Hyperglass flaws can become pre-auth RCE on exposed ISP installs
The note names no CVE, affected versions, or fix, and does not say any provider was compromised.
Stories per day · 30 days
2 RSS
Relatedrussia4beget2cloud2dreamhost2ftp2password-reset2webmail2autistici1cloud-breach1credentials1cvss1data-breach1data-destruction1data-theft1firstvds1gcp1gmo1hyperglass1
23 stories, newest first · one card per story
Stories tagged #hosting
Russian host Beget rebuilds after data-wiper attack on cloud
A week later, 60% of shared hosting and 40% of managed dedicated servers were restored; VPS file backups exist for about half of users.
Cyberattack destroys data at Beget cloud hosting provider
A cyberattack has wiped cloud data at Beget, one of Russia's largest hosting providers, disrupting hundreds of websites.
Beget suffers data wipe in cloud infrastructure attack
Attackers erased data on over 1,000 servers at Russian hosting provider Beget, disrupting websites and services.
DreamHost forces password resets after File Manager and webmail incident
The hoster expired affected email and FTP/SFTP passwords but has not confirmed unauthorized access or data theft.
1
DreamHost forces email and FTP password resets after unexplained incident
DreamHost has not named a cause or confirmed theft; File Manager was back by October 26 while resets stayed required.
1
Onamae Desktop Cloud hacked; malware on up to 26,739 servers
GMO shut down Desktop Cloud servers from 04:00 local time on October 21 and told customers to rotate stored secrets.
PHP schedules critical security release for October 21
Two flaws are each rated CVSS v4.0 9.2, but versions, fixes and CVE identifiers remain unpublished.
Zeabur to shut down after second breach exposes 321,810 accounts
Attackers used leaked plaintext internal credentials to read the production database and access shared clusters in nine regions.
1
FirstVDS says hackers stole customer data via a VMmanager 6 flaw
Malware mounted some customers' virtual disks read-only and copied passwords, credentials, configs and wallets without stopping the servers.
%2Fs3%2Fstatic.nrc.nl%2Fwp-content%2Fuploads%2F2026%2F10%2F14143445%2F141026ECO_2037464592_AI-1.jpg&w=828&q=75)
Amsterdam police confiscates server left-wing ISP A/I at American request
Amsterdam police seized an Autistici/Inventati server for the US after Washington sanctioned the Italian host.
2
Multiple cPanel & WHM Vulnerabilities Enable Root Code Execution and Admin Session Hijacking
cPanel patched a critical root command-execution flaw and two WHM stored XSS bugs across supported versions.
Hackers Exploit cPanel CVE-2026-41940 Auth Bypass to Deploy Mirai Malware
Attackers are exploiting CVE-2026-41940, a critical unauthenticated cPanel/WHM auth bypass, to compromise hosting servers and recruit them into Mirai botnets.
1
Hackers Abuse Critical cPanel Authentication Bypass to Compromise Hosting Servers
Attackers exploited critical cPanel CVE-2026-41940 on hosting servers, deploying Mirai variants and ransomware.
Acronis Plugin Vulnerability in cPanel and Plesk Exploited in the Wild
Acronis patched CVE-2026-87886 (CVSS 7.8), a local privilege escalation flaw in its cPanel and Plesk backup plugins, exploited in targeted attacks.
cPanel ConfigServer Security & Firewall Vulnerability Allows Remote Attacker to Execute Arbitrary Commands
CSF 14.00–16.29 (CVE-2026-65638) lets unauthenticated attackers execute arbitrary commands via the MESSENGER service on cPanel/WHM servers; version 16.30 fixes it.
2
New cPanel Vulnerability Allows Attacker to Gain Full Control of the Server
cPanel disclosed critical SQL injection CVE-2026-67401 in EmailTrack, letting authenticated users with mail privileges gain root code execution; patched builds available.
1
cPanel EmailTrack SQL Injection Flaw Lets Attackers Execute Code as Root
cPanel disclosed CVE-2026-67401, an authenticated SQL injection in EmailTrack that lets attackers write files and execute code as root.
1
BGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Access
Attackers used a BGP hijack to divert Softaculous traffic and push a malicious Virtualizor update granting root persistence on some hypervisors.
1
33-hour BGP hijack of Softaculous traffic prompts security scramble
Attackers hijacked BGP routes carrying Softaculous traffic for 33 hours, prompting the hosting software vendor to urge credential resets and malware checks.
2
WebPros security advisory (AV26-861)
Canada's Cyber Centre relayed a cPanel advisory for CVE-2026-65643, a domain parking vulnerability fixed in multiple cPanel/WHM releases; admins should update.
WebPros security advisory (AV26-854)
Canadian Centre for Cyber Security relayed a WebPros advisory covering Plesk vulnerabilities CVE-2026-65642 and CVE-2026-65647 with fixed versions released.
FlyWP Adds Proactive Vulnerability Protection with Patchstack
FlyWP integrated Patchstack into its managed WordPress hosting platform via a new FlySecurity Pro add-on for proactive vulnerability protection.