#kvm — Web Hosting News
All web hosting articles tagged #kvm — 3 results.
✦ Featured
Other
Mullenweg Retook Automattic in 33 Hours. The Board That Put Him on Leave Is Gone.
Mullenweg's paid leave lasted 33 hours and 20 minutes. He is back as Automattic's chief executive, the directors who voted to sideline him have left, and a new board is in place. Fortune's reconstruction points to divisions over the WP Engine case, but no former director has explained the vote.
After More Than 60 Acquisitions, Your.Online Backs a Trust Services Company Built From Scratch
M&A #consolidation#hosting-ma
Your.Online, a Dutch group with more than 60 acquisitions since 2017, is backing a new trust business built from scratch rather than buying one. Invicta Trust Services focuses on qualified trust services under eIDAS and is led by Patrick Beckman Lapré, who joins from QuoVadis.
Linux Kernel Flaw PwnEscape Lets a Virtual Machine Read Its Host’s Memory. Upstream Fixes Are Out.
Security #cybersecurity#linux
PwnEscape, tracked as CVE-2026-99999, can let software inside a virtual machine read memory from the Linux host it runs on. It was demonstrated against Vercel's production sandboxes, and host takeover was shown on the researchers' own machines. Fixed kernels were released on October 15.
Instead of Doubling Its Servers, Hostinger Reworked Its CDN for Every Web Hosting Plan
Other #cdn#hostinger
Rather than double its server count, Hostinger reworked its CDN with ECDSA certificates, kernel TLS and smarter routing, cutting the computing it needs by up to half. The CDN is now included in all web hosting plans, and average response times fell from 965 to 714 milliseconds.
Articles tagged #kvm
1–3 of 3
Security
Vercel Paid $50,000 for a KVM Escape That Has No CVE and No Patch. Every VPS Host Is Waiting for the Write-Up.
Vercel paid $50,000 for a guest-to-host-root KVM escape found in its Firecracker sandbox. No CVE, kernel range or patch is public, and every VPS fleet runs KVM.
Security
Zapscape Breaks the Linux KVM Boundary. A Server Without a Single VM Can Still Be in Range.
Zapscape lets an attacker who controls a guest climb out and seize the Linux host as root. Wherever /dev/kvm is open to ordinary users, a plain shared-hosting box is in range too, because a local user can spin up their own guest. Exploit code is public; patched kernels are rolling out.
Security
Januscape and Bad Epoll: Two Linux Flaws That Let One Customer Take Over the Whole Server
Januscape (CVE-2026-53359) lets a guest VM escape to the host and take over co-tenants; Bad Epoll (CVE-2026-46242) lets any unprivileged user reach root with a near-perfect exploit. Both are patched upstream and in AlmaLinux, and for both the only fix is a new kernel and a reboot.