Security advisories, incidents and guides around servers, web hosting and domains – written from our own operations.
Rank Math SEO PRO 3.0.123 contained malware, and UpdraftCentral connection keys were stolen at TeamUpdraft. Here is who is affected, how to check your WordPress installation and what to do if you find something.
Read moreDiscover more interesting articles and news
Two vulnerabilities in PHP allow remote code execution, both rated CVSS 9.2. How we switched things off before the patch, when each system went back online, and what is behind the claims about bypasses.
A guest breaks out of its KVM VM and gets root on the host: PwnEscape (CVE-2026-99999) is rated critical with CVSS 9.8. What the vulnerability is, who it affects, and how you check in five steps whether your kernel already closes it.
After the October 13, 2026 Patch Tuesday, Remote Desktop connections from non-administrators fail with 0xC000000D. Microsoft names Administrator Protection as the trigger. Here is who is affected, what the official workaround is and what to keep in mind with Windows servers.
Since October 13, 2026, Microsoft has begun blocking the remnants of NTLMv1 in Windows 11 24H2 and Windows Server 2025 via update. Here is what changes, who is affected, and how to check in five steps whether anything breaks on your Windows root server.
OpenSSH 10.6 fixes eleven security bugs, and Debian 12 and 13 don't have a package yet. We checked which vulnerabilities apply with default settings and how you can defuse them until the update arrives.
On September 29, 2026, the OpenSSL project closed a severe DTLS vulnerability (CVE-2026-84782, CVSS 8.8). Here is which versions are affected, which version you should update to, and how to check that the update actually takes effect.
CERT-Bund is warning about vulnerabilities in Froxlor. If you run the hosting panel on your own root server, you should check the version, its reachability and the system for traces. This post gives the order to work through.
CERT-Bund has published an advisory on Webmin. If an admin panel with root privileges is running on your root server, now's a good time for a five-minute check: version, reachability, access restriction.
Microsoft is retiring VBScript – and with it, in the medium term, slmgr.vbs, the standard tool for command-line activation of Windows. The replacement is called OSLicense: a PowerShell module with eleven cmdlets that's supposed to show up in Windows 11 25H2, while Windows Server won't catch up until the next major release. What this means for admins who script activation today.
CERT-Bund reports a privilege escalation in NetworkManager on RHEL/CentOS derivatives under WID-SEC-2026-2977. What this means for root servers running AlmaLinux, Rocky Linux and similar distributions, how to check your version and apply updates — step by step, including a warning about restarting remotely.
A missing or incorrect PTR record is one of the most common reasons self-hosted mail servers end up in the spam folder or get rejected outright. Here's how to find out what's set for your IP, and how to fix it.
CERT-Bund has published an advisory on security vulnerabilities in BIND under WID-SEC-2026-2484. If you run your own nameserver, we'll show you in a few steps how to check version, exposure, and configuration.
Password login over SSH is the most common way outsiders become root. Generate a key pair, disable password login, change the port, and set up fail2ban – step by step, with the commands to follow along.
A parameter in the two-factor login flow made the password check fail entirely: in Proxmox VE 7, attackers could log in as root without any credentials. The flaw was fixed by accident in July 2023, but the fix was never backported to VE 7 — and it has been actively exploited since late August. Prepaid-Host is not affected.
Hypixel Studios publishes no official server requirements — the figures in the common guides are estimates. We run Hytale servers ourselves and lay out what they actually need, what the three approaches cost, and when each one pays off.
A BGP hijack took over Virtualizor's update channel. The attacker obtained a valid Let's Encrypt certificate and shipped a tampered package. Prepaid-Host is not affected — if you run Virtualizor yourself, you should act now.
An open RDP port 3389 on any public Windows server gets scanned and attacked within minutes. Here's how to properly secure access with a firewall rule, NLA, account lockout, and VPN – step by step, with PowerShell commands and a checklist.
How Let's Encrypt works under the hood, why the certificate on our web hosting renews itself automatically, and what to do when renewal fails: Port 80, DNS records, wildcards, reverse proxies.
On 1 August 2026 we're adjusting the prices of some older, RAM-heavy root server promo plans – for renewals only and no more than +35 %. Why RAM, NVMe and IPv4 became scarce at the same time – and what changes for you and what does not.
_6a4f6e96d67aa.png)
New in the Prepaid-Host panel: our monitoring watches your servers, domains and services around the clock from 7 European locations – with consensus checks against false alarms, heartbeat for cron jobs and SSL expiry warnings. Powered by our partner Uptimeify, billed in the familiar prepaid model with no contract term. From €2.99/month, 30 days free.
 (1)_6953d52e2a4a4.jpg)
Dear customers, dear partners, 2025 was a year in which Prepaid-Host did two things at once: scale –…
_68db814a1488f.jpg)
A safe, step-by-step guide to upgrading your server from Debian 12 to Debian 13 "Trixie" — preparation, the upgrade itself, and post-upgrade cleanup.
_67e3d65a78270.jpg)
Fixed-term contract or flexible prepaid hosting? We compare both models in detail and help you work out which fits your website, server, or next project.
