bleepingcomputer.com·May 2, 2026
A critical flaw in cPanel, tracked as CVE-2026-41940, is being exploited in widespread "Sorry" ransomware attacks that breach websites and encrypt data. Users are urged to apply emergency updates to protect their systems as thousands of IP addresses have already been compromised.
The critical takeaway for you as a cybersecurity professional is the active exploitation of a zero-day vulnerability (CVE-2026-41940) in cPanel, leading to "Sorry" ransomware attacks. It's crucial to ensure that all cPanel and WHM users immediately apply the available security updates to prevent unauthorized access and data encryption, highlighting the importance of timely patch management in your security strategy.