Introduction to CVE-2026-25742 Vulnerability The cybersecurity landscape changes rapidly, and new vulnerabilities can pose risks to your infrastructure. The CVE-2026-25742 vulnerability in Zulip highlights the need for robust server security measures. System administrators and hosting providers must stay vigilant to protect Linux servers from potential threats. Understanding CVE-2026-25742 Prior to version 11.6, Zulip, an open-source […]

Understanding CVE-2026-26058: A Path Traversal Vulnerability in Zulip Zulip is an open-source team collaboration tool. Recently, a critical vulnerability, CVE-2026-26058, was discovered which could impact server security. This vulnerability exists from version 1.4.0 through to just before version 11.6, allowing attackers to exploit servers by leveraging path traversal techniques during the import process. What Happened? […]

Introduction to CVE-2026-25742 Vulnerability The cybersecurity landscape changes rapidly, and new vulnerabilities can pose risks to your infrastructure. The CVE-2026-25742 vulnerability in Zulip highlights the need for robust server security measures. System administrators and hosting providers must stay vigilant to protect Linux servers from potential threats. Understanding CVE-2026-25742 Prior to version 11.6, Zulip, an open-source […]

Understanding CVE-2026-26058: A Path Traversal Vulnerability in Zulip Zulip is an open-source team collaboration tool. Recently, a critical vulnerability, CVE-2026-26058, was discovered which could impact server security. This vulnerability exists from version 1.4.0 through to just before version 11.6, allowing attackers to exploit servers by leveraging path traversal techniques during the import process. What Happened? […]

TLDR: You’ve asked for this many times We created BitNinja with a vision in mind: let’s make the internet a safer place together! During the past few months, we’ve been so focused on the first part that we almost forgot about the most important bit - ‘together.’ To be completely honest, we’ve been terrible at […]

You might already have the feeling that something is in the making. We have recently published a release note telling the news about our VzLinux certification. But now it is out! BitNinja Server Security is integrated with the Virtuozzo Application Platform - the elastic, high-performance Platform as a Service solution! And we are heading for […]

We will never limit the rate of our development process!  The rate of cyber attacks grows without limits day by day! Hmm, can you guess the topic of our new release note? 😏 Yes, it is about Rate Limiting. Our users have asked for it and we delivered: with the 2.29.0 version of BitNinja, we […]

We were busy working on something important. We believe we need to fight off hackers on more fronts, and we are committed to our vision of BitNinja as a simple and frictionless security service that is compatible with multiple platforms.  BitNinja supports most modern Linux distributions, but something was missing. So, we are happy to […]

Security can be manageable. Security can be translated into profit. We understand that in the competitive web hosting industry, providers need efficient, stable, and resource-friendly solutions so that they can focus on growth and high-value pursuits. So, with the release of our WHMCS module, we've made sure that managing and generating additional revenue has become […]

On the 10th of December, bleepingcomputer.com reported an exploit for a critical zero-day vulnerability called "Log4Shell". It has been exposed for the Apache Log4j Java-based logging platform used to access the web server and application logs. About the vulnerability To exploit this vulnerability, an attacker could modify the user agent of a web browser to access the […]

Since the beginning of the 2000s, phishing has been the most popular tool used by attackers to steal sensitive information, and it works. Everyone, from the CEO of a company to the average user, is regularly targeted.  A successful phishing attack can retrieve your confidential information that may be used to do nasty stuff like […]

We won’t stop until we have caught all of the malware around the world. With this in mind, we made some developments again in the Anti-Malware Module. Let’s see what has changed! Refreshed Anti-Malware Section on the Console It is now much easier to start a Malware Scan. Just go to the Anti-Malware section on […]

A Fresh Approach to Cybersecurity Planning for Web Hosters In modern times websites are a key pillar for doing business. What looks appealing and engaging on the front end takes considerable effort to maintain on the backend. Treated as a commodity, these digital spaces are challenged every second of the day. The frontline of maintaining […]

CVE-2026-28766: A Critical Vulnerability in Gardyn Cloud API The Gardyn Cloud API has exposed a severe vulnerability known as CVE-2026-28766. This critical flaw allows unauthorized access to all user account data without any authentication requirements. Understanding the Incident This vulnerability has been given a CVSS score of 9.3, indicating a critical risk level. It enables […]

Understanding CVE-2026-28767: A Critical Vulnerability In recent cybersecurity news, a major vulnerability has been identified as CVE-2026-28767. This flaw in the Gardyn Cloud API allows unauthorized access to sensitive administrative endpoints. It raises significant concerns for server security, particularly for system administrators and hosting providers. Details of the Vulnerability The CVE-2026-28767 vulnerability relates to a […]

Critical Vulnerability in Gardyn Cloud API: CVE-2026-25197 The recent discovery of a severe vulnerability in the Gardyn Cloud API has raised significant alarms in the cybersecurity community. This vulnerability, known as CVE-2026-25197, allows authenticated users to access other user profiles by modifying the ID number within the API call. This oversight opens the door to […]