#web-hosting — Web Hosting News
All web hosting articles tagged #web-hosting — 136 results.
✦ Featured
Other
Automattic Is Not an Owner of the WordPress Marks It Asserted in Court, a Judge Rules
The September 24 order brings back four antitrust claims the same judge had dismissed in an earlier ruling. It also holds that Automattic and Mullenweg are neither owners nor registrants of the WordPress marks, so they cannot assert them in their own right.
Automattic Is Not an Owner of the WordPress Marks It Asserted in Court, a Judge Rules
Other #automattic#web-hosting
The September 24 order brings back four antitrust claims the same judge had dismissed in an earlier ruling. It also holds that Automattic and Mullenweg are neither owners nor registrants of the WordPress marks, so they cannot assert them in their own right.
We Ranked Hosting Two Ways. We Resolved 108 GoDaddy Domains: 96 Point at Amazon.
Industry reports #domains#godaddy
Ranked by domains on their nameservers, GoDaddy leads with 73.1 million. Ranked by hosting attribution it falls to 3.5 million, but that column records whose address space a site is served from. We resolved a sample of GoDaddy's domains: 89% land in blocks registered to Amazon.
IONOS Is Cutting 12% of Its Workforce Five Weeks After Raising Its Revenue Outlook.
Stock reports #ai#cloud
IONOS will reduce headcount from about 3,800 to about 3,350, spending around EUR 35 million once to save up to EUR 30 million a year from 2027. IONOS says the savings will be reinvested, including in AI product development and cloud, and its 2026 adjusted EBITDA forecast is unchanged.
Articles tagged #web-hosting
1–20 of 136
Security
The WordPress 7.1.2 Flaw Was Exploited in Hours. Theme and Host Decide the Damage.
Attackers were writing PHP files through pearcmd.php by the evening of the day WordPress 7.1.2 shipped, and whether a site is reachable at all depends on its theme layout and on register_argc_argv, which is on by default under cPanel below PHP 8.5.
Other
Automattic Is Not an Owner of the WordPress Marks It Asserted in Court, a Judge Rules
The September 24 order brings back four antitrust claims the same judge had dismissed in an earlier ruling. It also holds that Automattic and Mullenweg are neither owners nor registrants of the WordPress marks, so they cannot assert them in their own right.
Other
Dasabo Gave Customers Ten Days to Upload an ID. Refusal Means Termination and No Refund.
A VPS provider gave customers ten days to upload an ID and a live photo or lose their services, with no refund under clause 14.1 of its terms. Dasabo puts the demand only on flagged accounts. Customers on two forums and Trustpilot describe it reaching people who had only paid.
Software reviews
cPanel AI Is Generally Available. Meridian Is in the License. Nova Runs on Credits Nobody Has Priced.
cPanel declared cPanel AI generally available on September 17. Meridian, the AI Assistant, AI App Hosting and MCP sit inside the ordinary license, while Nova is partner-only and metered in AI credits whose wholesale price neither cPanel nor WebPros has published.
Security
cPanel Patches a Root Escalation That Starts From an Ordinary Hosting Account
cPanel patched a privilege escalation running from an ordinary hosting account to root, plus a WP Toolkit flaw reaching other accounts' databases. Three builds shipped September 22, no severity score is published, and one researcher is credited on four root-level flaws across cPanel and Plesk.
Industry reports
ICANN Confirms 1,616 gTLD Applications Proceed. Reveal Day Expected by October 14.
ICANN's September 22 count puts the 2026 gTLD round at 1,616 paid applications out of 1,663, smaller than 2012's 1,930. Reveal Day is due by October 14, the schedule promised for mid-September is now promised for the week of September 28, and contention will be settled without private auctions.
Software reviews
Ask nginx Which Config It Is Running. Not Every Build Will Answer.
nginx can now be asked which configuration it is actually running, a question that had no answer before 1.31.5, and a reload now returns an HTTP status code with the logs attached. The Control API came out of the paid NGINX Plus release, and it ships with no authentication of its own.
