November 5, 2026
- DreamHost says attackers exploited a flaw in its web-based File Manager, sat in its systems from August 2026 until discovery on October 23, and took FTP/SFTP usernames and passwords plus webmail credentials and session tokens (BleepingComputer). · Incidents & Enforcement