Author: Natalia Nowak
263 articles
Exploring the web hosting industry through writing - panels, providers, and everything that runs behind the scenes.
Security
Roundcube’s Zero-Click Webmail XSS, and How Fast It Reached cPanel
Roundcube's zero-click webmail XSS (CVSS 7.2) was patched July 5 and shipped in cPanel 134.0.45 on July 14. Here is what shared hosts should check.
Security
A US Sanction, a Montenegrin Domain, and Why Every t.me Link Went Dark
Every t.me link broke worldwide after the .me registry suspended Telegram's domain, a takedown whose trail leads to a US sanction and an American-run ccTLD.
M&A
The Balance Sheet Behind Your Renewal Invoice: Who Owns the Hosting Industry, and What It Owes
We mapped the hosting industry's owners and debt against our renewal-price index: the operators machines cannot price are the ones with liens on the renewal premium.
Industry reports
UK Financial Regulators Now Oversee AWS, Google, Microsoft and Oracle
From July 13, the Bank of England, PRA and FCA jointly oversee AWS, Google Cloud, Microsoft and Oracle as critical third parties to UK finance.
Industry reports
The Free Tier Isn’t Dying Loudly. It’s Being Repriced Quietly. And the Developer Pipeline Goes With It.
No platform announced the end of free hosting. They repriced the units instead. The developer on-ramp, PaaS's CAC engine, is quietly closing.
Security
Three Unauthenticated File Flaws in a Week, and One Root Cause: Validation by Shortcut
In one July week, three unauthenticated file-handling flaws surfaced across WordPress plugins and a web FTP client, all rooted in validation by shortcut.
Software reviews
Extendify Launches Code, a White-Label Vibe-Coding Platform for Hosts
Extendify launched Code, a white-label agentic AI app builder hosts can resell via WHMCS, turning vibe coding into a shelf product for the hosting industry.
Industry reports
Which Top-Level Domains Are Worth Carrying? The Abuse Data Most Registrars Never Book.
In some cheap new gTLDs nearly the whole zone turns over in months, and Spamhaus has the data on which extensions carry the heaviest hidden abuse cost.
Industry reports
DigitalOcean Lands Nine-Figure AI Deals as Its Backlog Jumps Tenfold
DigitalOcean's preliminary Q2 shows nine-figure AI-inference deals and a backlog past $800M, up tenfold, as the developer cloud moves into AI infrastructure.
Security
Hostinger Turns On Patchstack npm Scanning for Node.js Apps by Default
Hostinger built Patchstack's npm dependency scanning into its Node.js hosting, on by default, targeting the supply-chain risk of fast-shipped, AI-assisted apps.
Reach hosting professionals
Sponsor webhosting.today and get in front of hosting buyers, founders and engineers.
50k+monthly readers
800articles