Security
A Critical libheif Bug Reachable Through WordPress Uploads Still Has No CVE
A researcher uploaded a crafted photo to a clean WordPress site and left a working PHP file on the server. The flaw is in libheif, a system library that arrives with the operating system, and twenty days after the fix shipped it still has no CVE number for patch pipelines to match.
Security
Three LiteSpeed Security Builds in Six Days: Check Which One Your Servers Run
A cPanel advisory of September 14 covers a LiteSpeed Enterprise flaw that lets a hosting account past CageFS to root. LiteSpeed has since shipped 6.3.7 three times in six days, each build with a security change, and a server patched on the day of the advisory is no longer on the latest one.
Security
Acronis cPanel Backup Plugin: Exploited Privilege-Escalation Flaw on CISA’s List
Acronis has patched CVE-2026-87886 in its backup plugin for cPanel and WHM and says it has been used in limited, targeted attacks, based on one customer report. CISA added it to its Known Exploited Vulnerabilities catalog on September 16 with a three-day deadline for US federal civilian agencies.
M&A
Before the Press Release: What We See in Hosting M&A
Many owners who ask what their hosting business is worth have not decided to sell. Beyond the thirty deals announced in the first half of 2026 sit owners testing valuations, buyers with precise criteria, and conversations that run for months before anything becomes public.
Other
Elementor Opens an MCP Beta to Claude, Codex and Cursor
Elementor, on more than ten million sites, has opened a beta letting Claude, Codex, Cursor and other MCP tools build pages as native Elementor structures. It runs on atomic pages, output stays a draft, and three of the nine capabilities need a second Elementor plugin.
Industry reports
We Ranked Hosting Two Ways. We Resolved 108 GoDaddy Domains: 96 Point at Amazon.
Ranked by domains on their nameservers, GoDaddy leads with 73.1 million. Ranked by hosting attribution it falls to 3.5 million, but that column records whose address space a site is served from. We resolved a sample of GoDaddy's domains: 89% land in blocks registered to Amazon.
Partners
Why Unfinished Websites Are Costing Hosting Companies More Than They Think
An agency founder spent eighteen years being paid to finish websites for people who had already bought hosting elsewhere. He argues that customer was the host's first, that the loss rarely looks like a loss, and that support tickets are full of requests hosts currently turn away.
Stock reports
IONOS Is Cutting 12% of Its Workforce Five Weeks After Raising Its Revenue Outlook.
IONOS will reduce headcount from about 3,800 to about 3,350, spending around EUR 35 million once to save up to EUR 30 million a year from 2027. IONOS says the savings will be reinvested, including in AI product development and cloud, and its 2026 adjusted EBITDA forecast is unchanged.
Other
group.one’s Ask Aida Completed 95% of Tasks in Customer Testing. Three Areas Still Required Human Support.
In initial customer testing, Ask Aida completed 95% of tasks. Authentication, some external invoicing and abuse cases still required human support.
Other
Cloudflare Changes Its Crawler Defaults on September 15. Sites Blocking AI Training Will Start Blocking Googlebot.
Cloudflare changes its AI crawler defaults on September 15. Crawlers that do more than one job will be judged by all of their behaviors, so sites that already block AI training will start blocking Googlebot. The new ad-page defaults reach every free-plan site left untouched.
Partners
Monarx Launches Dark Web Monitoring. One Domain Covers Every Address on It.
Monarx Dark Web Monitoring begins with a domain rather than a list of mailboxes, sells white-label at a suggested $1.99 to $9.99 a month on a 50/50 revenue share, and today shows customers which categories of their data were breached rather than the data itself.
Other
Aruba Applied for 39 TLD Strings. The Private Auction That Won It .cloud Is Now Banned.
Aruba, the Italian host that runs .cloud, told Domain Name Wire it applied for 39 strings in ICANN's 2026 round, among them vps, demo and pec. It won .cloud in a private auction, the route the new rules ban, which leaves an ICANN auction or a free switch to a fallback.
Security
A cPanel Account With Mail Privileges Could Reach Root. Every Supported Version Was Affected.
cPanel has patched CVE-2026-67401. An authenticated account with mail-related privileges could create files through EmailTrack and reach code execution as root. All supported versions were affected, and the CVE record scores the flaw 9.9 out of 10, critical.