DreamHost confirms data breach exposed FTP logins and webmail sessions
2026-11-04T19:23:22Z•b52b1d061a5e55dabf538876996648fa125a8a1bd1c945f8c0c630fd4b0d3ae0
AndroidLLMjackingMFA bypassNorth KoreaSOC operationsWordPressactively exploited vulnerabilitybackdoorcloud abusecredential theftcritical infrastructurecryptocurrency theftdata breachhealthcareiOSmalwarepassword managersphishingremote code executionroot accesssession hijackingsoftware update compromisesupply-chain attackweb hostingzero-click exploit
What happened
A collection of cybersecurity news reports covering major breaches, supply-chain compromises, phishing and MFA bypass campaigns, actively exploited vulnerabilities, critical device flaws, mobile zero-click attacks, cryptocurrency theft, cloud resource abuse, and evolving SOC staffing trends. Notable incidents include exposed DreamHost FTP credentials and webmail sessions, malware distributed through the NIKKE launcher, cPGuard update hijacking, a $6.34 billion cryptocurrency theft, and active exploitation of a WordPress RCE vulnerability.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- b52b1d061a5e55dabf538876996648fa125a8a1bd1c945f8c0c630fd4b0d3ae0
- Enrichment time
- 2026-11-04T19:23:22Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.