CuraSec

tag: Credential-Reset · 1 items

  • Engineer — Plan: If your org hosts anything on DreamHost, verify the forced credential resets completed for all FTP/SFTP and email accounts and review access logs since the incident began for any unauthorized file access.
  • SOC/IR — Skip
  • Leader — Plan: Confirm whether your organization uses DreamHost for any hosting services; if so, request an incident scope update from them and verify all affected credentials have been rotated by impacted teams.