Hosting news, security advisories, and practical guides from NexoraHost.
7 posts
Short version: On 8 September 2026 Microsoft shipped the largest Patch Tuesday so far – about 974 CVEs, including two actively exploited zero-days and several critical bugs in Remote Desktop (RDP). If you run a Windows V-Server or root server, update today and reboot. Not “som…
Read more ↗On September 1, 2026, Mozilla released several security updates for Firefox and Thunderbird. A total of 29 security vulnerabilities were closed in the browser and 30 in the mail client – including 13 classified as "high" severity.
Read more ↗Quick reality check: WordPress 7.1 “Mary Lou” shipped on 19 August 2026. This is not a security drop like 7.0.4. It is a feature release — and on a chunk of VPS sites the only thing left was “There has been a critical error on this website”. Not because core is broken. Because…
Read more ↗Quick reality check: WordPress 7.0.4 shipped on 12 August 2026 — not a feature release, a security fix. CVE-2026-65640 (GHSA-8vr3-7mxf-gx8w) is remote code execution through a file upload. The prerequisites are an Author or higher account plus Imagick and Ghostscript on the se…
Read more ↗Quick reality check: “Local AI” sounds like privacy. In practice, tens of thousands of VPS instances just hang port 11434 on the internet — with no login. Then Ollama is not a private model. It is a public API. Bleeding Llama (CVE-2026-7482) made that brutally obvious in May 2…
Read more ↗Quick reality check: A cheap game server or VPS looks great — until the first DDoS hits. Then slot counts and marketing badges do not matter. Reachability does.
Read more ↗Aktuell wurde eine Sicherheitslücke im Linux-KVM-Virtualisierungsbereich bekannt. Die Schwachstelle CVE-2026-53359 betrifft die KVM-Virtualisierungsschicht und kann unter bestimmten Voraussetzungen die Isolation zwischen einer virtuellen Maschine und dem darunterliegenden Host…
Read more ↗