Connect with us

News

Hackers are still exploiting the cPanel bug to gain control of thousands of websites

info

Published

on

Scanning computer group.jpg

Nearly a week after the makers of the popular web server management software cPanel and WebHost Manager (WHM) alerted users of a critical flaw in its software, hackers are still targeting thousands of websites that use the vulnerable software. 

As of Monday there are more than 550,000 potentially vulnerable servers running cPanel, a number that has remained stable for days. And there are now around 2,000 cPanel instances likely compromised, down from around 44,000 on Thursday. These statistics are published by Shadowserver, a nonprofit organization that scans and monitors the internet for cyberattacks. 

On Thursday, security researchers alerted that hackers started compromising servers running cPanel and WHM, taking advantage of a bug that allowed the attackers to take full control of and hijack the vulnerable servers via their control panels. 

As Bleeping Computer reported, the extent of the damage is visible by the fact that Google has indexed dozens of websites that at some point displayed a message from a group of hackers that claimed to have encrypted the victim’s files in an apparent ransomware attack. Some of those sites now load normally.  

The ransom note included a chat ID for the victims to contact the hackers, who did not immediately respond to TechCrunch’s request for comment. 

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned on Thursday that the vulnerability — tracked as CVE-2026-41940 — was being exploited in the wild, and added it to its Known Exploited Vulnerabilities (KEV) catalog. CISA asked government agencies to patch by Sunday. CISA did not immediately respond to a request for comment, asking whether it could confirm that government agencies have patched their servers. 

The attacks against web servers running cPanel and WHM have likely been ongoing since much earlier than the vulnerability was disclosed. According to KnownHost CEO Daniel Pearson, his company detected attacks as far back as February 23.

Techcrunch event

San Francisco, CA
|
October 13-15, 2026

Executives at Webpros, the company that develops cPanel and WHM and says it powers 60 million domains, did not respond to a request for comment. 

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

News

Coach Kuforiji Olusola Warns Flamingos Against Defensive Lapses Ahead of Benin Return Leg

info

Published

on

By

IMG 20260704 WA0424.jpg

Head Coach of Samba Tornadoes Football Club, Coach Kuforiji Olusola, has expressed concerns over the defensive performance of Nigeria’s Flamingos despite their 3-2 victory over the Benin Republic in the first leg of the final qualifying round for the 2026 FIFA U-17 Women’s World Cup.

READ ALSO: Flamingos Coach Akeem Busari Warns Nigeria Against Complacency After 5-0 Win Over Guinea

Speaking with Sports247 after the thrilling encounter at the Remo Stars Stadium in Ikenne, the experienced tactician described the result as a risky one, urging Coach Akeem Busari to address the team’s defensive weaknesses before the decisive second leg.

“It’s quite a big risk for the Flamingos with the first-leg result,” Kuforiji said. “Coach Akeem Busari needs to work more on the defensive line ahead of the second leg because conceding two goals at home could become costly.”

Nigeria had to come from behind to secure a narrow advantage after Benin’s Young Amazons took an early lead through Yenido Romaine Gandonou in the 14th minute.

The Flamingos responded positively, with Queen Joseph restoring parity in the 24th minute before Oluwakemi Adegbuyi put the hosts ahead in the 62nd minute.

However, Benin once again showed resilience as Nazifatou Dangui levelled matters ten minutes later, raising concerns over Nigeria’s defensive organisation.

Kindness Ifeanyi eventually scored the winning goal in the 75th minute to hand the Flamingos a slim 3-2 victory and a narrow advantage heading into the return fixture.

Despite praising the team’s fighting spirit and attacking quality, Kuforiji believes the two goals conceded have left the tie finely balanced.

“The Flamingos showed character to keep coming back and find the winning goal, but they must be more disciplined defensively. At this level, small mistakes can make a huge difference.”

Nigeria will now travel to Lomé, Togo, for the second leg scheduled for July 11 at the Stade de Kégué, Benin Republic’s adopted home ground.

The winner on aggregate will secure one of Africa’s coveted tickets to the 2026 FIFA U-17 Women’s World Cup in Morocco, set to take place from October 17 to November 7.

With qualification now within touching distance, all eyes will be on Coach Busari and his young side to see whether they can tighten up defensively and finish the job away from home.

Continue Reading

Business

Alake warns mining firms over host community agreements, threatens licence revocation

info

Published

on

By

IMG 20260704 WA0057.jpg

MTN ADVERT

The Minister of Solid Minerals Development, Dele Alake, has warned mining companies operating in Nigeria that failure to comply with their Community Development Agreements (CDAs) could lead to sanctions, including the revocation of their licences.

Mr Alake gave the warning on Saturday during the ministry’s 2026 Ministerial Retreat in Abuja.

He said although the government has made significant progress in reforming the solid minerals sector, greater emphasis would now be placed on accountability and ensuring that host communities benefit from mining activities.

“Our reforms have restored confidence, attracted serious investors and made the sector a key part of Nigeria’s economic diversification. Now, our focus is on accountability,” he stated.

The minister stressed that companies must honour the agreements reached with their host communities.

PT WHATSAPP CHANNEL

“Mining companies that fail to honour their Community Development Agreements will face sanctions, including the revocation of their licences,” he said.

He added that, “Host communities deserve to benefit from the resources in their land, and there will be consequences for those who ignore that responsibility.”

Community Development Agreements are legally required arrangements between mining companies and host communities, outlining commitments on social amenities, employment, infrastructure and other development projects.

READ ALSO: Alake calls for united African front to capture greater value from global mineral economy

Illegal mining

Mr Alake also reaffirmed the Federal Government’s commitment to tackling illegal mining across the country.

According to him, the ministry will strengthen the operations of the Mining Marshals while adopting practical and innovative measures to improve security in the sector.

“I also reaffirmed our commitment to ending illegal mining by strengthening the Mining Marshals and embracing practical, innovative ideas that will make the sector more secure and more beneficial to all Nigerians,” he said.

The minister said the government’s ongoing reforms are aimed at building a more transparent, secure and investment-friendly mining sector capable of contributing more significantly to Nigeria’s economic diversification.


Continue Reading

Trending