Category: Security

82 articles

Security
Four Tiers of OpenClaw Hosting. Three Have a Security Problem.
by Natalia Nowak · 28 Apr 2026 · 8 min read
OpenClaw has 138 documented security advisories and a market fractured into four tiers, ranging from $3.85 managed VPS to NVIDIA's NemoClaw enterprise stack and Cloudflare's ephemeral-container proof-of-concept.
Security
Vercel Confirmed Unauthorized Access to Its Internal Systems. A Threat Actor Is Offering the Stolen Data for $2 Million.
by Łukasz Nowak · 19 Apr 2026 · 5 min read
Vercel confirmed unauthorized access to its internal systems on April 19, 2026, while a threat actor claiming affiliation with ShinyHunters posted on BreachForums offering to sell the alleged dataset including GitHub tokens, NPM tokens, API keys, and source code for $2 million.
Security
Flippa Promoted the Plugin Portfolio Sale as a Success Story. It Was a Supply Chain Attack.
by Łukasz Nowak · 17 Apr 2026 · 6 min read
Flippa celebrated the six-figure sale of the Essential Plugin portfolio; eight months later the buyer activated a backdoor across 20,000+ WordPress sites using Googlebot cloaking and a C2 routed through an Ethereum smart contract.
Security
Turning Challenges into Revenue Opportunities: How PRO Hacked Site Repair Services Can Reduce Churn for Agencies and Web Hosts
by Akshay Kumar · 16 Apr 2026 · 6 min read
When a client's website gets compromised, the hosting provider's response in the next few hours determines whether that client is still a customer next month.
Other
Let’s Encrypt Changes Its Root Certificates on May 13. Client Auth Ends July 8
by Natalia Nowak · 15 Apr 2026 · 7 min read
Let's Encrypt replaces its root certificate hierarchy on May 13, closes client authentication support permanently on July 8, and hosting operators have less than four weeks to verify their renewal automation handles the transition.
Security
World Backup Day 2026: The Threat Model Has Changed. The Advice Has Not.
by Łukasz Nowak · 31 Mar 2026 · 7 min read
The 3-2-1 backup rule was designed for hardware failure and accidental deletion, not for an attacker who has your credentials and can authenticate to your backup console before triggering ransomware.
Security
European Commission Confirms AWS Account Breach: A Customer-Side Failure With EU Cloud Sovereignty Implications
by Łukasz Nowak · 30 Mar 2026 · 6 min read
The European Commission confirmed attackers accessed its AWS-hosted Europa.eu infrastructure and took data. AWS says its platform was not the issue, the customer account configuration was.
Security
AI Crawlers Are Eating Your Bandwidth: How Hosting Companies Are Fighting Back
by Łukasz Nowak · 20 Mar 2026 · 13 min read
As AI crawler traffic surges, hosting providers that give customers control are turning bot management into a competitive advantage.
Security
New Cybersecurity Laws Across Asia: What Hosting Providers Must Do to Stay Compliant in 2026
by Łukasz Nowak · 18 Mar 2026 · 8 min read
China's amended Cybersecurity Law, Hong Kong's first critical infrastructure statute, and Singapore's expanded compliance framework have all taken effect. For hosting businesses operating in the region, the compliance cost of inaction is now measured in millions.
Security
Ransomware, Source Code Leaks, and the SOC Outsourcing Wave: Asia’s Hosting Security Landscape in Early 2026
by Łukasz Nowak · 17 Mar 2026 · 5 min read
High-profile breaches in South Korea, a near-universal shift toward outsourced security operations in Vietnam, and an evolving ransomware threat profile are defining the security reality for Asian hosting providers this quarter.
🚀

Reach hosting professionals

Sponsor webhosting.today and get in front of hosting buyers, founders and engineers.

50k+monthly readers
765articles
Become a sponsor →
📬

Stay in the loop

Weekly digest of the best hosting news, reviews and industry moves.