Web Hosting News & Industry Updates
Breaking news, M&A deals, pricing moves, security alerts and in-depth analysis for the web hosting industry — 812 articles across 14 categories.
✦ Featured
Software reviews
A Vercel for Africa? HOSTAFRICA’s HCode Runs in South Africa
HOSTAFRICA launched HCode on November 5 as its answer to platforms like Vercel, with prices in local currencies across six African countries. The apps run in South Africa. HCode, a rebranded version of the Zanode platform HOSTAFRICA bought in May, starts at R50, or about $3, a month.
Monarx Reviewed 65 Hosts: 10 of 12 Large Hosting Brands Sell Website Security Add-Ons
Partners #cybersecurity#monarx
Monarx's review of 65 hosting providers finds 37 including advanced website protection at no extra cost, 31 selling a separate security product and 18 doing both. Mass-market brands lean toward add-ons, while managed WordPress hosts mostly build protection into the plan.
Who Owns Europe’s Largest Hosting Markets: IONOS Controls the Leader in Germany, Poland and Spain
Industry reports #domains#europe
The four largest Swiss-owned hosts hold 39.8% of .ch domains, while the UK has one British-owned operator among its eight largest. We matched the leading operators in Europe's eight largest domain markets with their owners, and IONOS owns the leader in three of them.
DreamHost Confirms File Manager Breach. FTP/SFTP and Some Webmail Credentials Were Exposed
Security #cybersecurity#dreamhost
A security breach prompted DreamHost's October 23 File Manager shutdown and password resets. An attacker exploited third-party software behind the tool and could access FTP/SFTP credentials of users who signed in, plus some webmail logins. Well under 10% of email and FTP/SFTP accounts were affected.
All articles
281–300 of 812
M&A
CyberFolks and Shoper Agree to Merge Into a Single Listed Entity Valued at €1 Billion
CyberFolks will absorb Shoper through a share exchange at 0.2281 CyberFolks shares per Shoper share, forming a single Warsaw-listed entity valued at €1 billion. The merged group holds Shoper, PrestaShop, MailerLite, and Sylius, covering most of the e-commerce stack across Europe.
Other
AWS Connected Its Network to Google Cloud With No Egress Fees. Azure and Oracle Are Next.
AWS Interconnect multicloud eliminates per-gigabyte transfer fees between AWS and Google Cloud VPCs in favor of flat bandwidth pricing. Azure and Oracle are next. The launch removes the cloud-to-cloud brokerage role that drove Megaport and Equinix Fabric growth.
M&A
OpusDNS Acquires fruits.co, Adding Domain Monetization to Its Wholesale Registrar Platform
OpusDNS acquired fruits.co, combining wholesale domain registration with EU-VAT-compliant aftermarket sales. Built by Hexonet and InterNetX veterans, OpusDNS positions against legacy registrar infrastructure with a 12-month integration roadmap that will test the consolidation thesis.
Other
20 Years of hosting.de: Aachen-Based Hosting Provider Celebrates Anniversary with New Brand Identity
Founded in 2006 as TwooIT GmbH, hosting.de marks its 20th anniversary with a refreshed brand identity. The Aachen-based provider unveils a new logo and visual design system across its product interfaces, reinforcing its commitment to German-hosted services.
Industry reports
Verisign Starts a Four-Year .com Price Cycle. The First 7% Hits in November.
Verisign's 7% .com wholesale price increase from November 2026 is the opening move of a four-year pricing cycle. If exercised in full, wholesale .com pricing would reach $13.45 by 2029, with cost pressure flowing through every registrar and hosting provider in the chain.
Interviews
The Old Way to Sell Security in Hosting Just Broke – Oliver Sild, CEO of Patchstack
At Hosts Del Mar, Oliver Sild, CEO of Patchstack, explains why the twenty-year-old hosting security model of selling cleanups after the breach no longer works, why hackers got frontier AI first, and why proactive vulnerability protection has changed the math for hosts.
Software reviews
WordPress 7.0 Ships. PHP 7.4 Required. AI Built In. Real-Time Collaboration Delayed.
WordPress 7.0 ships May 20, 2026 with a built-in AI Client supporting Anthropic, Google, and OpenAI, a raised PHP minimum of 7.4, and DataViews replacing the admin screens. Real-time collaboration was cut on May 8 due to race conditions, server load, and fuzz testing failures.
