Our blog | Matthews Enterprises

Our blog

Cisco SD-WAN Manager admin bypass is on the KEV list

Matthews Enterprises (PTY) LTD, Francois Matthews

Cisco SD-WAN Manager admin bypass is on the KEV list

CVE-2026-76504 lets an unauthenticated caller reach the Catalyst SD-WAN Manager admin API. There is no workaround. Fixed trains are out.

Cybersecurity

Oct 3, 2026

Warlock is still entering through on-prem SharePoint, including water and telecom

Matthews Enterprises (PTY) LTD, Francois Matthews

Warlock is still entering through on-prem SharePoint, including water and telecom

Warlock is still using on-prem SharePoint for initial access, including water and telecom. Confirm the 2025 fixes and look for webshells and SYSVOL drops.

Cybersecurity

Oct 3, 2026

Frontline Education is notifying districts after a third-party software breach

Matthews Enterprises (PTY) LTD, Francois Matthews

Frontline Education is notifying districts after a third-party software breach

Frontline Education is notifying school districts after a third-party software breach. Exposed staff data includes Social Security numbers and addresses. Confirm the notice with the vendor.

Cybersecurity

Oct 3, 2026

Attackers are getting more from AI than defenders

Matthews Enterprises (PTY) LTD, Francois Matthews

Attackers are getting more from AI than defenders

Microsoft's 2026 Digital Defense Report says attackers are ahead on AI and now weaponize flaws in well under 24 hours. A weekly patch window is no longer enough.

Cybersecurity

Oct 3, 2026

GitLab AI Gateway sandbox escape is a 9.9, patches are out

Matthews Enterprises (PTY) LTD, Francois Matthews

GitLab AI Gateway sandbox escape is a 9.9, patches are out

Self-managed GitLab AI Gateway needs 19.2.4, 19.3.2, or 19.4.1. An authenticated Duo user can escape the prompt sandbox and run commands. GitLab-hosted is already fixed.

Cybersecurity

Oct 3, 2026

CISA lists two Zammad bugs that an AI-driven attack already chained to root

Matthews Enterprises (PTY) LTD, Francois Matthews

CISA lists two Zammad bugs that an AI-driven attack already chained to root

Two Zammad bugs were used as zero-days and chained to root. CISA listed both. Move to Zammad 7 or take the instance offline, then hunt.

Cybersecurity

Oct 3, 2026

FortiMail zero-day is exploited, and most fixes are not shipped

Matthews Enterprises (PTY) LTD, Francois Matthews

FortiMail zero-day is exploited, and most fixes are not shipped

FortiMail CVE-2026-104286 is exploited. Fixed builds are listed as upcoming, not available. Disable Identity-Based Encryption or take webmail off the internet.

Cybersecurity

Oct 3, 2026

The Next Frontier:

Matthews Enterprises (PTY) LTD, Francois Matthews

The Next Frontier:

**Introduction** As we stand on the cusp of a technological revolution, the future promises a paradigm shift in the way we consume and interact with content. The rise of AI-generated content has been ...

Feb 19, 2024

Passkeys

Matthews Enterprises (PTY) LTD, Francois Matthews

Passkeys

In the rapidly advancing world of cybersecurity, the quest for safer and more user-friendly authentication methods has led to the emergence of innovative solutions. Among these, "passkeys" have become...

Feb 1, 2024

Safeguarding the Digital Frontier:

Matthews Enterprises (PTY) LTD, Francois Matthews

Safeguarding the Digital Frontier:

In an age dominated by technology, our digital existence is intricately intertwined with the ever-present challenge of cybersecurity. As we stand on the cusp of an uncertain future, a recent explorati...

Feb 1, 2024

A Guide to Surviving a Ransomware Attack

Matthews Enterprises (PTY) LTD, Francois Matthews

A Guide to Surviving a Ransomware Attack

Surviving ransomware is possible with a combination of preparation and intentionality. Often, there is a misguided characterization of ransomware attacks that implies defenders either completely thwar...

Jul 13, 2022

Sneaky Orbit Malware Backdoors Linux Devices

Matthews Enterprises (PTY) LTD, Francois Matthews

Sneaky Orbit Malware Backdoors Linux Devices

A sneaky malware for Linux is backdooring devices to steal data and can affect all the processes running on a particular machine, researchers have found. The malware, dubbed Orbit, is unlike other Li...

Jul 13, 2022