News

Hackers are still exploiting the cPanel bug to gain control of thousands of websites

Published

5 months ago

May 4, 2026

Nearly a week after the makers of the popular web server management software cPanel and WebHost Manager (WHM) alerted users of a critical flaw in its software, hackers are still targeting thousands of websites that use the vulnerable software.

As of Monday there are more than 550,000 potentially vulnerable servers running cPanel, a number that has remained stable for days. And there are now around 2,000 cPanel instances likely compromised, down from around 44,000 on Thursday. These statistics are published by Shadowserver, a nonprofit organization that scans and monitors the internet for cyberattacks.

On Thursday, security researchers alerted that hackers started compromising servers running cPanel and WHM, taking advantage of a bug that allowed the attackers to take full control of and hijack the vulnerable servers via their control panels.

As Bleeping Computer reported, the extent of the damage is visible by the fact that Google has indexed dozens of websites that at some point displayed a message from a group of hackers that claimed to have encrypted the victim’s files in an apparent ransomware attack. Some of those sites now load normally.

The ransom note included a chat ID for the victims to contact the hackers, who did not immediately respond to TechCrunch’s request for comment.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned on Thursday that the vulnerability — tracked as CVE-2026-41940 — was being exploited in the wild, and added it to its Known Exploited Vulnerabilities (KEV) catalog. CISA asked government agencies to patch by Sunday. CISA did not immediately respond to a request for comment, asking whether it could confirm that government agencies have patched their servers.

The attacks against web servers running cPanel and WHM have likely been ongoing since much earlier than the vulnerability was disclosed. According to KnownHost CEO Daniel Pearson, his company detected attacks as far back as February 23.

Techcrunch event

San Francisco, CA
|
October 13-15, 2026

Executives at Webpros, the company that develops cPanel and WHM and says it powers 60 million domains, did not respond to a request for comment.

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

Related Topics:bug control cPanel exploiting gain Hackers thousands websites

Up Next

NNPC Signs MoU with Chinese Firms to Revive Port Harcourt, Warri Refineries

Don't Miss

Elon Musk’s only expert witness at the OpenAI trial fears an AGI arms race

Click to comment

News

Eric Chelle Stays Defiant After 3-0 Loss To Guinea-Bissau, Declares: ‘This Is Not The End’

Published

1 hour ago

September 30, 2026

PlateauReports

Super Eagles’ head coach, Eric Sekou Chelle is staying defiant, despite his side’s 3-0 loss to Guinea-Bissau on Tuesday, as he stressed that it is not the end for Nigeria in the 2027 Africa Cup of Nations qualifiers.

Sports247 reports that, in spite of widespread criticism trailing him and his players after their huge defeat by one of Africa’s less fancied squads, the Franco-Malian gaffer added that his wards gave a good account of themselves on a poor surface.

He, however, also admitted that The Wild Dogs showed a stronger zeal for victory during the encounter and they also expressed more determination on the bumpy pitch of 24th September Stadium in Bissau.

“They were more aggressive than us, and they were better than us. This is not an excuse, but they know the pitch and the condition was tough for us.

“The pitch was very bad, and it was the first time we were playing there. The weather was very bad, too, but Guinea-Bissau entered the game with more aggressiveness,” Chelle conceded.

The former head coach of Mali’s national team and MC Oran of Algeria also took a look at technicalities of the game and admitted that his players put up the worst performance they have had since he took over the saddle in January 2025, but quickly added that he will start working to rectify the situation.

“We need to put in more aggressive effort and intensity to make a difference. They had more intensity and more motivation, to which we never found a solution.

“We tried to go forward with something different after half time but, after ten minutes, we stopped, and I don’t know why.

“I tried to bring in something new, but it did not work. So, we have to be very objective about this game; but this is not the end,” Chelle submitted emphatically.

Sports247 reports further that Chelle and his players have already turned their focus on the upcoming international friendly away to Russia, after which they will regroup in November to continue the AFCON 2027 qualifiers with a home and away double header against Tanzania.

Business

CIIN Cements Institutional Partnership with Insurance Meets Tech for 5th Edition

Published

2 hours ago

September 30, 2026

PlateauReports

BY NKECHI NAECHE-ESEZOBOR —The Chartered Insurance Institute of Nigeria (CIIN) has extended its partnership with Insurance Meets Tech (IMT), lending its professional support to the fifth edition of the annual insurance and technology conference, scheduled to be held on Friday, November 20, 2026, at the Balmoral Event Centre, Sheraton Hotel, Ikeja, Lagos.

This, partnership reflects both institutions’ shared commitment to advancing meaningful conversations on innovation, professional development, and the future of insurance in Nigeria, while strengthening the connection between the insurance profession and the wider technology ecosystem.

This milestone year, the 5th edition, under the theme “Building Insurance That Connects,” will convene insurance professionals, technology leaders, regulators, innovators, entrepreneurs, investors, and other stakeholders to examine how technology, collaboration, and new ideas can help create a more connected, accessible, and responsive insurance industry.

Speaking on the partnership, Mr. Akinjide Orimolade, President/Chairman of Council, CIIN, said, “As the industry continues to evolve, we must ensure that innovation is matched by competence, professionalism and a clear understanding of the customer we ultimately serve. This is why CIIN continues to lend its full support to platforms such as IMT provides an important space for the insurance community to have honest conversations, challenge old assumptions, and collectively consider what a more connected, technology-driven, and future-ready industry should look like. Our partnership with IMT for this edition is a reaffirmation of that commitment, and we are confident this year’s conversations will move the industry closer to the innovative future we all envision”

Also, Odion Aleobua, Founder/Convener of IMT and Chief Executive Officer, Creato Urban, stated, “CIIN’s continued institutional support speaks to the credibility this platform has built over the years. It reflects an industry that recognises IMT as more than an event, but as a genuine driver of change within the insurance and technology space. This partnership strengthens our ability to convene the right stakeholders, drive the right conversations, and deliver solutions for an industry that must keep evolving. As we approach the 5th edition, our commitment remains to position IMT as a trusted platform where the future of insurance in Nigeria is actively shaped.”

Over the past four editions, IMT has established itself as a platform for dialogue between the insurance and technology sectors, bringing together industry leaders and emerging innovators to examine technology’s role in shaping the future of insurance.

This edition will build on that foundation with high-level panel discussions, keynote sessions, technology showcases, and networking opportunities focused on digital transformation, emerging technologies, professional development, customer experience, and the broader evolution of the insurance ecosystem.

About Insurance Meets Tech (IMT)

IMT is West Africa’s leading annual insurance and technology conference, dedicated to promoting collaboration between the insurance industry and the technology ecosystem. Through conferences, thought leadership, networking, and strategic partnerships, IMT serves as a gateway for digital transformation, industry growth, and customer-centric innovation within the insurance sector.Qw

The post CIIN Cements Institutional Partnership with Insurance Meets Tech for 5th Edition appeared first on Business Today NG.