core-js is a popular - very popular - Javascript package which is the epitome of the XKCD "one man in Nebraska maintains a package that underpins the whole Internet" phenomenon. Its history is a somewhat amazing - and rather cautionary - tale about how pride of ownership can blind someone to nearly anything.
Read More about The Tragedy of core-js: an Opinionated Take on Why Denis Pushkarev Needs to Let It Go
CVE-2026-58048 "Database Privilege Escalation" is making the rounds. If you haven't seen it, be advised that your cPanel is probably vulnerable. It affects at least all supported versions.
Read More about So What’s Up With That New cPanel Database Vulnerability?
Back in 2024, Leupold Aschenbrenner published Situational Awareness, which we here at LowEndBox termed "The Best Read of the Year". Two years later, he's bankrupt.
Read More about Deep Intel on the Three Reasons Situational Awareness Imploded
We recently sat down with M'Barek Dhibi, CEO of Pawnhoster, to learn more about this emerging company and what they offer in shared - and soon VPS - hosting.
Read More about One Step at a Time: Interview with M’barek Dhibi, CEO and Founder of Pawnhoster, Plus a Deal for You!
If you bought Cyberpunk 2077, you got a digital bonus you may have not collected: a PDF version of the tabletop roleplaying game Cyberpunk 2020.
Read More about Deep Lore on the Tabletop Roleplaying Game You May Own Without Knowing It: Cyberpunk 2020
Postgres was recently rewritten in Rust in a month. Someone vibe-coded their own OS in the same period of time. The, um, bright and shining future is here?!?
Read More about The Era of Vibe-Coded Operating Systems is Upon Us
Ginernet now requires subscribers to upload a selfie or lose access to their VPS control panel. And by default, this selfie will be used to train AI models.
Read More about Ginernet “Made a Decision”: Upload a Selfie or No Control Panel for You!
Blesta customers got an email from hackers saying the billing software's servers had been hacked. And the email looks legit. Uh oh.
Read More about Blesta Hacked – Ransom Gang Threatens to Leak Customer Details Tomorrow
The YouTube app is actually an authenticator. And that's an inconvenience.
Read More about The YouTube App is an Authenticator…and That’s a Problem
Dutch financial crime investigators have seized more than 800 servers in a major enforcement action tied to Stark Industries Solutions, a hosting network accused by European authorities of supporting...
Read More about Dutch Authorities Seize 800 Servers in Stark Industries Sanctions Case
CVE-2026-48172: Root Privilege Escalation in LiteSpeed cPanel Plugin A critical vulnerability, identified as CVE-2026-48172, affects the LiteSpeed User-End cPanel Plugin versions 2.3 through 2.4.4. This security flaw carries a CVSS v4.0 score of 10.0, marking it as highly severe.
Read More about Critical Vulnerability Alert: CVE-2026-48172 – LiteSpeed cPanel Plugin Root Privilege Escalation Under Active Exploitation
Over the last week, I've interacted with a couple traditional forums, and they were case lessons in how not to run a forum in 2026.
Read More about How Not to Run a Forum in 2026: Two Prime Examples
Is your business still tied down by ballooning cPanel licensing fees and recent multi-tenant security scares? Following the disclosure of critical Linux kernel vulnerabilities (such as the FD-Theft root-file access exploit), webmasters and developers around the globe are migrating to lightweight, highly secure, and cost-effective alternatives. Limitless Hosting is here to help you make the smart switch!
Read More about High-Performance DirectAdmin Shared & Reseller Deals from Limitless Hosting, Starting at Only $3/YEAR!
How does post-quantum encrypted email, calendar, contacts, and drive with hardware-verified security for FREE sound to you? Break out your crytography text book and let's learn a bit about bmail's offerings.
Read More about bmail: Your Inbox’s Best-Kept Bimil (What Does That Word Even Mean?)
Richard Stallman of the GNU project is famous for his absolutist stand on software freedom. But he also takes a maximalist stance on privacy, resisting any attempt to gather his personal information, including his refusal to own a cellphone. He's very hypocritical on this point, but he's also strayed into wild-eyed conspiracy theories on his reasons for this position.
