Mittwald says MCP flaw let an attacker hit 56 customer projects
The German host says the intruder was undetected for eight days; AI use is inferred from log speed only.
Stories per day · 30 days
2 RSS
Relateddreamhost4email3ftp3password-reset2ai-impact1cpguard1credential-reset1databreach1germany1layoffs1mcp1mittwald1mstudio1opsshield1squarespace1supply-chain1
9 stories, newest first · one card per story
Stories tagged #web-hosting
DreamHost confirms customer data theft in months-long attack
Hackers stole emails, credentials and session tokens from DreamHost customers via file manager vulnerability; attack started in August.
1
cPGuard Update Compromised Hitting Thousands of Servers
Attacker pushed malicious cPGuard updates to nearly 3,000 Linux web servers, exfiltrating password hashes and customer data while OPSShield released a clean fix.
1
Web host Squarespace lays off 19% of its employees
Squarespace is reducing its global workforce by approximately 19%, or around 300 employees, to simplify operations and position for growth.
1
DreamHost resets some email and FTP passwords after systems issue
File Manager was taken offline and later restored; DreamHost has not stated a cause or how many users were affected.
DreamHost resets some email and FTP passwords after service incident
File Manager is back, but DreamHost still has not named a cause or how many accounts needed resets.
1
DreamHost forces email and FTP password resets in ongoing incident
File Manager access is still down, and users cannot log in until account owners set new credentials.
New cPanel Flaw Lets a Hosting Account With Mail Privileges Run Code as Root
cPanel patched CVE-2026-67401, an SQL injection in EmailTrack letting an account with mail privileges run code as root on the server.
2
Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server
cPanel patched critical flaw CVE-2026-65643 letting authenticated hosting customers with addon or parked domain rights execute code as root and fully compromise servers.