Hodisa javobi
Tushuntirilmagan DreamHost hodisasi elektron pochta va FTP parollarini qayta o'rnatishga sabab bo'ldi
Kompaniya o'z tizimlarining ba'zilariga, jumladan DreamHost veb-pochtasiga ta'sir qilgan muammoga javoban harakat qilganini aytmoqda.
Muallif
Ionut Arghire
| 27-oktabr, 2026 (ET bo'yicha 8:02)
Dam olish kunlari veb-xosting provayderi DreamHost o'z File Manager xizmatini to'xtatdi va ba'zi foydalanuvchilarning parollarini qayta o'rnatdi.
Kompaniya juma kuni "o'z tizimlari bilan bog'liq muammo"ga javoban himoya choralarini ko'rganini aytdi; bu muammo files.dreamhost.com manzilidagi File Manager va DreamHost veb-pochtasiga ta'sir qilgan.
"Ehtiyot chorasi sifatida biz ba'zi elektron pochta va FTP/SFTP foydalanuvchilari uchun parollarni qayta o'rnatmoqdamiz", — deb ogohlantirdi kompaniya juma kuni.
Shuningdek, u DreamHost hisob egalari bilan shaxsiy aloqa orqali (Reddit'da ulashilgan) xabar berdi va foydalanuvchilar tizimga kirishda yangi parollarni o'rnatishlari kerakligini, shuningdek DreamHost elektron pochta orqali parolni qayta o'rnatishni so'ramasligini ta'kidladi.
"Biz siz bilan bog'lanmoqdamiz, chunki siz DreamHost hisob egasisiz va faqat siz ushbu foydalanuvchilar uchun yangi parollarni o'rnatishingiz mumkin. DreamHost alohida pochta qutisi yoki FTP foydalanuvchilari bilan bevosita bog'lana olmaydi, shuning uchun ular bu haqda siz ularga aytmaguningizcha bilmasligi mumkin", — dedi kompaniya.
"Agar ular eski parolni boshqa joyda ham ishlatgan bo'lsa, u yerda ham uni o'zgartirishlari kerak", — deb aytdi DreamHost hisob egalariga.
Reklama. O'qishni davom ettirish uchun pastga aylantiring.
Foydalanuvchilar DreamHostning shaffoflik yetishmasligidan shikoyat qilishdi va ba'zilar parollar buzilgan bo'lishi mumkinligi va ular to'g'ri xeshlanganmi, deb savol berishdi.
Shu orada DreamHost File Manager uchun tuzatishni yaratib, joriy etganini va http://files.dreamhost.com manziliga kirishni tiklaganini aytmoqda.
"Biz File Manager to'liq ishlash holatiga qaytganiga ishonch hosil qilish uchun vaziyatni kuzatmoqdamiz", — dedi kompaniya dushanba kuni.
SecurityWeek DreamHostga ta'sir qilgan foydalanuvchilar soni va hodisaning asosiy sababi haqida ma'lumot olish uchun elektron pochta yubordi va agar kompaniya javob bersa, ushbu maqolani yangilaydi.
Bog'liq: Genesys Hack Ichki Tizimlardan Mijoz Ma'lumotlarini Fosh Qildi
Bog'liq: Capcom Ma'lumotlar Buzilishi 11 Million Kishiga Ta'sir Qildi
Bog'liq: Quest Diagnostics Ma'lumotlar Buzilishi "Ba'zi Bemor Yozuvlari"ni Fosh Qildi
Bog'liq: Xakerlar Nikkei'dan 1,8 Million Yozuvni O'g'irladi
Yozgan: Ionut Arghire
Ionut Arghire SecurityWeek uchun xalqaro muxbir.
Kundalik Axborot Byulleteni
Eng so'nggi kiberxavfsizlik tahdidlari, tendensiyalari va mutaxassis fikrlari uchun SecurityWeek Elektron Pochta Axborotiga obuna bo'ling.
Biznes Elektron Pochta*
emailsignupsource
Qo'shimcha ma'lumot uchun Maxfiylik Siyosatimizni o'qing.
