Connect with us

News

Hackers are still exploiting the cPanel bug to gain control of thousands of websites

info

Published

on

Scanning computer group.jpg

Nearly a week after the makers of the popular web server management software cPanel and WebHost Manager (WHM) alerted users of a critical flaw in its software, hackers are still targeting thousands of websites that use the vulnerable software. 

As of Monday there are more than 550,000 potentially vulnerable servers running cPanel, a number that has remained stable for days. And there are now around 2,000 cPanel instances likely compromised, down from around 44,000 on Thursday. These statistics are published by Shadowserver, a nonprofit organization that scans and monitors the internet for cyberattacks. 

On Thursday, security researchers alerted that hackers started compromising servers running cPanel and WHM, taking advantage of a bug that allowed the attackers to take full control of and hijack the vulnerable servers via their control panels. 

As Bleeping Computer reported, the extent of the damage is visible by the fact that Google has indexed dozens of websites that at some point displayed a message from a group of hackers that claimed to have encrypted the victim’s files in an apparent ransomware attack. Some of those sites now load normally.  

The ransom note included a chat ID for the victims to contact the hackers, who did not immediately respond to TechCrunch’s request for comment. 

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned on Thursday that the vulnerability — tracked as CVE-2026-41940 — was being exploited in the wild, and added it to its Known Exploited Vulnerabilities (KEV) catalog. CISA asked government agencies to patch by Sunday. CISA did not immediately respond to a request for comment, asking whether it could confirm that government agencies have patched their servers. 

The attacks against web servers running cPanel and WHM have likely been ongoing since much earlier than the vulnerability was disclosed. According to KnownHost CEO Daniel Pearson, his company detected attacks as far back as February 23.

Techcrunch event

San Francisco, CA
|
October 13-15, 2026

Executives at Webpros, the company that develops cPanel and WHM and says it powers 60 million domains, did not respond to a request for comment. 

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

News

2027: Peter Obi arrives Makurdi amid alleged attack on convoy

info

Published

on

By

Labour party Peter Obi.jpg

The presidential candidate of the Nigeria Democratic Congress, NDC, Peter Obi, has arrived in Makurdi, the Benue State capital.

Obi was received on Tuesday morning by chieftains of the NDC ahead of his presidential campaign engagements in the state.

DAILY POST had earlier reported that suspected thugs allegedly blocked a major road in Benue State in an attempt to prevent Obi and his entourage from proceeding with their journey.

Obi’s media aide, Esther Umoh, who disclosed the incident, shared videos showing some individuals blocking the road and others running after vehicles believed to be conveying the NDC presidential candidate and members of his entourage.

Recommended

It was not immediately clear who the individuals were or what prompted the incident.

As of the time of filing this report, details of Obi’s engagements in the state had not been made public.

Continue Reading

Health

Plateau buses make face masks compulsory as diphtheria outbreak worsens

info

Published

on

By

African american man riding city bus guy brown coat corona virus concept scaled e1788852645321.jpg

MTN ADVERT

Passengers using TinCity Metro buses in Plateau State will be required to wear face masks from Tuesday as authorities intensify efforts to contain a diphtheria outbreak that has killed at least 23 people.

The management of Plateau Express Services Group, which operates the state-owned mass transit service, announced a “no face mask, no entry” policy in a statement issued on Monday.

The directive takes effect on Tuesday, 8 September, and will remain in force until further notice.

“The Management of Plateau Express Services Group has directed the enforcement of a ‘No Face Mask, No Entry’ policy on all TinCity Metro buses, effective Tuesday, 8th September 2026, until further notice,” the statement said.

TinCity Metro buses operate across the Jos metropolis and neighbouring local government areas, including Jos South, Barkin Ladi and Bassa, providing daily transportation for residents within and around the state capital.

PT WHATSAPP CHANNEL

The management said a limited number of face masks would be provided at designated boarding points to ease the implementation of the directive.

However, it advised commuters to bring their own masks, warning that available supplies might not be sufficient for everyone.

The company also urged passengers to comply with the directive and cooperate with its personnel when boarding the buses.

“Management appreciates the understanding and cooperation of commuters as we work together to ensure a safer public transport environment,” it said.

The directive comes amid heightened concern over the spread of diphtheria in Plateau State, with health authorities reporting a rising number of suspected cases and deaths.

The state Commissioner for Health, Nicholas Baamlong, said on Friday that 148 suspected cases had been recorded, with 23 deaths reported in the preceding two weeks.

READ ALSO: Plateau shuts schools over suspected diphtheria outbreak

Eight patients were receiving treatment at the Jos University Teaching Hospital, while five others were being treated at the Plateau Specialist Hospital, Mr Baamlong said.

Diphtheria is a bacterial infection that spreads mainly through respiratory droplets and close contact with infected people, making crowded public spaces a potential avenue for transmission.

The Plateau State Government has already introduced other measures to contain the outbreak, including the temporary closure of public and private primary and secondary schools across the state.

The face-mask requirement on TinCity Metro buses extends the containment measures to public transportation, where thousands of residents travel daily between Jos and neighbouring communities.


Discover more from Premium Times Nigeria

Subscribe to get the latest posts sent to your email.

Continue Reading

Trending