tag: Web-Hosting · 2 items
- Engineer — Plan: If your org hosts anything on DreamHost, verify the forced credential resets completed for all FTP/SFTP and email accounts and review access logs since the incident began for any unauthorized file access.
- SOC/IR — Skip
- Leader — Plan: Confirm whether your organization uses DreamHost for any hosting services; if so, request an incident scope update from them and verify all affected credentials have been rotated by impacted teams.
- Engineer — Plan: Every supported cPanel and WHM version is affected; a mail-privileged hosting account can write arbitrary files and escalate to root via EmailTrack. Patch to the latest cPanel/WHM release (advisory published Sep 8) within your next patch window — no PoC or active exploitation is confirmed yet, but root-level impact makes this high priority.
- SOC/IR — Skip
- Leader — Skip