The DreamHost password reset has locked out every email and FTP/SFTP user on affected accounts until the account owner sets new credentials. The incident began with File Manager connectivity problems on October 23. DreamHost has not disclosed a cause.
Group-IB and NyxLab have tied more than 70,000 exposed credentials for Fortinet FortiGate, FortiWeb and Palo Alto Networks GlobalProtect devices to a threat actor tracked as k0t. This FortiWeb credential leak comes with no CVE to patch, so the fix is in your accounts, sessions and logs, not your firmware update queue.