cPanel

Recently, a code vulnerability has been discovered in Horde, a commonly used webmail that is in use with the control panel, cPanel, which allows an authenticated user to execute arbitrary code on the underlying server This vulnerability has been assigned CVE (Common Vulnerability and Exposures) of CVE-2022-30287 This vulnerability can be exploited with relative ease with a single GET request that can be triggered via Cross Site Request Forgery The attacker only needs to craft a malicious email and include an external image that exploits this vulnerability without and future actions of the …

It has been a few months since we last reported on a phishing email campaign and was covered off in our blog back then We are seeing an increase in requests again to validate this email and due to the language and content and the call to action in it, appears to be tricking people to responding to it As most of us are more clear now what a phishing email is, they are becoming more brazen to get you to think these are legitimate emails It’s important to note that cPanel will not reach out to you, our clients on our behalf, to ask you to complete such a step If such an action is …

Over the last several days we have seen a significant increase in clients reaching out to us about emails they are receiving that they are going to reach capacity of their account There appears to be a large and concerted spam campaign right now that the end result is they are attempting to gain access to your cPanel log in credentials We first wrote about similar campaigns back in 2016 and they continue today With the volume of clients that have reached out, we are posting this warning as a reminder to constantly practice due diligence with emails and just a month ago we …

Earlier this summer we were advised, along with all cPanel partners, of an upcoming change in their license structure We shared what information in an earlier post The license structure change to a per account/tier-based model is substantially different than their old license model which has been discontinued and all existing licenses are now being converted to this We’d like to share next steps with you New Licenses/Pricing For all new orders, for our Virtual Servers, both Managed and Developer servers, will now have the option to select the number of end user cPanel accounts …

On June 27th we, as well as every cPanel partner, received communication of an upcoming change to their software licensing agreement We are still very early in our analysis and impact of this change but do want to keep you informed of what is happening and be as fully transparent with you on this What is cPanel cPanel, along with the companion program WHM, is an industry-leading control panel that is used by many companies to create and manage end-user accounts (collectively known as cPanel) This control panel is what is used to log in to manage your website files, email accounts, and …