Two decades
inside the web
as it kept rewriting
itself.
I’m Jason, a hosting industry insider with experience across open-source CMS platforms, control panels, cloud infrastructure, and the events that bring the industry together. Today, I focus on building partnerships, programming industry summits, and documenting what is happening across the hosting ecosystem.
- Aug 10, 2026
DNA Storage in 2026: Did “DNA RAM” Live Up to the Hype?
In 2023, DNA RAM looked ready to transform cloud storage. Three years later, we examine what came true, what did not, and how DNA archives are moving toward commercialization.
Read more→ - Aug 9, 2026
Porkbun’s 4 Million Domains: A Victory for the Long Tail
Porkbun just hit a major domain milestone, but the real story isn't the total count—it's the massive customer base driving it.
Read more→ - Aug 9, 2026
Your Best Resume Is Already Written, and Hidden on Your LinkedIn Profile
LinkedIn can export your profile as a formatted PDF, which means your resume may already be written. Here is how I use that same file to produce speaker bios in minutes.
Read more→
The early 2000s were the good years for tinkerers. Open-source CMS platforms were the closest thing we had to a universal starter kit, and PHP-Nuke and osCommerce were how you learned to ship real projects on the open web. I went deep on Joomla for the better part of a decade, contributing code to the project, organizing its community around releases and events, and eventually crossing over into the WordPress orbit that quietly swallowed everything in its path.
From there the story is a tour of the hosting stack: cPanel and the control-panel era that defined shared hosting, the managed cloud wave at Cloudways and DigitalOcean, and the publishing side at webhosting.today. Day to day now I'm at JetBackup, working on backup and disaster recovery and helping hosts protect the infrastructure that keeps everything running. I also program the seasonal industry summits, Atlas Digital Summit and Domain Days Dubai, where the hosting community gathers to set the agenda for what comes next.
The through-line is community, the conferences, the hallway conversations, and the group chats where the industry actually decides what happens next. The technology changes; the people pointing it in the right direction stay the same.
Twenty-something years,
in reverse.
- 2026 – present
FounderAtlas Digital SummitPrivate gatherings for hosting leaders, AI infrastructure innovators, and the builders of the agentic web.
- 2026 – presentFounderConf64
The Conference Operating System for Business Development and Field Marketing Teams.
- 2026 – present
Co-FounderSuperDeployThe advanced migration engine for AI applications. Seamlessly transition your codebase to independent, production-grade infrastructure in minutes.
- 2025 – 2026Director of Business Developmentwebhosting.today
Contract · Business development and partnerships for the hosting publisher.
- 2024 – presentBusiness Development & Partnerships ManagerJetBackup
Backup and disaster recovery for the hosting ecosystem.
- 2023 – present
Chief Marketing Officer, Founding TeamDomain Days DubaiMENA’s domain and digital asset conference.
- 2021 – 2023Senior Manager, WordPress Business Unit → Lead Community Marketing Manager IICloudways / DigitalOcean
Full-time · WordPress community, field marketing, and sales enablement through the acquisition.
- 2019 – 2021Marketing ManagercPanel
Full-time · Event planner and marketing strategist for 500–3,000 attendee events and virtual series.
- 2017 – 2019FounderCMS Summit
The global CMS conference.
- 2007 – 2019CEO | FounderJoomlaxtc.com / Monev Software LLC
Premium Joomla templates and extensions. 101,000+ members.
- 2015 – 2019Board Member, Capital Team ChairJoomla! Project
Leadership, sponsorships, and partnerships for the open-source CMS.
- 2001 – 2005DeveloperPHP-Nuke · osCommerce era
First shipping code in the early open-source web.
Threat Briefing: cPanel Privilege Escalation and Critical WP Membership Exploit
Infrastructure & Hosting Alerts
cPanel & WHM Database Privilege Escalation — Attackers can elevate privileges via the database management functionality by exploiting a flaw in how databases are renamed [8].
- CVE / severity: CVE-2026-58048 | Severity not disclosed in sources
- Affected versions: cPanel & WHM (Version range not disclosed in sources)
- Fixed in: Not disclosed in sources; consult cPanel security advisories for the latest maintenance release
- Action now:
- Run
/scripts/upcpto ensure the latest security patches are applied. - Review database rename logs for unauthorized administrative changes.
- Run
MOVEit Transfer Session Expiration Vulnerability — Insufficient session expiration allows for potential session hijacking or unauthorized access to managed file transfer infrastructure [4].
- CVE / severity: CVE-2026-15967 | Severity not disclosed in sources
- Affected versions: MOVEit Transfer before 2025.1.5, and 2026.0.0 through 2026.0.2
- Fixed in: 2025.1.5 or 2026.0.3
- Action now:
- Upgrade to fixed versions immediately.
- Audit active sessions and enforce shorter session timeouts in global settings.
WordPress & CMS Security
User Registration & Membership Critical Privilege Escalation — A critical flaw allows unauthenticated users to escalate their privileges, potentially gaining full administrative control of the site [3].
- CVE / severity: CVE-2026-11961 | CRITICAL
- Affected versions: User Registration & Membership plugin before 5.2.3
- Fixed in: 5.2.3
- Action now:
- Update via Dashboard or
wp plugin update user-registration. - Audit the Users list for any new unauthorized Administrator accounts.
- Update via Dashboard or
WP Data Access Unauthenticated AJAX Exploit — A vulnerability in unauthenticated AJAX actions allows for unauthorized data interaction [1].
- CVE / severity: CVE-2026-18032 | Severity not disclosed in sources
- Affected versions: WP Data Access plugin before 5.5.79
- Fixed in: 5.5.79
- Action now:
- Update to version 5.5.79 immediately.
- Use a WAF to block suspicious AJAX calls to
admin-ajax.phptargeting this plugin's actions.
Create Plugin Authorization Bypass — The plugin fails to perform authorization checks before returning sensitive content via specific endpoints [2].
- CVE / severity: CVE-2026-16992 | Severity not disclosed in sources
- Affected versions: Create plugin before 2.5.4
- Fixed in: 2.5.4
- Action now:
- Upgrade to version 2.5.4.
Significant Incidents & Supply Chain
- Swiss Federal IT Breach: Attackers compromised 200 accounts on Swiss government SharePoint infrastructure. While data theft is unconfirmed, infrastructure teams should verify SharePoint patch levels and audit service account permissions [6].
- AI Infrastructure Attacks: A startup named "Irregular" has been linked to recent hacks against major AI providers including OpenAI, Anthropic, and Meta. Hosting providers serving AI workloads should monitor for unusual API traffic patterns originating from this entity [5].
On the
road.
Conferences, summits, and WordCamps I’ll be at in the months ahead.
- Aug 16 – 19, 2026
- Sep 28 – 29, 2026
- Domain Days DubaiRescheduled
New dates to be announced.
Oct 15 – 16, 2026 - Nov 11 – 12, 2026
- State of the WordDec 2026
- Mar 15 – 18, 2027
When the servers
go quiet.
A small digital label putting out industrial house, progressive house, and dubstep. A different kind of open protocol.
Twenty years of showing up for the projects, communities, and voices that keep the open web open.
A news portal covering the hosting and domain industry — and a running excuse to keep talking to the people who build it.