Connect with us

News

Hackers are actively exploiting a bug in cPanel, used by millions of websites

info

Published

on

Cpanel security flaw bug.jpeg

Security researchers are sounding the alarm on a newly discovered vulnerability in the widely used web server management software cPanel and WebHost Manager (WHM). 

The bug allows hackers to hijack and take full control of the servers running the affected software, which is thought to be used by tens of millions of website owners around the world.

Many commercial web hosting companies have patched their customers’ systems already. But the cPanel maker urged customers to ensure that their systems are patched as the bug affects all supported versions of the software.

cPanel and WHM are two software suites used for managing web servers that host websites, manage emails, and handle important configurations and databases needed to maintain an internet domain. The two suites have deep-access to the servers that they manage, allowing a malicious hacker potentially unrestricted access to data managed by the affected software.

The bug, officially tracked as CVE-2026-41940, allows malicious hackers to remotely bypass its login screen to gain full access to the software’s administration panel. 

Given the ubiquity of the cPanel and WHM software across the web hosting industry, hackers could compromise potentially large numbers of websites that haven’t patched the bug.

Canada’s national cybersecurity agency said in an advisory that the bug could be exploited to compromise websites on shared hosting servers, such as large web hosting companies.

The agency said that “exploitation is highly probable” and that immediate action from cPanel customers, or their web hosts, is necessary to prevent malicious access.

Web hosting giant Namecheap, which uses cPanel to allow its customers to manage their web servers, said the company blocked access to customers’ cPanel panels after learning of the flaw to prevent exploitation, and to give it time to patch its customers’ systems

Hostgator also said it patched its systems and is considering the bug a “critical authentication-bypass exploit.”

One web hosting company says it found evidence that hackers have been abusing the vulnerability for months before the attempts were discovered.

KnownHost CEO Daniel Pearson said in a post on Reddit that his company has seen attempts to exploit the vulnerability as far back as February 23. The company said it also briefly began blocking access to customer systems before applying patches.

According to Pearson, around 30 servers at KnownHost showed signs of unauthorized attempted access out of thousands of computers on its network. Pearson likened the efforts to attempts, and has not seen signs of active compromise. cPanel also said it rolled out a security fix for WP Squared, a similar tool for managing WordPress websites.

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

News

Troops Neutralise 216 Terrorists, Apprehend 284 Across Theatres In April – DHQ

info

Published

on

By

IMG 20260430 WA0027.jpg

By Sumaila Ogbaje

The Defence Headquarters says troops neutralised no fewer than 216 terrorists and apprehended 284 suspects in a series of coordinated operations conducted across various theatres in April.

The Director, Defence Media Operations, Maj.-Gen. Michael Onoja, disclosed this on Thursday in Abuja while briefing newsmen on ongoing military operations nationwide.

Onoja said the troops also rescued scores of kidnapped civilians, dismantled terrorist enclaves, and destroyed logistics networks in sustained offensives carried out across the six geopolitical zones.

According to him, the operations, conducted in collaboration with other security agencies and supported by local communities, have significantly degraded the operational capabilities of insurgents and criminal elements.

In the North East, Onoja said troops of Operation HADIN KAI sustained aggressive operations against Boko Haram and ISWAP terrorists in Borno, Adamawa and Yobe states.

He said the troops neutralised 136 terrorists, apprehended 114 suspects and rescued abducted civilians as well as recorded the surrender of nine insurgents and their families.

Onoja noted that notable operations included the rescue of 90 captives from the Mandara Mountains and the repelling of a major terrorist attack on April 24, during which 21 insurgents were killed and weapons recovered.

He added that coordinated ground and air operations in the Timbuktu Triangle and Sambisa Forest further led to the neutralisation of terrorists and destruction of enclaves.

In the North West, Onoja said troops of Operation FANSAN YAMMA neutralised 24 terrorists, arrested two suspects and rescued 70 kidnapped victims across Kaduna, Katsina, Kebbi, Sokoto and Zamfara states.

He said troops also destroyed terrorist camps, rescued abducted worshippers and intercepted a suspect conveying improvised explosive device materials.

In the North Central, Onoja said troops of Operation SAVANNAH SHIELD recorded significant gains in Niger and adjoining states.

“Within the period, troops neutralised 21 terrorists, arrested 17 suspects and rescued 10 kidnapped victims.

