Sorry ransomware exploits cPanel authentication bypass

Critical Authentication Bypass Vulnerability Discovered in cPanel & WHM (CVE-2026-41940)

watchTowr Labs reports on a critical authentication bypass vulnerability (CVE-2026-41940) in cPanel & WHM, a widely-used web hosting control

cPanel Issues Second Emergency Patch After Ransomware Attack Compromised 44,000 Servers

cPanel issued a second emergency security patch (TSR) on May 8, 2026, just ten days after a ransomware attack exploited CVE-2026-41940 to co

CISA Adds Actively Exploited LiteSpeed cPanel Privilege Escalation Vulnerability to KEV Catalog

CISA has added one new vulnerability (CVE-2026-48172) to its Known Exploited Vulnerabilities (KEV) Catalog. The vulnerability affects the Li

Critical cPanel vulnerability under active attack allows full server hijacking

Security researchers have discovered a critical vulnerability in cPanel and WebHost Manager (WHM), widely used web server management softwar

WAF - WAF Release - 2026-04-30 - Emergency

Ransomware gang apologizes after accidentally infecting CIS-based oilfield company

A ransomware affiliate program called Nova (linked to the RAlord crew) accidentally infected Eriell Group, an oilfield services company base