Read More about Richard Stallman (rms) is Wrong When He Claims Every Cellphone has a Back Door
Dasabo was acquired by Dasabo. That actually makes sense in context. What followed next, though, does not...
Read More about Dasabo Acquired by Dasabo, and Then All Hell Broke Loose
Just a a couple weeks ago, we covered HostPapa's acquisition of Tailor Made Services. Now they've grown again, acquiring Hostwinds, a Seattle-based company that's been operating for 16 years. Hostwinds offers shared, VPS, and other services.
Read More about On a Roll! HostPapa Continues Its Acquisition Spree by Adding Hostwinds to Its Portfolio
The world's most popular (and expensive) web hosting panel is apparently vulnerable to anyone who decides to connect to your port 2087.
Read More about Achtung! Critical cPanel Vulnerability: Take Action Now!
You should update your Debian system every night, unattended and automatic. Bold words! But honestly I've done this since at least Debian 10 and have never had an issue.
Read More about You Should Update Your Debian System Every Night, Unattended and Automatic.
HostPapa, a leading global web hosting and cloud service provider, today announced that it has completed the acquisition of Tailor Made Servers (“TMS”), a Dallas, Texas-based dedicated server hosting provider that has been serving businesses and resellers since 2003.
Read More about HostPapa Completes Acquisition of Tailor Made ServersYesterday, we talked about how Calude's Mythos model is over-hyped. I should have googled a little further because there's a great piece of evidence out there.
Read More about I Should Have Read Further: Small Models Find the Same Bugs as the Vaunted Claude Mythos
Is Claude's new AI model, Mythos, really so incredibly godlike that it's a threat to the Internet? I wish this one was on Polymarket.
Read More about Too Dangerous to Release? Why Claude Mythos’s Alleged Capabilities are Nonsense
Mango Mail has launched their spring sale and they have a great deal on high quality, feature-packed email hosting. Get 35% OFF if you use the code below That makes their 30GB plan only $3.50/mo! Or i...
Read More about Mango Mail’s Spring Sale Has Begun! Get 35% OFF With This Code: 30GB Plan is Only $3.50/Month!
The name "Buffalo" is legendary in our community. It's a city in Western New York state where ColoCrossing has offered service since the earliest days of LowEndBox. It's a strategic geography - close enough to New York City to serve the East Coast very well, yet much cheaper than operating out of a Manhattan data center. This has allowed them offer wonderfully low prices, and over the years many providers have hosted there. And now ColoCrossing is expanding!
Read More about NEWS: ColoCrossing Expands Buffalo Data Center to Support Growing Infrastructure Demands
We're in the middle of a series on LowEndBoxTV on the exploding world of AI companions. This market is huge and millions of people are using these applications and services. We're going to give you a comprehensive overview, a deep dive into the tech, some problems and issues, the major options, and finally a DIY tutorial using SillyTavern. Enjoy!
Read More about LowEndBoxTV: AI Companions, Part 3: Options and Services (Nomi, Kindroid, SillyTavern, ChatGPT, Claude, and More!)
Yih-Shyan “Wally” Liaw, one of the founders of server manufacturer SuperMicro, has been indicted on charges of smuggling billions of dollars' worth of high-end Nvidia GPUs to China.
Read More about SuperMicro Founder Indicted on Charges of Smuggling Nvidia GPUs to China
TrueNAS has eliminated the ability to reproduce their ISO. Is this the beginning of the end of the community edition?
Read More about Is TrueNAS Killing Its Community Edition? Say It Ain’t So!
Now that reimplementing software is so easy to do, copyleft is crumbling. The Linux kernel may well be next.
Read More about The Linux Kernel Will Soon Be MIT-Licensed and Copyleft Will Be Dead Within 5 Years
Aug 05, 2026
Aug 04, 2026
Aug 04, 2026
Aug 04, 2026
LowEndBox is a long-running resource for cheap VPS, budget hosting deals, and hosting industry news.
Our coverage blends curated offers with community insight and practical experience.
LowEndTalk is our active hosting discussion forum, while
ServerVerify helps users compare real-world server performance
and provider data.
[Learn more about our Platform]
ravi / Aug 05, 2026
3K33 / Aug 05, 2026
trumvps / Aug 02, 2026
rustelekom / Aug 05, 2026
