CloudLinux

Missed our session on the 2026 kernel exploit wave? The recording is up. In 45 minutes we covered: 16 named exploits on a timeline, and the future trend we expect What rebooting a fleet costs, from OVH's own post-mortem How KernelCare applies live patches while you keep serving traffic Concrete paths to a patched fleet, including the two-week free trial Watch on demand: https://hubs.ly/Q04yjbN50

MariaDB 10.6 hit end of life on July 6, 2026. Security patches stopped. Many hosting fleets are still running it. Here's the part that matters: 10.6 wasn't neglected. MariaDB shipped 79 fixes across 17 releases in five years. The last one, 40 days before EOL, closed a CVSS 10.0 vulnerability. Such a clean record comes from active maintenance, not sturdy software. Maintenance stopped at EOL. Exposure didn't. On a shared server, one unpatched database puts every site on it at risk, at once. For hosting providers running 10.6 across a fleet, migrating on the vendor's deadline means testing, downtime, and risk hitting every customer at the same time. With Endless Lifecycle Support (ELS) for MariaDB from CloudLinux and TuxCare, our sister company, there are two ways to handle it: - Keep 10.6 patched past EOL - Use ELS to properly prepare for migration Same version, standard yum/dnf updates, no forced downtime. Still running 10.6 somewhere? Learn more: https://hubs.ly/Q04xDLWj0 #EndOfLifeSupport #MariaDB #Security

In July, OVH rebooted tens of thousands of hosts running roughly 1M customer VMs to patch one kernel bug. Their own post-mortem says the procedure "will need to be repeated." The next KVM bug landed 18 days later. The fix those reboots delivered was on KernelCare's live patch feed by July 10. Running kernels got it without stopping. Tomorrow, live with Web Hosting Talk, we cover that gap: 45 minutes on the 2026 kernel exploit wave and how fleets stay patched without rebooting. Free, with live Q&A. Save your seat: https://hubs.ly/Q04y76-h0@

A kernel CVE drops on a Tuesday. On a mixed 40-server fleet, 24 AlmaLinux, 12 Ubuntu, 4 CentOS 7, that one CVE becomes 24 reboot notices and ~4,300 affected accounts. And a reboot calendar that takes two weeks to drain. The obvious fix doesn’t fix much: * kpatch → Red Hat * Canonical Livepatch → Ubuntu * Ksplice → Oracle Three distros. Three agents. Three consoles. And CentOS 7 still gets nothing because there’s no upstream fix left to backport. A cross-distro, rebootless approach changes the math: 36 of 40 servers patch in the next check cycle, no reboot. The four CentOS 7 machines get a backported fix through their existing package manager. No reboot. No maintenance notice. No reseller forwarding it. No midnight ticket. Because the real cost of a reboot isn’t the 90 seconds of downtime. It’s everything that follows. OCLC saw a 72% reduction in patching time and a 90% drop in vulnerability exposure window after switching to KernelCare and ELS. What does an unplanned reboot actually cost your support team in tickets? Full math + the 5-question checklist for evaluating patch tooling: https://hubs.ly/Q04y1w320

Email issues are one of the biggest support drains for hosting providers. In our 2026 Web Hosting Trends Report, 42% of hosters cited spam, blacklisting, and deliverability as a top resource drain, followed by CMS/application issues (39%) and performance and security incidents (35%). And the security risks behind the workload are clear: ✔️ 53% — outdated or vulnerable software ✔️ 51% — malware and ransomware ✔️ 40% — DDoS attacks ✔️ 36% — bot traffic ✔️ 34% — outbound spam and blacklisting Which of these is costing you the most time these days and what have you managed to automate? Our 2027 Industry Year in Review survey, by CloudLinux and WebPros , is now open. Take the survey 👉https://hubs.ly/Q04y1nGv0

We have 15 seats for Atlas Digital Summit 2026. Not 15 discounts — 15 seats, and that's the whole allocation. They're for the partners and customers we actually work with. The summit is private and invite-only: 28–29 September, Reykjavík. Two days of hosting executives on AI, strategy and the future hosting stack — in rooms small enough that you talk instead of listen. If Reykjavík is a maybe, claim a seat now and decide later. Registration link is in the first comment. Already going? Say so below — we'd rather book proper time with you than find you at the coffee station. #AISecurity #WebHosting #AtlasDigitalSummit

A single overloaded hosting account shouldn’t slow down every other site on the server. On many shared boxes, it still does. Lightweight Virtualized Environment (LVE) limits resources, capping CPU, memory, and I/O to fix that directly. Any account may spike, but it won’t take down the rest of the server. Performance issues eat 35% of technical support time. Together with security incidents, these are the top demands for support teams. With CloudLinux, a “my site is slow” ticket turns into a two-minute resource check instead of a server-wide investigation. It often becomes an opportunity to offer a higher-tier hosting package. CageFS, a virtualized filesystem, walls off each account so it can't reach anyone else's files. Same isolation, just applied to security instead of resources. CloudLinux runs both LVE and CageFS together with WordPress performance tools. It works with cPanel, Plesk, and DirectAdmin. Run the full feature set for 30 days on your own servers before deciding anything: https://hubs.ly/Q04xDJsK0 #WebHosting #CloudLinux

Stop selling boxes. Start selling VPS plans. A spec sheet describes the box. A plan provides perspective and peace of mind. Root access alone is just a feature. The CloudLinux account isolation makes sites faster and harder to compromise. Automated security is what actually clears the backlog: HostArmada cut hacked-site support tickets 70–80% after deploying Imunify360. That combination is the managed VPS pitch: control the provider can point to, and security customers don't have to think about. Get Back to business. Don't run VPS without our Bundle Offer. https://hubs.ly/Q04xDHP70 #hosting #VPS #managedhosting #cloudlinux #imunify360

In 2005, Juan Manuel Zolezzi Volpi couldn't find a hosting provider to match his needs, so he built the service he wished he'd had. 21 years later, that same instinct led Duplika to fix a gap in its own VPS plans: CloudLinux and Imunify360 were optional, and customers who skipped them got a rougher experience. Duplika made the bundle standard on every VPS plan: ✅ Under 1 month from decision to live ✅ Fewer complaints since the bundle became standard ✅ More time for the hands-on support the brand is built on Read the full story: https://hubs.ly/Q04xmslh0 Explore the VPS Bundle: https://hubs.ly/Q04xmsvQ0

65% of hosting providers grew revenue in 2025. The two threats they named most for the year ahead pulled in opposite directions. From the 2026 Web Hosting Trends Report, based on 446 provider responses: 29% pointed to price competition from low-cost providers, and 28% pointed to rising costs for things like energy, software licenses, and hardware. Squeezed from below on price, squeezed from above on cost. A year on, we want to know which way it went. Did you raise prices? Change your mix? Cut something? The 2027 Industry Year in Review survey, run with WebPros, is open now. Take the survey 👉 https://hubs.ly/Q04x6DYn0 #WebHosting #HostingTrends #CloudLinux #WebPros