Jason Nickerson — Hosting Industry InsiderTwo decades
inside the web
as it kept rewriting
itself.
I’m Jason, a hosting industry insider with experience across open-source CMS platforms, control panels, cloud infrastructure, and the events that bring the industry together. Today, I focus on building partnerships, programming industry summits, and documenting what is happening across the hosting ecosystem.
- Oct 17, 2026
Protein Muffins and Pivot Tables: The Longevity Market Goes Mass
Mark Wahlberg is trading the NYSE drama for a new fitness venture that aims to bring high-end biohacking to the budget-conscious consumer.
Read article: Protein Muffins and Pivot Tables: The Longevity Market Goes Mass→ - Oct 17, 2026
The Glass House Crack: Memory Leaks and Sandbox Realities
A new Linux kernel flaw proves once again that virtual isolation is often thinner than we like to admit. It is time to patch your hosts before the neighbors start peeking.
Read article: The Glass House Crack: Memory Leaks and Sandbox Realities→ - Oct 16, 2026
Amazon’s Bee and the $75 Surveillance Discount
Amazon-owned Bee just dropped a wearable and a slim recorder that live in your pocket, turning your casual chats into Amazon shopping lists for under a hundred bucks.
Read article: Amazon’s Bee and the $75 Surveillance Discount→
The early 2000s were the good years for tinkerers. Open-source CMS platforms were the closest thing we had to a universal starter kit, and PHP-Nuke and osCommerce were how you learned to ship real projects on the open web. I went deep on Joomla for the better part of a decade, contributing code to the project, organizing its community around releases and events, and eventually crossing over into the WordPress orbit that quietly swallowed everything in its path.
From there the story is a tour of the hosting stack: cPanel and the control-panel era that defined shared hosting, the managed cloud wave at Cloudways and DigitalOcean, and the publishing side at webhosting.today. Day to day now I'm at JetBackup, working on backup and disaster recovery and helping hosts protect the infrastructure that keeps everything running. I also program the seasonal industry summits, Atlas Digital Summit and Domain Days Dubai, where the hosting community gathers to set the agenda for what comes next.
The through-line is community, the conferences, the hallway conversations, and the group chats where the industry actually decides what happens next. The technology changes; the people pointing it in the right direction stay the same.
Twenty-something years,
in reverse.
- 2026 – present
FounderAtlas Digital SummitPrivate gatherings for hosting leaders, AI infrastructure innovators, and the builders of the agentic web.
- 2026 – presentFounderConf64
The Conference Operating System for Business Development and Field Marketing Teams.
- 2026 – present
Co-FounderSuperDeployThe advanced migration engine for AI applications. Seamlessly transition your codebase to independent, production-grade infrastructure in minutes.
- 2025 – 2026Director of Business Developmentwebhosting.today
Contract · Business development and partnerships for the hosting publisher.
- 2024 – presentBusiness Development & Partnerships ManagerJetBackup
Backup and disaster recovery for the hosting ecosystem.
- 2023 – present
Chief Marketing Officer, Founding TeamDomain Days DubaiMENA’s domain and digital asset conference.
- 2021 – 2023Senior Manager, WordPress Business Unit → Lead Community Marketing Manager IICloudways / DigitalOcean
Full-time · WordPress community, field marketing, and sales enablement through the acquisition.
- 2019 – 2021Marketing ManagercPanel
Full-time · Event planner and marketing strategist for 500–3,000 attendee events and virtual series.
- 2017 – 2019FounderCMS Summit
The global CMS conference.
- 2007 – 2019CEO | FounderJoomlaxtc.com / Monev Software LLC
Premium Joomla templates and extensions. 101,000+ members.
- 2015 – 2019Board Member, Capital Team ChairJoomla! Project
Leadership, sponsorships, and partnerships for the open-source CMS.
- 2001 – 2005DeveloperPHP-Nuke · osCommerce era
First shipping code in the early open-source web.
