Author: Natalia Nowak

An unpatched Magento flaw has been exploited since September 4. The first known victim had a clean patch status, and the backdoor installs outside the web root.

cyber_Folks puts its M&A capacity above PLN 1 billion and says it will be concentrated in e-commerce. Its hosting arm earns a 51 percent adjusted margin.

WHMCS fixed an unauthenticated RCE and a 2CheckOut data disclosure flaw in 9.0.8 and 8.13.7. Installations on 8.0 through 8.12 have no patch and must upgrade.

NameHero's HeroicGuard filters mail before the mailbox provider sees it. One MX change, unlimited mailboxes per domain, from $2.96 a month.

Only 35 percent of All-in-One WP Migration installs run the 7.110 fix. About 3.2 million sites are on a vulnerable version as the exploit chain goes public.

In 35 of 115 national markets, at least one of the eight largest providers by our count is a parking service or a corporate registrar, not a hosting company.

Exploit attempts against the Elementor Pro file upload flaw began the day it was disclosed, and one firewall alone blocked over 190,000 of them.

BalticNOG chairman Paulius Judickas on the 220-attendee debut, why the event must not become a vendor showcase, and the hosting firms missing from the room.

High-severity fixes for All-in-One WP Migration and Gravity Forms shipped August 20. One changelog called it a text fix, the other used a stock phrase.

Five public hosting, cloud and domain companies trade between 8x and 40x EBITDA. The spread shows what buyers pay for: growth, cash conversion, stickiness.