cPanel Had an Authentication Bypass. Exploits Were Already in the Wild.

cPanel disclosed a critical authentication bypass on April 28 affecting nearly all versions of cPanel and WHM, with active exploits confirmed in the wild before the patch was released, forcing hosting.com, Namecheap, KnownHost, HostPapa, and InMotion Hosting to take cPanel access offline globally.

Four Tiers of OpenClaw Hosting. Three Have a Security Problem.

OpenClaw has 138 documented security advisories and a market fractured into four tiers, ranging from $3.85 managed VPS to NVIDIA's NemoClaw enterprise stack and Cloudflare's ephemeral-container proof-of-concept.

Flippa Promoted the Plugin Portfolio Sale as a Success Story. It Was a Supply Chain Attack.

Flippa celebrated the six-figure sale of the Essential Plugin portfolio; eight months later the buyer activated a backdoor across 20,000+ WordPress sites using Googlebot cloaking and a C2 routed through an Ethereum smart contract.

Turning Challenges into Revenue Opportunities: How PRO Hacked Site Repair Services Can Reduce Churn for Agencies and Web Hosts

When a client's website gets compromised, the hosting provider's response in the next few hours determines whether that client is still a customer next month.

Let’s Encrypt Changes Its Root Certificates on May 13. Client Auth Ends July 8

Let's Encrypt replaces its root certificate hierarchy on May 13, closes client authentication support permanently on July 8, and hosting operators have less than four weeks to verify their renewal automation handles the transition.

World Backup Day 2026: The Threat Model Has Changed. The Advice Has Not.

The 3-2-1 backup rule was designed for hardware failure and accidental deletion, not for an attacker who has your credentials and can authenticate to your backup console before triggering ransomware.

European Commission Confirms AWS Account Breach: A Customer-Side Failure With EU Cloud Sovereignty Implications

The European Commission confirmed attackers accessed its AWS-hosted Europa.eu infrastructure and took data. AWS says its platform was not the issue, the customer account configuration was.

How to Sell Security in Hosting (Without Scaring Your Customers)

There’s a moment in the hosting sales flow where everything can quietly fall apart. The customer has picked a plan, they’re ready to buy, and...

Is the hosting industry stuck in the past? The problem of legacy security

The hosting industry has gone through a major transformation in recent years. Infrastructure is faster, tools are more mature, and automation keeps improving. AI is also starting to reshape how services are built and managed.

New Cybersecurity Laws Across Asia: What Hosting Providers Must Do to Stay Compliant in 2026

China's amended Cybersecurity Law, Hong Kong's first critical infrastructure statute, and Singapore's expanded compliance framework have all taken effect. For hosting businesses operating in the region, the compliance cost of inaction is now measured in millions.