On Wednesday 10/21/26, CISA announced several serious vulnerabilities in PHP, used by about 70% of web sites. Emergency patches were generated, and we applied these patches to all Plesk servers. These patches cover PHP versions back to 7.4.33 (past end-of-support but patched anyway). All HIS Plesk email and web hosting customer sites are covered by… Read More: PHP “php2shell” vulnerabilities patched »
On October 19, 2026, a his.com customer account was hijacked and used to send phishing spam to a number of his.com addresses. This message had the title “You have a New Activity” and claimed that the recipient’s account had been logged into from Russia. The message contained a link to “Review Login Activity“. This led… Read More: Alert: phishing email sent from his.com account »
We’re working on a throughput issue with our upgraded Zimbra system. Incoming email may be delayed. We’ll post an update here when the issue is resolved. Update 5 PM: the problem was diagnosed and resolved, and mail delivery is now immediate.
We’ve been seeing email problems for some users with iPhones or iPads that have been updated to iOS 18. iOS 18.1, released on 10/28/24, reportedly fixes these bugs. If you’re using an iPhone or iPad that’s on a version of iOS 18 that’s less than 18.1, you should update now – this should resolve these… Read More: Apple iOS 18 – email problems – update to iOS… »
Mail to some Zimbra mailboxes was delayed briefly Monday afternoon because of an issue with a mail relay where a redundant failover didn’t work as designed. The issue has been identified and resolved. This affected only some mailboxes, and no mail was lost – the delayed mail was queued and was delivered when the issue… Read More: Delayed mail to some mailboxes Monday 8/26/2024 – Resolved »
This morning some of our customers with @his.com or @hers.com email addresses received a phishing email claiming to be from billing@his.com, with a subject line of “Credit Card Status on HIS account” The text may vary but they look like this: This message contains a link to a non-HIS web site “asete.info”, where the bad… Read More: Phishing email claiming to be from billing@his.com “Credit Card Status… »
We’ve seen phishing mail claiming to be from Amazon, saying that there’s a problem renewing your Amazon Prime membership: This links to a site in India, where the bad guys hope to harvest your Amazon username and password. If you receive email that looks suspicious, don’t click any links in the email. In a case… Read More: Phishing mail claiming to be from Amazon »
A his.com customer email account was hijacked and used to send phishing mail to other his.com addresses that claimed to be from error-billing@his.com, asking recipients to log on to “retract the multiple charges”. Following this link would take you to a real-looking copy of a Zimbra email login, where logging in would reveal your password… Read More: Phishing mail claiming “multiple billing error” »
Phishing mail from forged address “billing2023@his.com” was received by some his.com mailboxes today, 11/28/2023. Most phishing messages like this one are blocked by our spam/virus/phishing filters, but some copies of this particular message got through. The body of the message looks like this, with the HIS logo. The message came from an IP number in… Read More: Phishing mail to his.com addresses from “billing2023@his.com” »
We’re seeing quite a few email messages that claim to be about an invoice you haven’t paid and have PDF attachments supposedly from Docusign that you’re supposed to look at. They’ll have subject lines like “Delayed Payment Penalty Notification”. You probably won’t recognize the supposed sender as somebody you do business with, and if you… Read More: Phishing mail with “Docusign” attachments »