DreamHost Confirms Data Breach of FTP/SFTP and Webmail Credentials
DreamHost File Manager breach exposed FTP/SFTP credentials and some webmail logins; attackers may have viewed mailboxes, affecting under 10% of accounts.
1
Stories per day · 30 days
2 RSS
Relatedapache-airflow2california2education2ets2host-key-verification2mitm2ssh2student-data2ubuntu2advisory1afp1credential-compromise1cve-2026-941341cve-2026-941351data-breach1denial-of-service1dreamhost1email-credentials1
11 stories, newest first · one card per story
Stories tagged #sftp
GVfs vulnerabilities allow remote information disclosure and denial of service
GVfs mishandling of SFTP, AFP and MTP data could let remote attackers obtain sensitive information or cause denial of service.
Compromised ETS login copied California student records
Access ran from May 22 to September 18, 2026, and the files did not include SSNs or payment data.
ETS breach exposes data on millions of California students
Stolen SFTP logins were used between May 22 and September 18; Social Security numbers and financial data were not included.
CVE-2026-94134: Apache Airflow SSH provider, Apache Airflow SFTP provider: SSH hook disables host-key verification by default
Apache Airflow SSH and SFTP hooks accept any server key by default, allowing machine-in-the-middle attacks.
USN-8928-1: OpenSSH vulnerabilities
Ubuntu patched OpenSSH flaws that could allow unintended SFTP writes or leak GSSAPI credentials.
wolfSSH 1.6.0 Fixes 5 Security Flaws Including Critical MITM Host Key Verification Bypass
wolfSSL released wolfSSH 1.6.0, fixing five flaws including a critical SSH host-key verification bypass.
OpenSSH 10.6 enables a post-quantum signature algorithm, so experimental keys need replacing
OpenSSH 10.6 disables risky compression, blocks shell-injecting usernames, and enables a post-quantum signature.
USN-8845-1: GVfs vulnerabilities
Ubuntu warns of two GVfs flaws: malicious SFTP input may yield code execution, and a local bug can grant root.
CVE-2026-94002: Apache MINA SSHD: Memory exhaustion in SFTP client via unsolicited SFTP replies
Apache MINA SSHD SFTP clients can be memory-exhausted by unsolicited replies before 2.20.0 and 3.0.0-M6.
USN-8799-1: libssh2 vulnerabilities
Ubuntu's USN-8799-1 fixes libssh2 bugs that a malicious SSH server can use for denial of service or possible code execution.