Other
Google Cloud Incorrectly Suspended Railway’s Account. Eight Hours Down.
Google Cloud incorrectly suspended Railway's account on May 19, 2026, taking it offline for eight hours. AWS and Railway Metal workloads ran throughout but were unreachable: Railway's edge proxies relied on a GCP-hosted control plane API for routing, and when it failed, everything returned 404.
Industry reports
Plesk Obsidian 18.0.77 Ships. Pricing Up 26 Percent. AI Copilot Extension Coming.
Plesk Obsidian 18.0.77 addresses European accessibility compliance, removes the APS Catalog, and expands TuxCare legacy PHP support. It lands four months into the 26 percent licensing price increase, with an AI Copilot extension announced for 2026 but not yet shipped.
Industry reports
How Web Hosts Can Compete in a Saturated Market with Bundled WordPress Support Services?
The hosting market is saturated and price wars are eroding margins. Discover how bundling WordPress support services helps providers build deeper customer relationships and compete on value, not cost.
Software reviews
AdminBolt Ships a Dashboard AI Assistant and WhatsApp Hosting Controls
AdminBolt is currently the only self-hosted control panel to ship a working in-panel AI assistant, with WhatsApp as a mobile extension.
Interviews
Vibe Coding Rebuilt Our Entire Stack – Munir, Founder of aeServer.com
Munir, Founder of aeServer.com, on using vibe coding to automate domain registrations and rebuild their customer-facing stack, the new wave of online businesses in the Middle East, and whether Domain Days Dubai is happening this October.
Industry reports
More Revenue. Less Profit. What iomart’s FY2026 Reveals About Mid-Market Hosting.
iomart closed FY2026 with a profit warning, a CFO departure, and a credit facility expiring in June 2027. Its H1 numbers (revenue up 25%, EBITDA down 24%, net debt at £109.6m) make visible a squeeze that Rackspace, OVHcloud, and UKCloud have each encountered in their own way.
Security
FunnelKit Plugin Flaw Actively Exploited to Skim Credit Cards From WooCommerce Checkout Pages
Every customer who checked out on a WooCommerce store running an unpatched FunnelKit plugin may have had their card number, CVV, and billing address stolen. The attack is active across more than 40,000 sites. Patch to version 3.15.0.3, released May 14, 2026, and assess breach notification obligations.
Security
A Ransomware Group’s Backend Was Leaked Because Their Hosting Provider Got Hacked First.
On May 2, hosting provider 4VPS disclosed a breach of its billing systems. Two days later, The Gentlemen ransomware group's backend appeared for sale online. Check Point Research confirmed the dataset included victim lists, ransom negotiations, and internal communications from one of 2026's most active ransomware operations.
Security
Skynethosting Took Its Entire cPanel Fleet Offline on May 1. Two Weeks Later, Some Are Still Down.
Skynethosting took its entire cPanel fleet offline on May 1 in response to CVE-2026-41940, and as of May 14 some customer servers had been down for nearly two weeks, with one reseller publicly reporting a 30 percent client loss during the outage.
M&A
your.online Acquires Sansec, Adding E-Commerce Security to a 60-Acquisition Group
your.online has acquired Sansec, a Magento and WooCommerce security company, marking the Dutch hosting group's first move into specialist e-commerce security tooling.
Security
Fragnesia: A New Linux Kernel Privilege Escalation That Emerged From Prior Kernel Patches
William Bowling of V12 Security disclosed Fragnesia on May 13, 2026, a Linux kernel privilege escalation that allows an unprivileged local attacker to reach root by corrupting the kernel page cache through the XFRM ESP-in-TCP subsystem.
Interviews
More Malware in Q1 Than All of Last Year – Patrick, CRO of Monarx
At Hosts Del Mar, Patrick, CRO of Monarx, explains why malware volume is growing 10x year over year, why traditional signature-based detection is losing ground, and how competing hosts are sharing threat intelligence with each other despite being direct competitors.
Security
Nginx Just Patched old Rewrite Module Flaw. RCE Was Possible With a Single HTTP Request.
A flaw sitting in nginx since 2008 was patched on May 13, 2026. CVSS 9.2, unauthenticated, and present in the default rewrite module.