Threat Briefing: ConnectWise Supply Chain Breach, Linux Kernel Patches & WP Core RCE
1. Infrastructure & Hosting: ConnectWise Supply Chain Breach
A major supply-chain incident targeting ConnectWise Cloud Backup (formerly SkyKick) has resulted in the compromise of 173 Microsoft 365 tenants [11]. Attackers bypassed MFA by hijacking the application’s identity/API credentials, originating from hosting provider infrastructure (AS14956) [9][10]. Separately, CISA has confirmed active exploitation of a MikroTik authentication bypass [12].
-
ConnectWise Cloud Backup Identity Hijack — Unauthorized access via API secret/client credential.
- CVE / Severity: Not disclosed in sources; Critical impact.
- Affected versions: ConnectWise Cloud Backup (SkyKick) services.
- Fixed in: Service disabled by vendor on Oct 17; ongoing remediation [11].
- Action now: Block IP
144.172.64.128; audit M365 logs for unauthorized enterprise app activity from hosting-provider IP ranges [9].
-
MikroTik RouterOS Missing Authentication — Critical function accessible without auth.
- CVE / Severity: CVE-2026-67277 / CVSS not disclosed in source.
- Affected versions: Not disclosed in sources.
- Fixed in: Check latest RouterOS stable/long-term releases.
- Action now: Update RouterOS immediately; CISA KEV listing indicates active exploitation [12].
2. Linux & Server Environment: Critical Kernel and Red Hat Updates
New security updates were released for Red Hat Identity Management (IdM) and the Linux Kernel to address multiple vulnerabilities including privilege escalation and information disclosure [6].
-
Red Hat IdM (DL1) Security Update — Critical vulnerabilities in Identity Management.
- CVE / Severity: CVE-2026-11861, CVE-2026-19550, CVE-2026-73198 (Critical) [6].
- Affected versions: Red Hat IdM modules.
- Fixed in: RHSA-2026:83461 / RHSA-2026:83460.
- Action now: Execute
dnf updateoryum updatefor IdM components.
-
Linux Kernel & PCRE2 Updates — Multiple bug fixes and security enhancements.
- CVE / Severity: CVE-2026-89970 (Kernel), CVE-2026-89161 (PCRE2) [6].
- Affected versions: PCRE2 and Kernel versions on affected distributions.
- Fixed in: CRLSA-2026_81406 and CRLSA-2026_81522.
- Action now: Apply distribution-specific security updates and reboot for kernel changes [6].
3. WordPress & CMS: Core RCE Chain & Plugin Vulnerabilities
AI-accelerated attacks are significantly shortening the window for patching WordPress sites [1]. A new critical analysis details how two core vulnerabilities can be chained for unauthenticated RCE [2].
-
WordPress Core Unauthenticated RCE Chain — Chained vulnerabilities allow remote code execution.
- CVE / Severity: Not disclosed in sources (Analysis dated Oct 16) [2].
- Affected versions: WordPress Core (versions not specified in snippet).
- Fixed in: Ensure WordPress Core is at the latest stable release (Auto-update enabled).
- Action now: Monitor logs for unusual unauthenticated requests to
wp-adminor REST API endpoints.
-
LearnPress PHP Object Injection — Critical vulnerability in LMS plugin.
- CVE / Severity: CVE-2026-104736 / Critical [7].
- Affected versions: LearnPress up to 4.4.10.
- Fixed in: Update to latest version (4.4.11+).
- Action now:
wp plugin update learnpressimmediately.
-
ThirstyAffiliates Unchecked Redirect — Link tracking handler vulnerability.
- CVE / Severity: CVE-2026-97314 / Severity not disclosed [5].
- Affected versions: ThirstyAffiliates before 3.12.1.
- Fixed in: version 3.12.1.
- Action now: Update to 3.12.1 or newer [5].
On the
road.
Conferences, summits, and WordCamps I’ll be at in the months ahead.
- Nov 11 – 12, 2026
- State of the WordDec 2026
- Mar 15 – 18, 2027
When the servers
go quiet.
A small digital label putting out industrial house, progressive house, and dubstep. A different kind of open protocol.
Twenty years of showing up for the projects, communities, and voices that keep the open web open.
A news portal covering the hosting and domain industry — and a running excuse to keep talking to the people who build it.