News for hackers. Stuff that matters.
Re:Hackers are actively exploiting a bug in cPanel and WHM by sikozu on Thursday April 30, 2026 @08:14PM (#47969978)
There must be so many (small) shared hosting companies that don't update their software, those poor customers.
[ Parent | on HN ]
Re:Hackers are actively exploiting a bug in cPanel and WHM by dspillett on Thursday April 30, 2026 @07:35PM (#47969713)
With this (CVE-2026-41940) and copy.fail (CVE-2026-3143), it must be an exciting time in the shared hosting business right now… Glad I've been out of it for a long time.
[ Parent | on HN ]
Re:Hackers are actively exploiting a bug in cPanel and WHM by ChrisArchitect on Thursday April 30, 2026 @09:41PM (#47970462)
A full breakdown of the vulnerability: https://labs.watchtowr.com/the-internet-is-falling-down-fall...
[ Parent | on HN ]
Re:Hackers are actively exploiting a bug in cPanel and WHM by sikozu on Thursday April 30, 2026 @10:40PM (#47970778)
Thanks for sharing, this is a great read!
[ Parent | on HN ]
Re:Hackers are actively exploiting a bug in cPanel and WHM by aitchnyu on Friday May 01, 2026 @05:16AM (#47972690)
Which are the safest control panels^ ? Been thinking about Hostineer which developed and dogfooded ApisCP over 20 years.

[^] a product made for commercial operators stuffing thousands of PHP sites into a server, so no Coolify, Google Cloud Run.

[ Parent | on HN ]
Re:Hackers are actively exploiting a bug in cPanel and WHM by jmclnx on Friday May 01, 2026 @11:52AM (#47976226)
Luckily my site uses Plesk after moving away from cPanel years ago.

I have to wonder if this issue is due to never reviewing auto-test scripts ?

I know where I worked, testing is now an afterthought and half the time testing means no issues compiling and deploying :)

We had a separate testing group and they caught lots of issues. But due to Agile, they were all fired years ago.

[ Parent | on HN ]
Re:Hackers are actively exploiting a bug in cPanel and WHM by cestith on Friday May 01, 2026 @02:41PM (#47978415)
Plesk is a separate team owned by the same parent company.
[ Parent | on HN ]