DreamHost Confirms Data Breach of FTP/SFTP and Webmail Credentials
DreamHost File Manager breach exposed FTP/SFTP credentials and some webmail logins; attackers may have viewed mailboxes, affecting under 10% of accounts.
1
Stories per day · 30 days
2 RSS
Relateddreamhost8password-reset4webmail4data-breach3email3web-hosting3hosting2credential-reset1email-credentials1file-manager1progress-software1sftp1
12 stories, newest first · one card per story
Stories tagged #ftp
DreamHost data breach exposed FTP logins and webmail sessions
DreamHost confirmed attackers accessed File Manager from August to October 2026, stealing FTP/SFTP credentials and webmail sessions.
1
Progress Software WS_FTP Server prior to 2024.0.6 and 2025.0.3 affected by vulnerability
Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 have a vulnerability, according to Canadian Centre for Cyber Security advisory.
DreamHost resets some email and FTP passwords after systems issue
File Manager was taken offline and later restored; DreamHost has not stated a cause or how many users were affected.
DreamHost resets some email and FTP passwords after service incident
File Manager is back, but DreamHost still has not named a cause or how many accounts needed resets.
1
DreamHost forces password resets after File Manager and webmail incident
The hoster expired affected email and FTP/SFTP passwords but has not confirmed unauthorized access or data theft.
1
DreamHost forces email and FTP password resets after unexplained incident
DreamHost has not named a cause or confirmed theft; File Manager was back by October 26 while resets stayed required.
1
DreamHost forces email and FTP password resets in ongoing incident
File Manager access is still down, and users cannot log in until account owners set new credentials.
CVE-2026-63045: Apache HTTP Server: mod_proxy_ftp PASV address handling
Apache HTTP Server mod_proxy_ftp through 2.4.68 can follow a malicious FTP PASV reply to a third-party host.
Schneider Electric Modicon M340 Controller and Communication Modules
CISA warns CVE-2025-6625 lets unauthenticated attackers crash Schneider Electric Modicon M340 controllers and communication modules via a crafted FTP command.
3
CVE-2026-78254: Apache Ant: Path traversal in ftp and scp tasks allows arbitrary file write
Apache Ant 1.2 before 1.10.18 ftp and scp tasks allow path traversal, letting malicious servers overwrite arbitrary files (CVE-2026-78254).
Researchers Use Claude to Port Pre-Auth RCE Exploit From One PLC Model to Another
Forescout used Anthropic's Claude to port a working pre-auth RCE exploit for CVE-2021-31886 between WAGO PLCs, executing ARM shellcode on live hardware.