Previous incidents
Node.js applications temporarily disabled (security precaution)
Resolved Oct 25, 2026 at 2:30am UTC
Our team are happy to advise that a patch has been rolled out regarding the recent Node.js vulnerability.
Services have now been restored and are back to normal.
Please note that only versions 20,22 and 24 have been patched.
Legacy versions of node.js have not been supplied. If you are running any legacy node.js applications, please update them to either 20, 22, or 24.
If you have any issues, please reach out to our support team via a support ticket.
1 previous update
WordPress security incident: UpdraftPlus and UpdraftCentral
Resolved Oct 22, 2026 at 12:34am UTC
For our clients who are utilising the Updraft plugin, we recommend following updates from the plugin provider to manage the 3rd-party plugin.
https://teamupdraft.com/blog/security-incident-october-2026/#updraftcentral-cloud-users-please-do-this-today
1 previous update
Upcoming critical PHP security update
Resolved Oct 22, 2026 at 12:00am UTC
Thank you for your patience.
Our team is happy to advise that security patches for the critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) have now been completed and deployed across our hosting servers.
As a precaution to safeguard our clients' data and our network infrastructure, webmail was temporarily disabled while this work was carried out. Webmail has now been restored and is available as normal. Our website, Client Portal and support portal are also back online, so yo...
4 previous updates