{
  "id": 18188360,
  "title": "Security Alert: DreamHost Confirms Two-Month Breach of File Manager Platform",
  "url": "https://urgent.news/2026/11/04/security-alert-dreamhost-confirms-two-month-breach-of-file-manager",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-11-04T22:00:25.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/hassanradwany/security-alert-dreamhost-confirms-two-month-breach-of-file-manager-platform-8o9"
  },
  "original_language": "en",
  "account": "DreamHost, a prominent web hosting service, has announced a security incident involving its File Manager platform. The breach lasted for two months, during which attackers gained unauthorized access to customers' FTP/SFTP credentials and active webmail sessions. FTP/SFTP credentials are vital for managing websites, giving attackers the ability to alter source code, embed malicious scripts, or delete critical data. Access to active webmail sessions could potentially bypass multi-factor authentication (MFA), granting unauthorized access to sensitive communications and password reset links. The attackers held this position for an extended period, increasing the risk of unnoticed alterations in hosted environments. Recent reports highlight a series of significant infrastructure and supply-chain attacks, including a compromise of cPGuard's update infrastructure and an alleged breach at WorkOS, where an AI tool was allegedly used to access internal sales applications and customer communications. The DreamHost breach specifically impacted the File Manager platform, and while the precise number of affected accounts is unknown, the full scale of potential damage remains unclear. For individuals managing sites on DreamHost or utilizing cPGuard, it is advised to immediately change all credentials, audit file integrity using version control systems, terminate active webmail sessions, and review server logs for suspicious activity.",
  "summary": "The News DreamHost, a major web hosting provider, has confirmed a data breach that allowed attackers to access its File Manager platform for a period of two months. According to reports, the breach resulted in the theft of customers' FTP/SFTP usernames and passwords, as well as the exposure of active webmail sessions ( BleepingComputer ). Technical Impact and Risks For developers and system…",
  "key_points": [
    "DreamHost experienced a two-month security breach in its File Manager platform.",
    "Attackers accessed customers' FTP/SFTP credentials and active webmail sessions.",
    "Users should change credentials, audit file integrity, and review server logs."
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}