Skip to content
Welcome, thoughtbot's Giant Robots listeners!Start here
ISPsystem
AI-generated illustration
OrganisationCY

ISPsystem

Russian maker of hosting management software.

Operating since 2004, ISPsystem develops hosting and infrastructure-management software, including VMmanager, a control layer for virtual machines and their host systems.

Last refreshed: 22 October 2026 · Appears in 1 active topic

Key Question

Will ISPsystem disclose which VMmanager builds and operators were exposed?

Timeline for ISPsystem

#15 17 Oct

Advised hosts to keep management access closed

Cybersecurity: Threats and Defences: FirstVDS loses client data via VMmanager
View full timeline →

Background

ISPsystem develops software for server virtualisation, infrastructure management, billing and resource delivery. The company says it has built infrastructure-management platforms since 2004. Its current legal entity is registered in Cyprus, while its business has Russian origins. VMmanager, one of its products, centrally controls virtual machines and hosting infrastructure.

VMmanager sits above the individual systems it administers. Operators use that management layer to control virtual machines and the infrastructure beneath them. This central role makes network separation and access control lasting concerns for customers. ISPsystem advises operators to isolate management systems from virtualisation nodes and to restrict access through SSH. The platform's function, rather than any single incident, explains its security importance: access to the management layer can reach several customer systems through one administrative point.

Common Questions
What does ISPsystem make?
ISPsystem develops platforms for server virtualisation, equipment management, billing and automated delivery of hosting resources.Source: ISPsystem
Where is ISPsystem registered?
ISPsystem LTD's current user agreement identifies the company as registered in Cyprus.Source: ISPsystem
What did ISPsystem say about the VMmanager breach?
ISPsystem confirmed an incident involving a vulnerability in one VMmanager 6 build and said its investigation was continuing.Source: ISPsystem
How did ISPsystem tell customers to secure VMmanager?
It told operators to block untrusted inbound and outbound connections, restrict SSH access and rotate passwords immediately.Source: ISPsystem
Source Material

Written with AI from Lowdown's published reporting. Not individually reviewed by an editor. Updated 22 October 2026. Editorial standards.