The Morning Dev

Only the news worth knowing

‹
 
  • AAPL 344.17 ▼ 1.53%
  • MSFT 535.93 ▼ 3.58%
  • NVDA 181.60 ▼ 9.26%
  • GOOGL 282.57 ▼ 2.20%
  • AMZN 260.21 ▼ 2.19%
  • META 605.08 ▼ 3.96%
  • TSLA 343.69 ▼ 10.77%
  • AVGO 291.53 ▼ 10.43%
  • TSM 353.10 ▼ 10.78%
  • ORCL 115.16 ▼ 6.93%
  • AMD 404.40 ▼ 17.26%
  • NFLX 65.56 ▼ 1.25%
  • CRM 222.41 ▼ 2.07%
  • ADBE 246.44 ▼ 0.82%
  • INTC 52.25 ▼ 10.33%
  • IBM 247.11 ▼ 2.84%
  • PLTR 154.99 ▼ 9.73%
  • SNOW 269.54 ▼ 7.25%
  • NET 244.51 ▼ 8.28%
  • SAP 243.53 ▲ 1.45%

Security · High impactFan score 45 · Tier B2 sources

DreamHost confirms data breach exposed FTP logins and webmail sessions

BleepingComputer · By Bill Toulas ·

DreamHost is warning of a data breach after attackers gained access to its File Manager platform for two months and stole customers' FTP/SFTP usernames and passwords. [...]

The Brief

  • DreamHost warned of a data breach after attackers accessed its File Manager platform for two months.
  • Attackers stole customers' FTP/SFTP usernames and passwords.
  • The headline also reports that webmail sessions were exposed.

Why it matters

If you host sites or files with DreamHost, your FTP/SFTP credentials may have been stolen and should be treated as compromised.

Who’s affected

  • DreamHost customers using FTP/SFTP
  • DreamHost customers using webmail

What to do

  1. Change FTP/SFTP passwords for DreamHost accounts
  • #security
  • #data-breach
  • #hosting
  • #ftp
  • #webmail

Timeline

  1. DreamHost confirmed the data breach

  2. BleepingComputer

    DreamHost confirms data breach exposed FTP logins and webmail sessions

  3. The Hacker News

    ThreatsDay: Apache OFBiz RCE, DreamHost Breach, DeFi Site Hijacks + 17 More Stories

Full coverage · 2 sources

How do you feel about this?

0 Comments

    More in Security

    Security · High impact

    Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root

    A flaw in APT, the package manager for Debian and Ubuntu, allows an attacker who can modify package downloads to swap a checked package for their own. The attacker's code then runs as root, according to advisories that Debian, Ubuntu, and APT's developers published on November 4…

    The Hacker News · info@thehackernews.com (The Hacker News) · · 2 sources · 💬 78

    Security · High impact

    Zyxel fixes zero-day exploited to hack nearly 1,000 network switches

    Zyxel has patched a zero-day vulnerability in its GS1900 series network switches that hackers exploited to compromise nearly 1,000 devices worldwide and steal configuration files and credentials. [...]

    BleepingComputer · Lawrence Abrams · · 3 sources

    Security · High impact

    APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits

    The Russia-linked threat actor known as APT29 is presumed to be behind a large-scale watering hole campaign targeting iOS and Android users through compromised websites, fake domains, and a supply chain attack involving a Ukrainian web analytics service called Plerdy SEO Tracker…

    The Hacker News · info@thehackernews.com (The Hacker News) · · 3 sources

    Security · High impact

    More Asian airlines announce data breaches after attack on Spanish IT provider Amadeus

    Japan Airlines, Cathay Pacific, Korean Air, Asiana Airlines, Singapore Airlines and Malaysia Airlines have all come forward over the last week to report data breaches traced back to Amadeus IT Group — a company that builds and maintains platforms for flight reservation, ticketing…

    The Record from Recorded Future News · · 2 sources