Lock Down WHM: 2FA, cPHulk and API Tokens for Secure Access
A practical hardening checklist for the WHM control surface after a year of root-escalation CVEs, covering two-factor authentication, cPHulk brute-force protection, Host Access Control restrictions and API tokens with limited privileges.
September 29, 2026
KernelCare Setup on cPanel and DirectAdmin: Reliable Patching
How to install KernelCare live patching on a cPanel or DirectAdmin host, register it, confirm patches are applied for named CVEs, keep it current automatically, and unload patches when a kernel package update or a suspected regression demands it.
September 29, 2026
High Load cPanel Server: Find the Culprit Fast (5 Tools)
A repeatable diagnostic sequence for a cPanel server with a high load average, moving from load composition (CPU, I/O wait, memory pressure) to the process, account, vhost and query responsible, using tools already installed on every server.
September 29, 2026
Imunify360 Under Attack Mode 2026: WAF and L7 Rate Limit
What changed in Imunify360 across the 2026 releases, how the default-on WordPress WAF, the Layer 7 rate limiter and WebShield's Under Attack Mode behave on shared cPanel and CloudLinux servers, and how to tune each without blocking legitimate customers.
September 29, 2026
cPanel Root Escalation Incident Response: Critical First 24 Hours
A structured response plan for a cPanel server that was exposed to one of the 2026 root-escalation vulnerabilities before patching, covering containment, evidence capture, indicators of the .sorry ransomware campaign, credential rotation, session and token audits, and the decision to rebuild.
September 29, 2026
InnoDB Tuning MariaDB 11/12: Shared Hosting Settings
Practical InnoDB settings for a cPanel shared server on MariaDB 11.4, 11.8 or 12.3, with sizing rules for the buffer pool and redo log, the I/O settings that matter on NVMe, what the modern defaults already get right, and how to measure the result.
September 29, 2026
Install cPanel AlmaLinux 10: 2026 Checklist
A practical checklist for installing cPanel & WHM on a fresh AlmaLinux 10 server, covering the pre-flight requirements that break installs, the installer itself, and the first WHM settings to lock down.
September 29, 2026
Exim 4.100 Security Fixes: Critical 2026 Changes for Hosting
A hosting administrator summary of the 2026 Exim security fixes (CVE-2026-40684 to 40687 and the .forward privilege escalation), the cPanel and DirectAdmin builds that carry them, what changed in 4.100, and how to confirm a server is patched.
September 29, 2026
Harden Shared cPanel Server: Secure CageFS and ModSecurity Setup
A layered hardening plan for multi-tenant cPanel hosts on CloudLinux or AlmaLinux, covering CageFS isolation, ModSecurity with the OWASP Core Rule Set, and malware scanning with Imunify360, ImunifyAV or ClamAV.
September 29, 2026
Dovecot 2.4 Mail Login Failed: Fix Broken Logins on cPanel
After cPanel moved to Dovecot 2.4 with stronger mail password hashing, some mailboxes fail to authenticate or old clients cannot connect. This guide identifies the failing cases from the mail log and resolves them with password resets, protocol settings and client reconfiguration.
September 29, 2026
Dovecot Sieve Filters Roundcube: Mail Rules on cPanel
cPanel & WHM 132 moved to Dovecot 2.4 and enabled Sieve filtering with a managesieve plugin in Roundcube. This guide covers enabling the feature, creating filters in Roundcube, how Sieve coexists with legacy cPanel filters, and the server-side files involved.
September 29, 2026
EasyApache 4 PHP Versions 8.2 to 8.5: Install and Switch
How to add PHP 8.2 through 8.5 to a cPanel server with EasyApache 4, choose which extensions each version gets, set the system default and switch individual domains, using both WHM and the command line.
September 29, 2026