Security · High impactFan score 45 · Tier B2 sources
ThreatsDay: Apache OFBiz RCE, DreamHost Breach, DeFi Site Hijacks + 17 More Stories
The Hacker News · By info@thehackernews.com (The Hacker News) ·
How much damage can someone do without breaking much? Quite a lot, it seems. A stolen login can open doors across several systems. A trusted setting can be used to lock people out. Even a simple file copy can reach places it shouldn't. And while new tools are helping find…
The Brief
- DreamHost warned of a data breach after attackers accessed its File Manager platform for two months.
- Attackers stole customers' FTP/SFTP usernames and passwords.
- The headline also reports that webmail sessions were exposed.
Why it matters
If you host sites or files with DreamHost, your FTP/SFTP credentials may have been stolen and should be treated as compromised.
Who’s affected
- DreamHost customers using FTP/SFTP
- DreamHost customers using webmail
What to do
- Change FTP/SFTP passwords for DreamHost accounts
- #security
- #data-breach
- #hosting
- #ftp
- #webmail
