Our blog | Matthews Enterprises

Our blog

Bootlegger: AI-built dashboard leaked data for 132 stores

Matthews Enterprises (PTY) LTD, Francois Matthews

Bootlegger: AI-built dashboard leaked data for 132 stores

A Bootlegger operations dashboard, built with AI and hosted on Railway, sent store and franchisee data with the login page. MyBroadband verified 132 locations.

Cybersecurity

Oct 16, 2026

Ampath confirms a patient-data breach, disputes the 80 million figure

Matthews Enterprises (PTY) LTD, Francois Matthews

Ampath confirms a patient-data breach, disputes the 80 million figure

Ampath confirmed a 2 October cyberattack. ID numbers and medical aid details may be exposed. The 80 million figure is database rows, not confirmed people.

Cybersecurity

Oct 16, 2026

Cisco Secure Email Gateway CVE-2026-76519, CVSS 9.8, KEV due 17 October

Matthews Enterprises (PTY) LTD, Francois Matthews

Cisco Secure Email Gateway CVE-2026-76519, CVSS 9.8, KEV due 17 October

Cisco confirmed attackers are using CVE-2026-76519 to write files as root on Secure Email Gateway when File Reputation is on. Update Content Scanner Tools or AsyncOS.

Cybersecurity

Oct 16, 2026

Nextcloud built-in Collabora CVE-2026-110447, CVSS 9.2, exploited on restart

Matthews Enterprises (PTY) LTD, Francois Matthews

Nextcloud built-in Collabora CVE-2026-110447, CVSS 9.2, exploited on restart

Attackers are hitting Nextcloud's built-in Collabora app, CVE-2026-110447, when the CODE server is stopped. Versions before 26.4.303 can run commands with no login.

Cybersecurity

Oct 16, 2026

BeyondTrust Remote Support CVE-2026-102764, CVSS 9.3, exploited since August

Matthews Enterprises (PTY) LTD, Francois Matthews

BeyondTrust Remote Support CVE-2026-102764, CVSS 9.3, exploited since August

BeyondTrust says attackers used CVE-2026-102764 from 29 August to write files on Remote Support. SaaS is patched. Self-hosted sites must apply BT26-05.

Cybersecurity

Oct 16, 2026

Chrome 155 patches 37 flaws, 7 Critical, including CVE-2026-110136

Matthews Enterprises (PTY) LTD, Francois Matthews

Chrome 155 patches 37 flaws, 7 Critical, including CVE-2026-110136

Google's 13 October Chrome update fixes 37 flaws, seven of them Critical. A crafted page can run code outside the sandbox. Update every browser.

Cybersecurity

Oct 16, 2026

Atlassian CVE-2026-21589 added to KEV, CVSS 9.3, due 18 October

Matthews Enterprises (PTY) LTD, Francois Matthews

Atlassian CVE-2026-21589 added to KEV, CVSS 9.3, due 18 October

CISA added CVE-2026-21589 to KEV on 15 October. An unauthenticated attacker can read known files on self-hosted Jira, Confluence, Bitbucket and related products.

Cybersecurity

Oct 16, 2026

Backuply CVE-2026-93953: restore turns a subscriber into an admin, CVSS 8.0

Matthews Enterprises (PTY) LTD, Francois Matthews

Backuply CVE-2026-93953: restore turns a subscriber into an admin, CVSS 8.0

A subscriber account on Backuply 1.5.8 or earlier can plant SQL that runs when an admin restores a database backup. The fix is 1.5.9.

Cybersecurity

Oct 16, 2026

Windows Server 2022 left mainstream support on 13 October 2026

Matthews Enterprises (PTY) LTD, Francois Matthews

Windows Server 2022 left mainstream support on 13 October 2026

Windows Server 2022 left mainstream support on 13 October 2026. Monthly security updates continue through 14 October 2031. Feature fixes stop now.

Cybersecurity

Oct 15, 2026

Windows Shell CVE-2026-96951 strips Mark of the Web, CVSS 8.8

Matthews Enterprises (PTY) LTD, Francois Matthews

Windows Shell CVE-2026-96951 strips Mark of the Web, CVSS 8.8

Microsoft confirmed attackers are already using CVE-2026-96951 to strip Mark of the Web from crafted files. Install the October Windows update.

Cybersecurity

Oct 15, 2026

FortiSIEM CVE-2026-106173 unauthenticated RCE, CVSS 9.4

Matthews Enterprises (PTY) LTD, Francois Matthews

FortiSIEM CVE-2026-106173 unauthenticated RCE, CVSS 9.4

FortiSIEM 7.5.0 has an unauthenticated path traversal scored 9.4. A crafted packet can run commands. Upgrade to 7.5.1 or close TCP 27918.

Cybersecurity

Oct 15, 2026

AhsayCBS CVE-2026-105134 command injection, CVSS 10, KEV due 17 Oct

Matthews Enterprises (PTY) LTD, Francois Matthews

AhsayCBS CVE-2026-105134 command injection, CVSS 10, KEV due 17 Oct

CISA added two exploited AhsayCBS flaws on 14 October. The command injection is CVSS 10. Version 10.3.4.0 did not fully fix them.

Cybersecurity

Oct 15, 2026

Prev
1
2
3
4
5
Next