Security·
70 million domains had a no-password root bypass. cPanel rushed an emergency patch.
cPanel shipped fixes April 28 for a CVSS 9.8 auth bypass that walks attackers into shared-hosting panels with no password. WatchTowr says exploitation started before the patch.