XCP-ng 8.3 June 2026 Security Updates: Reboot and Verify Hosts
XCP-ng 8.3 LTS has June 2026 Xen, kernel, and lldpd security updates. Use this backup-first host reboot and verification checklist.
XenServer 8.4 Security Update: Patch Guest-to-Host and RBAC Issues
Patch XenServer 8.4 safely for guest-to-host, host stability, and RBAC security issues with host drain, backup, and post-update verification steps.
Docker SBOM Checklist for Hosting and CI Teams
Use Docker SBOMs to inventory container images, verify dependencies, connect vulnerability scanning, and prepare supply-chain reviews before production changes.
Velvet Ant Linux Login Backdoors: Check PAM and OpenSSH
Sygnia says Velvet Ant replaced Linux PAM and OpenSSH components in a long-running intrusion. Hosting admins should verify login-stack integrity before rotating credentials.
HAProxy 3.4 LTS: Upgrade Checklist for Load Balancers
Upgrade and maintain HAProxy 3.4 LTS safely, including June 2026 HTTP/2 and HPACK CVE notes, config validation, safe reloads, and post-change checks.
CVE-2026-4802 Cockpit: Linux Server Patch and Exposure Guide
CVE-2026-4802 affects Cockpit on RHEL-family Linux servers. Restrict management access, patch Cockpit packages, and review admin activity safely.
cPanel & WHM May 2026 CVEs: WP Squared Patch Guide
Patch cPanel & WHM and WP Squared for CVE-2026-29201, CVE-2026-29202, and CVE-2026-29203 with safe verification steps for hosting providers.
Detecting and Mitigating AnonymousFox in WHM/cPanel Servers
Detect and mitigate AnonymousFox on WHM/cPanel servers with backup-first account review, WordPress cleanup, password rotation, patching, and public verification.
ImunifyAV CRON Issue (3/7/2023)
2026 update: this was an old ImunifyAV/ClamAV cron noise issue we saw on a cPanel server in 2023. It appears to have been corrected in later Imunify releases, but the troubleshooting lesson is still useful: when a hosting security tool starts creating cron emails, check the log path, confirm the package is current, and make […]
