DreamHost has implemented forced password resets for certain email and FTP/SFTP accounts following an incident that affected its File Manager and webmail services. The company restored its browser-based File Manager on October 26, 2026. However, users affected by the incident must obtain new login credentials from their account owners before they can access their accounts. […]

The post DreamHost Security Incident Forces Password Resets for Email and FTP/SFTP Accounts appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

LevelBlue found Microsoft’s password reset portal can reveal valid accounts, recovery methods and likely administrator accounts without user authentication.

Researchers found 24,650 public BMC interfaces leaking IPMI password hashes, exposing servers to offline password cracking through a decades-old protocol flaw.