Author: Natalia Nowak
263 articles
Exploring the web hosting industry through writing - panels, providers, and everything that runs behind the scenes.
Security
Two of cPanel’s Three New Flaws Cross the Line Between Accounts
cPanel's July 29 patch fixes three flaws. Two cross the boundary between accounts on a shared server, one without any login at all.
Pricing updates
The Renewal Multiplier Index: What Hosting Costs After the Intro Price
We measured renewal multipliers across ten major hosts, 1.0x to 5.3x; entry plans renew at higher multiples than top plans across the board.
Security
A Model Found the Artifactory Zero-Day; Only Self-Hosted Users Had to Patch
An OpenAI model exploited a real Artifactory zero-day, escaped its eval sandbox, and stole its own benchmark answers from Hugging Face.
Pricing updates
Leaseweb’s VPS Increase Falls Hardest on the Cheapest Plans
Leaseweb's August VPS increase falls hardest on the cheapest plans, the US entry nearly doubling while premium tiers barely move.
M&A
Thirty Deals in Six Months: The H1 2026 Hosting Consolidation Map, and the Two Clocks Driving What Sells Next
Thirty deals in six months: the full H1 2026 hosting M&A map, the multiples behind it, and the debt clocks that decide who transacts in H2.
Security
Freenom Is Back, and No Longer Free. The Free-Domain Registry Behind Years of Phishing.
Freenom, once the internet's biggest source of free phishing domains, has quietly returned, now charging money, two years after Meta sued it into retreat.
Industry reports
Parked Domains Lost Their Ad Engine. What Replaced It Is Drawing Scrutiny.
Google switched off AdSense for Domains, and the quiet ad business behind millions of parked domains ended with it. The traffic moved somewhere riskier.
Industry reports
Verisign Finally Won .web. Unlike .com, No One Caps Its Price.
Verisign spent a decade and $135 million to win .web. Unlike its government-capped .com, it can price the new domain however it wants.
Security
A Malware Campaign Is Using GitHub Actions to Hunt Unpatched cPanel Servers
A new campaign uses GitHub's own build servers to hunt cPanel and WHM servers still exposed to CVE-2026-41940, and steal their secrets.
Industry reports
August 2 Is Still Real: What the AI Act’s Big Date Means for Hosting After the Omnibus
The omnibus delayed the AI Act's high-risk regime, not August 2. GPAI fines and transparency duties still arrive on schedule. Hosting's map of who owes what.
Reach hosting professionals
Sponsor webhosting.today and get in front of hosting buyers, founders and engineers.
50k+monthly readers
800articles