First reports come in of victims of critical cPanel vuln as 'millions' of sites potentially exposed

A critical vulnerability in cPanel, a widely used web hosting control panel, has been exploited by attackers, resulting in at least one reported case of ransomware. The vulnerability, which affects millions of websites, was being exploited even before patches were released, highlighting the speed at which attackers can move. The US Cybersecurity and Infrastructure Security Agency (CISA) has added the bug to its list of known-exploited vulnerabilities, confirming the active exploitation¹. The fact that attackers were able to exploit the vulnerability before patches were available underscores the importance of proactive security measures. The impact of this vulnerability is significant, given the widespread use of cPanel in web hosting, and the potential for ransomware attacks to cause significant disruption. This incident matters to security practitioners because it underscores the need for robust operational resilience planning to mitigate the risk of sector-specific attacks.