incident response – Security Blog https://blog.siteguarding.com Wed, 28 Oct 2026 01:16:42 +0000 en-US hourly 1 https://wordpress.org/?v=6.8.3 https://blog.siteguarding.com/wp-content/uploads/2016/07/cropped-Logo_sh_last_2_last-32x32.jpg incident response – Security Blog https://blog.siteguarding.com 32 32 DreamHost Password Reset: What Site Owners Must Check Now https://www.siteguarding.com/security-blog/dreamhost-password-reset/ Wed, 28 Oct 2026 01:16:42 +0000 https://www.siteguarding.com/security-blog/dreamhost-password-reset/ The DreamHost password reset has locked out every email and FTP/SFTP user on affected accounts until the account owner sets new credentials. The incident began with File Manager connectivity problems on October 23. DreamHost has not disclosed a cause. Key takeaways DreamHost calls the lockout a precaution. File Manager problems that began October 23 spread to other services the company has not...

Source

]]>
FortiWeb Credential Leak: What the k0t Research Means for Your Site https://www.siteguarding.com/security-blog/fortiweb-credential-leak-site-owners/ Mon, 26 Oct 2026 13:13:37 +0000 https://www.siteguarding.com/security-blog/fortiweb-credential-leak-site-owners/ Group-IB and NyxLab have tied more than 70,000 exposed credentials for Fortinet FortiGate, FortiWeb and Palo Alto Networks GlobalProtect devices to a threat actor tracked as k0t. This FortiWeb credential leak comes with no CVE to patch, so the fix is in your accounts, sessions and logs, not your firmware update queue. Key takeaways On 23 October 2026, Group-IB and NyxLab published joint research...

Source

]]>