Independent reporting on web hosting, domains and the infrastructure behind the internet.
DreamHost says some customers must set new passwords for mail and FTP/SFTP users after an incident disrupted webmail and its file manager. If you own an affected account, […]
Railway says an unauthorized party may have accessed customer environment variables, which can hold API keys and database passwords. If you host an app on Railway, rotate the […]
PHP issued emergency fixes for two serious flaws. Check your website’s PHP version, update the server to a fixed build, and test the site afterward.
Cloudflare says private keys for eight eMudhra intermediate certificates were compromised, creating a risk that a forged certificate could impersonate a site or intercept traffic if a client […]
NGINX has released security fixes across its mainline and stable open-source branches for five flaws affecting request handling, TLS sessions and worker processes. For web hosts running NGINX […]
Vercel apps can now provision S3 buckets from the platform’s storage workflow, using temporary AWS credentials instead of static access keys.
A dispute over the planned retirement of third-level .name domains is drawing attention to a basic hosting risk: a long-held domain can be more than a web address […]