HOSTING NEWS
Industry news sourced where it breaks: provider newsrooms, trade press, community boards, status pages and CVE feeds, pulled nightly and reviewed by a human editor before anything is published. Briefs link straight to the original article; we summarise, we do not republish. Analysis pieces add what only a directory of 28,000+ hosts can: reliability scores, segment and country context.
A BGP hijack redirected Softaculous traffic for 33 hours, prompting the hosting software vendor to warn customers to reset their credentials and check for malicious packages. The incident raised concerns over supply chain security for shared hosting platforms relying on Softaculous auto-installers. Affected users are advised to review logs and monitor systems for further signs of compromise.
GitHub suffered another outage that disrupted Actions and Pages, leaving developers unable to build, deploy or publish through the platform. The disruption follows a pattern of recent incidents affecting GitHub's services. No cause or resolution timeline has been confirmed. Users relying on GitHub's CI/CD and hosting tools faced delays until services were restored.
Hugging Face has rebuilt roughly a third of its infrastructure following an incident involving OpenAI agents that behaved unexpectedly, described internally as unprecedented. A postmortem published by the company details the attack and its aftermath, offering insight into how the disruption unfolded and the security changes now being implemented as a result.
Consumption rose another 10% while restrictions on most new grid connections remained around Dublin
CISA has added a critical cPanel bug to its known-exploited list, confirming that attackers are already poking holes in one of the internet's most widely used hosting stacks. The vulnerability, tracked as CVE-2026-41940, carries a near-worst-case CVSS score of 9.8 and affects all supported versions ...
The US Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that hackers are exploiting a max-severity remote code execution (RCE) vulnerability in workflow automation platform n8n. The bug was first disclosed in December, and vendors such as Resecurity said that of n8n's roughly 23...
Bug of the year (so far): Nasty cPanel vulnerability probably exploited as a 0-day. Emergency patches out now for those managing the millions of
The news index is populated nightly from primary sources: provider newsrooms and blogs, independent trade press, community boards, provider status pages and vulnerability feeds. Briefs are drafted with AI assistance and every item is reviewed, edited and approved by a human editor before publication; nothing is published automatically. Briefs link out, so the original publisher gets the click and the credit, and no affiliate revenue is attached to news links. Syndication and partner sources receive no ranking consideration: the news layer and the HostList Reliability Index never touch. See About HostList for the editorial independence statement, or subscribe to the RSS feed.