“Troops also destroyed criminal camps, recovered arms and repelled attacks on communities without recording casualties on own troops,” he said.

Similarly, the defence spoken said troops of Operation WHIRL STROKE neutralised 18 terrorists, arrested four suspects and rescued 53 kidnapped victims across Benue, Nasarawa and Taraba states.

According to him, troops also recovered N8 million ransom from kidnappers and returned it to victims, while drone-supported operations led to further arrests.

He further disclosed that Joint Task Force operations in Plateau, Kogi and surrounding areas led to the neutralisation of 14 terrorists, arrest of 40 suspects and rescue of 35 victims.

Onoja assured Nigerians that the Armed Forces would sustain the ongoing offensive against terrorists and criminal elements across the country.

He reiterated the military’s commitment to safeguarding the sovereignty and territorial integrity of the nation while ensuring the safety of citizens.

“The Armed Forces remain resolute and will continue to intensify operations to ensure lasting peace and security across the country,” he said. (NAN) (www.nannews.ng)

Edited by Sadiya Hamza

Continue Reading

News

FDA approval, fundraising, and the reality of building in healthcare according to BioticsAI founder

info

Published

on

By

Bms2e11 featured.png

Founders building in the healthcare space can’t just build fast and break things. Timelines stretch longer, stakes are higher, and success depends on navigating systems that reward rigor over speed. 

That’s exactly the reality Robhy Bustami, co-founder and CEO of BioticsAI, has been building in. His company is developing an AI copilot for ultrasound that helps detect fetal abnormalities, an area where misdiagnosis rates remain surprisingly high. Bustami joined Isabelle Johannessen on Build Mode to discuss how the company has navigated a highly regulated space and kept the team motivated while cutting through all the red tape.

BioticsAI started scrappy. The team built an early, functioning version of the product for under $100,000, an almost unheard-of milestone in the medical device world. That prototype helped them win TechCrunch Startup Battlefield in 2023, bringing early visibility and credibility. In January, they gained FDA approval, which means they can begin launching in hospitals and growing the business at a new rate. 

From day one, the team approached product development with FDA approval in mind. Instead of building first and figuring out regulation later, they integrated clinical validation, regulatory strategy, and product development into a single process. That meant working closely with clinicians, collecting large-scale datasets, and running structured clinical studies before ever reaching the submission stage.

The FDA process itself is often viewed as a black box, but Bustami emphasizes that founders don’t have to navigate it blindly. Early engagement with regulators, through pre-submission meetings, helped the team align on study design and expectations. Still, risk never fully disappears. For many investors, the biggest question is simple: What if the FDA says no?

Internally, those long timelines create a different kind of challenge: keeping a team motivated when the biggest milestone is years away. At BioticsAI, that meant building a culture of alignment across engineers, clinicians, and researchers, ensuring everyone got to see the wins that were happening.

 “Making sure everyone is completely aligned, even if it’s outside of their technical scope,” Bustami said, “constantly seeing wins on the R&D side,” from clinical studies to new healthcare partnerships.

Techcrunch event

San Francisco, CA
|
October 13-15, 2026

Now, with FDA clearance secured, BioticsAI is entering a new phase: deployment. The company is beginning to roll out its technology in hospitals, with plans to expand beyond obstetrics into broader areas of reproductive health.

Building in healthcare is a long game. It requires patience, discipline, and a willingness to operate in uncertainty. For founders willing to take that path, the reward isn’t just a successful company — it’s the chance to build something that genuinely changes how care is delivered.


Subscribe to Build Mode on Apple Podcasts, Spotify, or wherever you like to listen. Watch the full videos on YouTube. Isabelle Johannessen is our host. Build Mode is produced and edited by Maggie Nye. Audience Development is led by Morgan Little. And a special thanks to the Foundry and Cheddar video teams. 


Apply to Startup Battlefield: We are looking for early-stage companies that have an MVP. So nominate a founder (or yourself). Be sure to say you heard about Startup Battlefield from the Build Mode podcast. Apply here.

TechCrunch Disrupt 2026: We’re back for TechCrunch Disrupt on October 13 to 15 in San Francisco, where the Startup Battlefield 200 takes the stage. So if you want to cheer them on, or just network with thousands of founders, VCs, and tech enthusiasts, then grab your tickets.

Use code buildmode15 for 15% off any ticket type. 

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

Continue Reading

Trending