You're viewing the mastodonapp.uk public feed.

Zack Whittakerzackwhittaker@mastodon.social
Nov 3, 2026, 5:09 PM
Wow... so DreamHost last week resolved a cyber incident involving its customers' email systems and FTP access. Now we know why. In a filing with California's AG, DreamHost says hackers had access to its systems, including customer session info (which lets attackers log in!!), for at least three months.
More: https://oag.ca.gov/ecrime/databreach/reports/sb24-632268
💬 3🔄 30⭐ 24

Replies

Sascha Siekmann :verified:ssiekmann@infosec.exchange
Nov 3, 2026, 5:32 PM
@zackwhittaker@mastodon.social aren’t there, like laaaaws around disclosing breaches? Mumble mumble California civil code … but hey! Nothing has consequences anymore!
💬 0🔄 0⭐ 1
Doug Baileydigitalqualms@mastodon.online
Nov 3, 2026, 5:53 PM
@zackwhittaker Wow. I assumed it was PHP2Shell related when I saw the password reset notifications
💬 0🔄 0⭐ 1
AnneHannehargreaves@ioc.exchange
Nov 3, 2026, 7:01 PM
@zackwhittaker NightmareHost
💬 1🔄 0⭐ 2
Retrofan 64retrofan64@oldbytes.space
Nov 3, 2026, 9:00 PM
@annehargreaves @zackwhittaker Truth. Not to dogpile, but I am a former customer of theirs and remain utterly baffled that they've managed to maintain enough uptime to be compromised for three months.
💬 0🔄 0⭐ 1