Storage Failure Incident report 11th of March 2025 On March 10th, 2025, our provided services experienced an outage…
_677d34cd3e8bb.jpg)
Finding the perfect web hosting for your website doesn't have to be complicated! At Prepaid-Host we offer everything you need for a successful online presence – from website hosting in Germany with state-of-the-art GDPR-compliant security to SSL certificates and DDoS-protected hosting.
_6768702e9b65f.jpg)
Dear customers, dear partners, the year is drawing to a close and we thank you sincerely for the…
 (1)_67190a6595016.png)
Domain Names: How Do You Choose the Right One? Choosing a domain name is a crucial step in…
_66b0b631256de.jpg)
The popular open-source ERP software Apache OFBiz, used worldwide by numerous companies to automate business processes, is affected…
_6627a2c5b3ed4.jpg)
Dear customers, partners, and friends of Prepaid-Host, we have news for you! To keep expanding our payment methods and better meet your needs, we're adding an exciting new option. Starting now, you can pay for our services...
_658da4393e104.png)
Dear customers, dear partners, and dear employees, the year is drawing to a close, and we would like…
Dear customers, we are proud to announce that we have equipped our infrastructure with a powerful Arista DCS-7304…
Good news for all Prepaid-Host domain customers: we've upgraded our nameservers and now offer an even more powerful,…
_64e3990417e60.jpg)
Today we're celebrating our 5th anniversary and couldn't be prouder! From a one-man business to a motivated team…
We'd like to inform you today about a change to our payment methods. Over the past few months…
ActivePieces is an open-source alternative to Zapier focused on automating business processes. With the option to self-host or use the cloud, ActivePieces offers a wide range of ways to automate your daily tasks or your entire business.
Today we take a look at some of the most exciting developments in DevOps. We focus on containerization and orchestration with Docker and Kubernetes, look at the role of CI/CD pipelines, and see how all these elements work together to improve DevOps processes.
We're pleased to announce that as of June 10, 2023, the latest version - Debian 12 "Bookworm" - is available. In this post, we'll give you a detailed look at the exciting changes and new features that define this release.
Want to install JDK 19 on your Debian or Ubuntu server? No problem! This post walks you through installing the Java Development Kit (JDK) 19 on your Debian or Ubuntu system step by step.
In the fast-moving world of technology, continuous evolution drives progress. Two trends that have shaped the industry in recent years are DevOps and the growing popularity of low-code/no-code development. In this post we look at how the shift to low-code/no-code development is changing the DevOps landscape and what this means for hosting companies like us.
In the world of web hosting and data management, it's important to always stay up to date, especially…
Two critical vulnerabilities were found in widely used WordPress plugins: Essential Addons for Elementor and Elementor Pro combined with WooCommerce. Here's what's affected and how to fix it.
Today I want to show you how to install Java 8 on your Debian server, even though it has officially reached end of life (EOL). Be aware that using EOL software carries risks, since no further updates or security patches will be provided.
Artificial intelligence is a technology developing at breakneck speed, leading us into a world full of possibilities. In this blog we describe what impact AI can have on our future and what new paths it will open up for us. Get ready for an exciting glimpse into the future AI offers us!
In the digital age, search engine optimization (SEO) plays a crucial role in a website's success. In this…
Today is WorldBackupDay, and we want to use this occasion to highlight the importance of backups and data security. In this blog post you'll learn everything worth knowing about backups – from the definition through the different types to tips on how to protect your data.
Website hosting: how much does it cost? Website hosting is an ongoing cost and shouldn't be underestimated. It's…
PHP 8 is the newest version of the PHP programming language. It brings a range of new features and improvements that make building websites and applications easier.
Plesk GmbH is raising its prices again this year, affecting all Plesk customers worldwide. Because of this, we also have to adjust our prices.
Dear customers, partners, and team members, the year is drawing to a close and we want to thank…
_631f605726511.png)
A step-by-step guide to setting up a complete web stack on Debian 10/11 or Ubuntu 20.04/22.04: Apache2, PHP 8, MariaDB and phpMyAdmin, including the database login options you will need afterwards.
Installing DNSMASQ on Debian and Ubuntu What is a DNS server? DNS servers are responsible for resolving domain…
Secure our summer top-up bonus by Sunday, July 24! As hot as it is in Frankfurt am Main…
Windows Server 2019 is now available for our KVM root servers at no extra cost, starting with configurations from 3.65€/month. The system installs fully automatically within 5 minutes.
In this blog article I want to show you how you can change Minecraft on Debian 9/10/11. First…
In this blog article, I want to show you how to install PHP 8 on Debian 9/10/11. First,…
In this blog post I want to show you how to install PHP 7.4 on Debian 9/10/11. First…
In this blog article I want to show you how to change your hostname in Debian 8/9/10/11. First…
In this blog article I want to show you how to change your password in Linux. First we…
In this blog article I'll show you how to install Java 16 on Debian 10. Now let's run…
As already announced with much fanfare, our move to the new data center of Maincubes One GmbH took…
On 28.11.2020 at 01:00 (UTC+1) we are planning extensive maintenance work on our entire infrastructure. During the maintenance…
The principles this blog is written under are set out in the editorial section. RSS feed