Ionut Arghiredan ko'proq
- Genesys Hack Ichki Tizimlardan Mijoz Ma'lumotlarini Fosh Qildi
- Uzoq Davom Etgan Zararli Dastur Kampaniyasida 953 Onlayn Do'kon Zararlangan
- Golland Politsiyasi Bank Hisoblaridan 400 000+ Dollarni O'g'irlagan NFC Relay Hujumlari Ustidan Ikki Kishini Hibsga Oldi
- Mythos 5 Iyul Hujumida Haqiqiy Dunyodagi Zararga E'tibor Bermadi
- Xitoy APT ConnectWise Hujumlarida AI Pentest Vositasi Artex'dan Foydalandi
- Hujumchilar To'rt Oy Ichida Uchinchi Arista VCO Zero-Day'dan Foydalandi
- Capcom Ma'lumotlar Buzilishi 11 Million Kishiga Ta'sir Qildi
- LiteLLM Yangi Ta'minot Zanjiri Hujumida Buzildi
Eng So'nggi Yangiliklar
- iOS, macOS 27.2 286 Xatoni Tuzatdi; Foydalanilgan Kamchilik Uchun Tuzatish iOS 18'ga Orqaga Ko'chirildi
- Anthropic Investorlar Uchun Xavflar Ro'yxatga Olingan, Jumladan Nazoratsiz AI'dan Kelib Chiqadigan Mumkin Zararlar
- Bu Normal: NetScaler Zero-Day'lari Yangi Normal Haqida Nima Deydi
- O'lik Popcorn Time Yangilovchisi Millionlab Kompyuterlarni Boshqaruvga Olish Xavfiga Qo'ydi
- Dengiz Koalitsiyasi Kema va Port Tizimlari Uchun Bepul Zaiflik Ma'lumotlar Bazasini Ishga Tushirdi
- Kiberxavfsizlik Muammosi Yangi Meksiko Katta Kasalxonasini Bemorlarni Boshqa Joyga Yo'naltirishga va Klinikalari Yopishga Majbur Qildi
- Anthropic CEO AI'dan Insoniyatga Xavf Haqida Ogohlantirgan Holda Potensial Eng Katta IPO Uchun Ariza Topshirdi
- Sanoat Sotuvchilari Mahsulotlarini PHP2Shell Zaifliklari Uchun Tekshirmoqda
Trend
Node2Shell: Brotli Kamchiligi Microsoft, Node.js, Python Paketlari Orqali Tuzatishni Tezlashtirdi
PHP2Shell Foydalanishi Tekshiruvlardan Ishlaydigan Shell'largacha O'tdi
Mirai Botnet Operatorlari PHP2Shell Hujumlariga Qo'shildi, ASLR Bypass Foydalanishlari Paydo Bo'ldi
SecurityWeek Tahlili: 2024-yilning Birinchi Yarmida 178 Kiberxavfsizlik M&A Bitimi E'lon Qilindi
953 Onlayn Do'kon Uzoq Davom Etgan Zararli Dastur Kampaniyasida Zararlangan
Xitoy APT ConnectWise Hujumlarida AI Pentest Vositasi Artex'dan Foydalandi
Sobiq 8200 Bo'linma Ofitserlari Agentic SecOps Startapi Mave Uchun 34 Million Dollar Yig'di
Genesys Hack Ichki Tizimlardan Mijoz Ma'lumotlarini Fosh Qildi
Kundalik Axborot Byulleteni
Eng so'nggi tahdidlar, tendensiyalar va texnologiyalar haqida xabardor bo'lish, shuningdek, soha mutaxassislarining chuqur fikrlari bilan tanishish uchun SecurityWeek Elektron Pochta Axborotiga obuna bo'ling.
Biznes Elektron Pochta*
emailsignupsource
Qo'shimcha ma'lumot uchun Maxfiylik Siyosatimizni o'qing.
Vebinar: Sizning Google Workspace'dagi AI Kirish Xavfi Allaqachon Mavjud
19-oktabr, 2026
Google Workspace'ga ulangan AI vositalari millionlab nozik elektron pochta va fayllarga kirishi mumkin. Tashkilotingizning xavfini aniqlash va AI kirishini boshqarish uchun ramka o'rganish uchun ushbu sessiyaga qo'shiling.
Ro'yxatdan O'ting
Virtual Tadbir: CISO Forum 2026 Sammiti
10 va 11-noyabr, 2026
CISO'lar, yuqori darajadagi kiberxavfsizlik rahbarlari, amaliyotchilar, soha mutaxassislari va boshqa xavfsizlik rahbarlarini amaliy tajriba almashish va korporativ kiberxavfsizlik strategiyasini shakllantiradigan masalalarni ko'rib chiqish uchun birlashtirgan holda bizga qo'shiling.
Ro'yxatdan O'ting
Harakatdagi Odamlar
Cequence Security Russ Schaferni CMO etib tayinladi.
Mona Harrington DHS'da Kiber Integratsiya bo'yicha Yordamchi Direktor etib tayinlandi.
iCOUNTER Mark H. FitzPatrickni CFO etib tayinladi.
Harakatdagi Ko'proq Odamlar
Mutaxassis Fikrlari
Bu Normal: NetScaler Zero-Day'lari Yangi Normal Haqida Nima Deydi
Yaqinda Citrix NetScaler tuzatishlarining yana bir turkumi chiqarilishi mumkinligi uchun tuzatish boshqaruv quvurlarini tayyor saqlang. (Tod Beardsley)
Zamonaviy Kiberhujumlarga Qarshi Kurashda Kalit Tezlik Emas, Balki Yetuklik
Sizning dasturchilaringiz AI qabul qilish shkalasida qayerda joylashganligi xavfsizlik xavfini qanday hal qilayotganingizga haqiqiy ta'sir qiladi. (Matias Madou)
Kontekst Zamonaviy Kiberhujumlarga Qarshi Kurashda Qirol
Kontekstual himoya xavfsizlik jamoalariga signallarni ulash, keyin nima kelishini oldindan bilish va tahdidlar kuchayishidan oldin ularni to'xtatishga yordam beradi. (Etay Maor)
AI Hujum Tezligini O'zgartirdi, Xavfsizlik Asoslarini Emas
AI zaifliklarni aniqlash va ulardan foydalanishni tezlashtirgan holda, virtual tuzatish hali ham himoya chuqurligi va kuchli ilova xavfsizligi asoslariga bog'liq. (Joshua Goldfarb)
Kelajak Uchun Katta Rejalar Tuzgan To'rt Kiber Tahdid
- AI, ta'minot zanjiri ta'siri, kvant hisoblash va geosiyosiy ziddiyat xavfsizlik dasturlarini sinovdan o'tkazmoqda. Buzilishlarga tayyorgarlik kundalik operatsiyalarning bir qismiga aylanishi kerak. (Steve Durbin)
Incident Response
Unexplained DreamHost Incident Prompts Email, FTP Password Resets
The company says it reacted to an issue affecting some of its systems, including DreamHost webmail.
