Author: Natalia Nowak

Google's field data, broken out by host: Wix customers pass Core Web Vitals at 80%, HostGator's at 39%. A measured speed ranking for the industry.

A CVSS 10 flaw let attackers become Metabase admins without logging in. Cloud instances were patched by the vendor. Self-hosted ones were not.

GoDaddy averages 24 million domains per brand. team.blue averages 163,000. Two opposite ways to consolidate a hosting market, measured.

Cloudflare for Government reached FedRAMP High on the same public network that serves everyone else. The Class D label is ahead of FedRAMP's calendar.

Zapscape lets one tenant break out and take over the whole Linux server. A box running no VMs at all can still be in range.

Roundcube patched eleven flaws in 1.7.3 and 1.6.18. The notes carry no CVE numbers, and cPanel has not shipped the update yet.

Porkbun crossed 4 million domains under management. Its customer count grew twice as fast, which says more than the milestone does.

An AI model found the WordPress core flaw in ten hours for about $25. After 7.0.2 shipped, attacks started 90 minutes later. WordPress 7.0.3 is out.

Hostinger's default npm scanning flagged vulnerable dependencies on 10,000+ sites in weeks. Patchstack and Hostinger on what it catches and what it misses.

DENIC runs .de for about €1 per domain. PIR's backend costs 88 cents. Verisign's costs run $1.13. Wholesale prices: up to $11. The league table.