Tag: security

HostGator and Monarx recorded more than 51 million proactive security actions in Brazil between March and August 2026.

Six months after disclosure, a WooCommerce extension is still drawing blocked exploit attempts. The largest spike came on August 30.

The EU now requires software makers to report actively exploited flaws within 24 hours, and a GPL plugin with a paid tier counts as a product.

cPanel has patched CVE-2026-67401, a flaw rated 9.9 out of 10 that let an authenticated account with mail privileges run code as root.

Half of the non-developers surveyed had little or no coding experience before AI, and only a quarter of their employers have a formal policy.

An unpatched Magento flaw has been exploited since September 4. The first known victim had a clean patch status, and the backdoor installs outside the web root.

WHMCS fixed an unauthenticated RCE and a 2CheckOut data disclosure flaw in 9.0.8 and 8.13.7. Installations on 8.0 through 8.12 have no patch and must upgrade.

NameHero's HeroicGuard filters mail before the mailbox provider sees it. One MX change, unlimited mailboxes per domain, from $2.96 a month.

A cPanel customer able to add parked domains could gain root on the whole server. CVE-2026-65643 affects all supported versions; patches are out.

InMotion is deploying Monarx ThreatShield across its server fleet, moving attack blocking into the PHP engine itself.