By
Ionut Arghire
| October 27, 2026 (8:02 AM ET)
*
Over the weekend, web hosting provider DreamHost suspended its File Manager service and reset some user passwords.
The company says it took protective actions in response to “an issue” with its systems, which affected File Manager at files.dreamhost.com and DreamHost webmail.
“As a precaution, we are resetting passwords for some email and FTP/SFTP users,” the company warned on Friday.
It also notified DreamHost account owners via private communication (shared on Reddit), noting that users would need to set new passwords when logging in, and underlining that DreamHost would not request password resets via email.
“We are contacting you because you are the DreamHost account owner, and only you will be able to set new passwords for these users. DreamHost is unable to contact individual mailbox or FTP users directly, so they may not know about this until you tell them,” the company said.
“If they used the old password anywhere else, they should change it there too,” DreamHost told account owners.
Advertisement. Scroll to continue reading.
Users complained about DreamHost’s lack of transparency, and some speculated that the passwords may have been compromised and questioned whether they were properly hashed.
In the meantime, DreamHost says it has created and deployed a fix to the File Manager and restored access to http://files.dreamhost.com.
“We are monitoring the situation to ensure that the File Manager is back in a fully operational state,” the company said on Monday.
SecurityWeek has emailed DreamHost for information on the number of affected users and the root cause of the incident and will update this article if the company responds.
Related:Genesys Hack Exposes Customer Data From Internal Systems
Related:11 Million Impacted by Capcom Data Breach
Related:Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’
Related:Hackers Steal 1.8 Million Records From Nikkei
Written ByIonut Arghire
Ionut Arghire is an international correspondent for SecurityWeek.
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.
Business Email*
emailsignupsource
Read our Privacy Policy for more information.
More from Ionut Arghire
- Genesys Hack Exposes Customer Data From Internal Systems
- 953 Online Stores Infected in Long-Lasting Malware Campaign
- Dutch Police Arrest Two Over NFC Relay Attacks That Drained $400,000+ From Bank Accounts
- Mythos 5 Ignored Real-World Harm in July Attack
- China APT Uses AI Pentest Tool Artex in ConnectWise Attacks
- Attackers Exploit Third Arista VCO Zero-Day in Four Months
- 11 Million Impacted by Capcom Data Breach
- LiteLLM Compromised in Fresh Supply Chain Attack
Latest News
- iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18
- Risks Spelled Out for Anthropic Investors Include Possible Harms From Runaway AI
- This is Fine: What NetScaler Zero-Days Tell Us About the New Normal
- Dead Popcorn Time Updater Put Millions of Computers at Risk of Takeover
- Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems
- Cybersecurity Issue Forces a Major New Mexico Hospital to Divert Patients and Close Clinics
- Anthropic Files for Potentially the Biggest IPO Ever as CEO Warns of Risk to Humanity From AI
- Industrial Vendors Check Products for PHP2Shell Vulnerabilities
Trending
Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages
PHP2Shell Exploitation Moves From Probes to Working Shells
Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge
SecurityWeek Analysis: 178 Cybersecurity M&A Deals Announced in First Half of 2024
953 Online Stores Infected in Long-Lasting Malware Campaign
China APT Uses AI Pentest Tool Artex in ConnectWise Attacks
Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup Mave
Genesys Hack Exposes Customer Data From Internal Systems
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Business Email*
emailsignupsource
Read our Privacy Policy for more information.
Webinar: The AI Access Risk Already in Your Google Workspace
October 19, 2026
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
Register
Virtual Event: CISO Forum 2026 Summit
November 10 & 11, 2026
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
Register
People on the Move
Cequence Security has appointed Russ Schafer as CMO.
Mona Harrington has been named Assistant Director for Cyber Integration at DHS.
iCOUNTER has appointed Mark H. FitzPatrick as CFO.
More People On The Move
Expert Insights
*
This is Fine: What NetScaler Zero-Days Tell Us About the New Normal
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.(Tod Beardsley)
The Key to AI Software Security Isn’t Speed, It’s Maturity
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.(Matias Madou)
Context Is King in the Fight Against Modern Cyberattacks
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.(Etay Maor)
AI Has Changed Attack Speed, Not Security Fundamentals
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.(Joshua Goldfarb)
Four Cyber Threats Harboring Big Plans for the Future
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.(Steve Durbin)