hosted ones were not.

GoDaddy averages 24 million domains per brand. team.blue averages 163,000. Two opposite ways to consolidate a hosting market, measured.

Cloudflare for Government reached FedRAMP High on the same public network that serves everyone else. The Class D label is ahead of FedRAMP's calendar.

Zapscape lets one tenant break out and take over the whole Linux server. A box running no VMs at all can still be in range.

Roundcube patched eleven flaws in 1.7.3 and 1.6.18. The notes carry no CVE numbers, and cPanel has not shipped the update yet.