Web Hosting News & Industry Updates

NameSilo Technologies reported its best financial year on record in 2025: revenue up 18.5% to $65.5M, EBITDA up 84%, zero debt, 6.26 million domains under management. The parent company is deploying cash flows into industrial robotics, not hosting adjacencies. That tells you something about where this business is headed.

CVE-2026-41940, the cPanel authentication bypass from April 28, was being exploited since February 23, operated as a zero-day for 64 days, and was added to CISA's Known Exploited Vulnerabilities list with 1.5 million internet-exposed instances counted by Rapid7.

Copy Fail (CVE-2026-31431) is a Linux kernel privilege escalation giving any unprivileged local user root access, affecting virtually all distributions since 2017, with shared hosting and multi-tenant environments at highest risk.

Matt Mullenweg called WordPress development "boring or mediocre crap," then overruled core committers to add Akismet to the WordPress 7.0 Connectors screen, weeks before the May 20 release.

The gap in hosting has never been infrastructure. It has been ownership - who is responsible for the full stack once a system goes live. Servebolt and Crowd Favorite are closing that gap together.

OpenAI's Azure exclusivity ended on April 27 as Microsoft and OpenAI restructured their partnership: Microsoft stops paying revenue share, retains its 27 percent equity stake, and Azure keeps first-launch rights, while OpenAI gains full multi-cloud distribution including AWS and Google Cloud. The restructuring directly resolves a legal conflict created by OpenAI's $38 billion AWS cloud contract and up to $50 billion Amazon investment, and removes the barrier that prevented enterprise customers from running OpenAI models outside Azure.

HostPapa acquired Hostwinds on April 29, adding self-owned data centers in Seattle and Amsterdam and a developer and reseller customer base to its portfolio, twelve days after acquiring Tailor Made Servers in Dallas.

cPanel disclosed a critical authentication bypass on April 28 affecting nearly all versions of cPanel and WHM, with active exploits confirmed in the wild before the patch was released, forcing hosting.com, Namecheap, KnownHost, HostPapa, and InMotion Hosting to take cPanel access offline globally.

South African ISP Axxess acquired Absolute Hosting as part of a deliberate 2026 strategy to grow hosting revenues, with founder Jade Benson remaining managing director and the company continuing to operate independently under its own brand.

Automattic launched Studio Code in public beta, a CLI agent built on Anthropic's Claude Sonnet 4.6 that builds, configures, and publishes WordPress sites from natural language commands, running on top of MCP write capabilities launched in March 2026.

The market for running OpenClaw splits cleanly into providers that have made it accessible and providers that have made it secure, and those are currently different products at different price points.

WordCamp Europe is where WordPress platform decisions get made in public before they reach the market. The 2026 edition runs June 4-6 in Kraków, two weeks after WordPress 7.0 ships. For hosting providers, being in the room matters more this year than most.

GatorClaw runs AI agents on a persistent VPS for SMBs. Bluehost's Sean Dundon answered ten written questions about governance, prompt injection, credential handling, and how the product compares to Hostinger, DigitalOcean, and OneClaw. Two gaps were acknowledged directly.

At Cloud Next '26 in Las Vegas, Google introduced eighth-generation TPUs, a 4x-bandwidth data center network, 10 TB/s storage, and a $750 million partner fund. Production results from Citadel Securities, Deutsche Telekom, and GE Appliances show what the platform delivers at scale. Here is what hosting providers and IT buyers need to know.

DE{CODE} 2026 brings together 7,500+ developers, agencies, and digital leaders on May 6 in two regional broadcasts. For hosting providers, the bot management session with Cloudflare, the ACF machine-readable content update, and the WordPress 7.0 preview are the most operationally relevant sessions. Registration is free and available separately for EMEA and the United States.

Your.Cloud's acquisition of Cloud Geeni is the Dutch MSP consolidator's fourth UK deal, adding an ISO 27001-certified managed service provider with a 16-year proprietary private cloud platform and a customer base spanning legal, manufacturing, and financial services. Cloud Geeni retains its brand, team, and management under Your.Cloud's decentralized model, which has become the group's primary tool for attracting owner-operated MSPs across Europe.

The WordPress 7.0 core team published its revised schedule with the development branch closed to 7.1 commits until 7.0 ships and all backports requiring sign-off from two core committers. For hosting providers, the PHP 7.4 minimum requirement is the immediate action item: any environment still running PHP 7.2 or 7.3 as a default will create friction for customers at upgrade time, and the May window is closing.

Cloudflare is already sending over one billion daily 402 responses to AI crawlers. Its April 2026 GoDaddy partnership gave 20 million hosting customers tools to block or charge bots. Now Cloudflare released a tool that scores sites in the other direction: how well they support AI agents. Scanning 200,000 top domains, only 4% declare AI preferences and fewer than 15 support machine-readable API standards. For hosting providers, the scoring criteria map directly onto platform configuration decisions by customer segment.

The Cloudflare Registrar API formalizes a shift that is already underway: AI agents checking availability, registering names, and configuring DNS without human sign-off. The API uses at-cost pricing, default WHOIS privacy, and account payment credentials. A registrar-as-a-service platform for hosting providers is planned for later in 2026. The governance questions around agent spend control and credential scope are not solved by default.

Ayaz Ahmed Khan of DigitalOcean explains how Cloudways Copilot reduces infrastructure troubleshooting from 30-40 minutes to 5-6 minutes, what the preview period taught the team, and where automated diagnosis still falls short.