Product announcements, year-end reports and news from Prepaid-Host.
After the October 13, 2026 Patch Tuesday, Remote Desktop connections from non-administrators fail with 0xC000000D. Microsoft names Administrator Protection as the trigger. Here is who is affected, what the official workaround is and what to keep in mind with Windows servers.
Since October 13, 2026, Microsoft has begun blocking the remnants of NTLMv1 in Windows 11 24H2 and Windows Server 2025 via update. Here is what changes, who is affected, and how to check in five steps whether anything breaks on your Windows root server.
OpenSSH 10.6 fixes eleven security bugs, and Debian 12 and 13 don't have a package yet. We checked which vulnerabilities apply with default settings and how you can defuse them until the update arrives.
On September 29, 2026, the OpenSSL project closed a severe DTLS vulnerability (CVE-2026-84782, CVSS 8.8). Here is which versions are affected, which version you should update to, and how to check that the update actually takes effect.
CERT-Bund is warning about vulnerabilities in Froxlor. If you run the hosting panel on your own root server, you should check the version, its reachability and the system for traces. This post gives the order to work through.
CERT-Bund has published an advisory on Webmin. If an admin panel with root privileges is running on your root server, now's a good time for a five-minute check: version, reachability, access restriction.
Microsoft is retiring VBScript – and with it, in the medium term, slmgr.vbs, the standard tool for command-line activation of Windows. The replacement is called OSLicense: a PowerShell module with eleven cmdlets that's supposed to show up in Windows 11 25H2, while Windows Server won't catch up until the next major release. What this means for admins who script activation today.
CERT-Bund reports a privilege escalation in NetworkManager on RHEL/CentOS derivatives under WID-SEC-2026-2977. What this means for root servers running AlmaLinux, Rocky Linux and similar distributions, how to check your version and apply updates — step by step, including a warning about restarting remotely.
A missing or incorrect PTR record is one of the most common reasons self-hosted mail servers end up in the spam folder or get rejected outright. Here's how to find out what's set for your IP, and how to fix it.
CERT-Bund has published an advisory on security vulnerabilities in BIND under WID-SEC-2026-2484. If you run your own nameserver, we'll show you in a few steps how to check version, exposure, and configuration.
Password login over SSH is the most common way outsiders become root. Generate a key pair, disable password login, change the port, and set up fail2ban – step by step, with the commands to follow along.
A parameter in the two-factor login flow made the password check fail entirely: in Proxmox VE 7, attackers could log in as root without any credentials. The flaw was fixed by accident in July 2023, but the fix was never backported to VE 7 — and it has been actively exploited since late August. Prepaid-Host is not affected.
A BGP hijack took over Virtualizor's update channel. The attacker obtained a valid Let's Encrypt certificate and shipped a tampered package. Prepaid-Host is not affected — if you run Virtualizor yourself, you should act now.
An open RDP port 3389 on any public Windows server gets scanned and attacked within minutes. Here's how to properly secure access with a firewall rule, NLA, account lockout, and VPN – step by step, with PowerShell commands and a checklist.
How Let's Encrypt works under the hood, why the certificate on our web hosting renews itself automatically, and what to do when renewal fails: Port 80, DNS records, wildcards, reverse proxies.
On 1 August 2026 we're adjusting the prices of some older, RAM-heavy root server promo plans – for renewals only and no more than +35 %. Why RAM, NVMe and IPv4 became scarce at the same time – and what changes for you and what does not.
_6a4f6e96d67aa.png)
New in the Prepaid-Host panel: our monitoring watches your servers, domains and services around the clock from 7 European locations – with consensus checks against false alarms, heartbeat for cron jobs and SSL expiry warnings. Powered by our partner Uptimeify, billed in the familiar prepaid model with no contract term. From €2.99/month, 30 days free.
_677d34cd3e8bb.jpg)
Finding the perfect web hosting for your website doesn't have to be complicated! At Prepaid-Host we offer everything you need for a successful online presence – from website hosting in Germany with state-of-the-art GDPR-compliant security to SSL certificates and DDoS-protected hosting.
_6627a2c5b3ed4.jpg)
Dear customers, partners, and friends of Prepaid-Host, we have news for you! To keep expanding our payment methods and better meet your needs, we're adding an exciting new option. Starting now, you can pay for our services...
ActivePieces is an open-source alternative to Zapier focused on automating business processes. With the option to self-host or use the cloud, ActivePieces offers a wide range of ways to automate your daily tasks or your entire business.
Today we take a look at some of the most exciting developments in DevOps. We focus on containerization and orchestration with Docker and Kubernetes, look at the role of CI/CD pipelines, and see how all these elements work together to improve DevOps processes.
We're pleased to announce that as of June 10, 2023, the latest version - Debian 12 "Bookworm" - is available. In this post, we'll give you a detailed look at the exciting changes and new features that define this release.
In the fast-moving world of technology, continuous evolution drives progress. Two trends that have shaped the industry in recent years are DevOps and the growing popularity of low-code/no-code development. In this post we look at how the shift to low-code/no-code development is changing the DevOps landscape and what this means for hosting companies like us.
Artificial intelligence is a technology developing at breakneck speed, leading us into a world full of possibilities. In this blog we describe what impact AI can have on our future and what new paths it will open up for us. Get ready for an exciting glimpse into the future AI offers us!
Today is WorldBackupDay, and we want to use this occasion to highlight the importance of backups and data security. In this blog post you'll learn everything worth knowing about backups – from the definition through the different types to tips on how to protect your data.
PHP 8 is the newest version of the PHP programming language. It brings a range of new features and improvements that make building websites and applications easier.
Plesk GmbH is raising its prices again this year, affecting all Plesk customers worldwide. Because of this, we also have to adjust our prices.
Windows Server 2019 is now available for our KVM root servers at no extra cost, starting with configurations from 3.65€/month. The system installs fully automatically within 5 minutes.
 (1)_6953d52e2a4a4.jpg)
_6768702e9b65f.jpg)
_66b0b631256de.jpg)
_658da4393e104.png)
_64e3990417e60.jpg)
