Critical LiteSpeed cPanel Flaw (CVSS 10.0) Actively Exploited; Home.pl Database Breach Alleged
Key Themes
Notable Players
Critical root privilege escalation in cPanel plugin (CVE-2026-48172, CVSS 10.0) actively exploited in the wild
Launched Gradient AI cloud platform (GA), added NVIDIA H200 and AMD MI325X GPU Droplets, introduced batch inference and per-second billing
Announced merger to create €1 billion listed entity combining hosting and e-commerce platforms
Released Gen 13 servers with AMD EPYC Turin processors, doubling edge compute performance and moving to 100 GbE networking
Released MAx Cache stable version for Apache/Nginx delivering 3x WordPress performance gains and patched multiple kernel CVEs
Top Stories
A critical zero-day in LiteSpeed's cPanel plugin allows any shared hosting customer to gain root access and compromise the entire server. The vulnerability is currently being actively exploited in the wild.
An alleged Home.pl customer database surfaced on cybercrime forums, though Home.pl has not confirmed the breach and no independent verification exists. Polish authorities have issued no advisory.
Zuckerberg signaled Meta's cloud computing business is "definitely on the table" if AI infrastructure buildout continues, potentially entering direct competition with VPS and cloud providers.
CyberFolks and Shoper announced a merger creating a €1 billion combined entity, merging hosting and e-commerce capabilities through a share-based transaction under Polish law.
Cloudflare's Gen 13 servers double compute throughput using high-core AMD EPYC Turin CPUs and a new Rust-based FL2 stack optimized for edge workloads. Migration from cache-focused to compute-focused architecture.
Security & Compliance
A critical zero-day in LiteSpeed's cPanel plugin allows any shared hosting customer to gain root access and compromise the entire server. The vulnerability is currently being actively exploited in the wild.
An alleged Home.pl customer database surfaced on cybercrime forums, though Home.pl has not confirmed the breach and no independent verification exists. Polish authorities have issued no advisory.
CIFSwitch, a Linux kernel local privilege escalation in the CIFS/SMB client's SPNEGO upcall path, latent since 2007, disclosed by researcher Asim Manizada. CloudLinux released mitigation and kernel updates.
Dutch financial crime investigators (FIOD) raided data centers in Dronten and Schiphol-Rijk on May 22, seizing 800 servers and equipment. The rebrand of the compromised operation failed to shield it from enforcement.
Researcher Hyunwoo Kim disclosed Dirty Frag, a second Linux kernel local privilege escalation in the IPsec ESP and rxrpc areas, following Copy Fail. CloudLinux issued mitigation and kernel updates.
Copy Fail (CVE-2026-31431) breaks the typical kernel CVE patching rhythm, requiring mitigation strategies that don't necessitate server reboots during maintenance windows.
CVE-2026-31431 (Copy Fail) is a Linux kernel LPE vulnerability in the algif_aead module exploitable via a 732-byte Python script by any unprivileged local user to gain root access.
A reported NGINX zero-day (nginx-poolslip) affecting version 1.31.0 involves request memory pool handling issues, raising concerns shortly after the Rift patch.
Cloud & Infrastructure
NVIDIA HGX H200 GPU Droplets now available on DigitalOcean, delivering up to 2x faster performance for AI and compute-intensive workloads on-demand.
DigitalOcean launched AMD Instinct MI325X GPU Droplets, expanding GPU options for developers and enterprises building AI applications with powerful, accessible infrastructure.
Gradient is DigitalOcean's unified AI cloud platform designed for digital native enterprises to build and scale AI applications with simplified infrastructure.
Gradient Platform (formerly GenAI Platform) reached GA, offering fully managed AI app building with agents, serverless inference, and new external model integration features.
A historic $67B NextEra-Dominion merger positions America's largest regulated utility at the center of AI data center power infrastructure demand.
Pricing & Business
Web Hosting Canada (WHC) now includes a free CDN with all web hosting and managed WordPress plans, improving load times for visitors worldwide.
DigitalOcean introduced per-second billing, new Droplet tiers, BYOIP, and NAT gateway features to help customers cut cloud spending from over-provisioning.
Control Panels
Plesk Obsidian 18.0.77 brings major accessibility improvements and native ACME protocol support for streamlined SSL certificate management.
Plesk Obsidian 18.0.75, the first 2025 release, strengthens SSL/TLS management, expands development stack support, and improves accessibility.
Plesk Obsidian 18.0.74 adds powerful features, improved security, and expanded platform support for smoother and safer server management.
Acquisitions & Market
CyberFolks and Shoper announced a merger creating a €1 billion combined entity, merging hosting and e-commerce capabilities through a share-based transaction under Polish law.
Zuckerberg signaled Meta's cloud computing business is "definitely on the table" if AI infrastructure buildout continues, potentially entering direct competition with VPS and cloud providers.
OpusDNS, launched October 2025, acquired fruits.co, a European domain monetization and aftermarket sales platform, expanding its wholesale registrar ecosystem.
A historic $67B NextEra-Dominion merger positions America's largest regulated utility at the center of AI data center power infrastructure demand.
Technology & Tools
DigitalOcean's Batch Inference on the Inference Engine enables high-volume asynchronous AI workloads, part of the new AI-Native Cloud architecture.
Other News
CloudLinux released MAx Cache GA, a native web server module for Apache/Nginx that serves cached WordPress pages directly without PHP, delivering 3x performance gains.
MAx Cache's .htaccess caching feature achieves 20% faster Apache page loads by compiling .htaccess files into memory, eliminating per-request disk lookups.
MAx Cache extended to Nginx with native module serving cached WordPress pages directly from the web server without PHP invocation, achieving greater performance.
Crusoe revealed plans to expand its Abilene Texas datacenter campus by 900 MW with on-site power generation to support Microsoft's AI infrastructure.
Crusoe expanded its Abilene Texas data center campus with 900 MW new capacity powered by on-site generation to support Microsoft's AI infrastructure needs.
Meta and Arm co-developed the AGI CPU, the first Arm-designed data center chip built to meet surging AI data center processor demand.
Cloudflare's Gen 13 servers double compute throughput using high-core AMD EPYC Turin CPUs and a new Rust-based FL2 stack optimized for edge workloads.
Technical deep dive into Cloudflare's Gen 13 architecture featuring AMD EPYC Turin 9965 processors and 100 GbE networking for growing traffic demands.