Jason Nickerson — Hosting Industry InsiderTwo decades
inside the web
as it kept rewriting
itself.

1. Hosting & Server Infrastructure Alerts

Pantheon Platform Incident Expansion — Platform-wide investigation into unauthorized access now covers multiple customer sites [7].

• CVE / Severity: no CVE assigned / Severity High
• Affected versions: Pantheon platform hosting environments
• Fixed in: Mitigation ongoing; no customer action specified for cross-site access
• Action now:
  • Monitor Pantheon status pages for specific site identifiers.
  • Review audit logs for unusual administrative logins or file changes on Pantheon-hosted sites.

Bulletproof Hosting & Phishing Infrastructure — New Seychelles-based host "Omegatech" has rapidly seized 3% of US financial phishing traffic, utilizing automated AI agents for scale [6].

• Action now:
  • Block traffic from Omegatech-associated IP ranges (not disclosed in sources).
  • Update WAF rules to detect automated AI-driven phishing kit behaviors.

Apple macOS Tahoe/Sonoma/Sequoia Security Update — Critical vulnerability impacting infrastructure management workstations [2].

• CVE / Severity: CVE-2026-65400 / Severity Not Disclosed
• Affected versions: macOS Tahoe, Sequoia, and Sonoma
• Fixed in: macOS updates released week of 2026-09-29
• Action now:
  • Update all macOS workstations used for server administration via System Settings > Software Update.

2. WordPress Plugin & CMS Vulnerabilities

Advanced Post Manager PHP Object Injection — Critical deserialization flaw in a popular plugin maintained by StellarWP/Liquid Web [4].

• CVE / Severity: CVE-2026-97283 / Severity High (Deserialization of Untrusted Data)
• Affected versions: Liquid Web / StellarWP Advanced Post Manager (versions not disclosed in sources)
• Fixed in: Not disclosed in sources
• Action now:
  • wp plugin deactivate advanced-post-manager until a patch is verified.
  • Scan for unusual PHP objects in database options tables.

WP VR Missing Authorization — Access control failure allows unauthorized users to exploit incorrectly configured security levels [1].

• CVE / Severity: CVE-2026-104386 / Severity High
• Affected versions: WPFunnels Team WP VR (versions not disclosed in sources)
• Fixed in: Not disclosed in sources
• Action now:
  • Review wp-vr plugin settings for "Access Control" permissions.
  • Restrict plugin menu access to Administrator roles only via code snippet or security plugin.

WP Admin Audit Missing Authorization — Vulnerability allows non-privileged users to bypass access controls [5].

• CVE / Severity: CVE-2026-105062 / Severity Medium-High
• Affected versions: Brandtoss WP Admin Audit <= 1.2.17
• Fixed in: Not disclosed in sources
• Action now:
  • wp plugin update wp-admin-audit if version > 1.2.17 is available.
  • Verify that audit logs are not accessible to lower-level user roles (Subscriber/Contributor).

Starter Templates (Astra) XSS — Vulnerability in the widely used template importer plugin [13].

• CVE / Severity: no CVE assigned / Severity Medium (Cross-Site Scripting)
• Affected versions: WordPress Starter Templates <= 4.7.7
• Fixed in: Not disclosed in sources (vulnerability reported at 4.7.7)
• Action now:
  • wp plugin update astra-sites to the latest version.
  • Implement a Content Security Policy (CSP) to mitigate unauthorized script execution.

3. Emerging Trends & Strategic Intelligence

• cPanel Pricing Inflation: WebPros has announced further price increases for 2027, with the "Solo" license cost doubling since 2019, impacting hosting margin strategies [9].
• AI-Accelerated Exploitation: Security firms report that AI is now finding and exploiting flaws faster than human teams can patch, significantly shortening the "Time to Exploit" window [3].
• Network Infrastructure: Active exploitation of FortiMail and NetScaler zero-days continues; infrastructure teams should ensure these appliances are isolated from the public web where possible [14].