Our blog | Matthews Enterprises

Our blog

DTU breach: IAM data on up to 200,000 users

Matthews Enterprises (PTY) LTD, Francois Matthews

DTU breach: IAM data on up to 200,000 users

The Technical University of Denmark says attackers downloaded identity data on up to 200,000 current and former users, including civil registration numbers back to 2003.

Cybersecurity

Oct 5, 2026

CVE-2026-104286: FortiMail path traversal, no patch yet

Matthews Enterprises (PTY) LTD, Francois Matthews

CVE-2026-104286: FortiMail path traversal, no patch yet

Fortinet confirmed in-the-wild exploitation of a critical FortiMail file-write flaw. Fixed builds are still upcoming, so the workaround is the control that matters this week.

Cybersecurity

Oct 5, 2026

ShinyHunters suspect Rey detained in Jordan, sources say

Matthews Enterprises (PTY) LTD, Francois Matthews

ShinyHunters suspect Rey detained in Jordan, sources say

Three sources told Reuters a ShinyHunters figure known as Rey was detained in Jordan on 29 September and is cooperating with the FBI.

Cybersecurity

Oct 5, 2026

CVE-2026-105207 ZITADEL account takeover, upgrade to 4.17.3

Matthews Enterprises (PTY) LTD, Francois Matthews

CVE-2026-105207 ZITADEL account takeover, upgrade to 4.17.3

ZITADEL Login V2 can link an attacker external identity to a victim after only a login name. 4.x needs 4.17.3. The 3.x line is end of life.

Cybersecurity

Oct 5, 2026

TA419 phishes AI policy experts with Microsoft AitM

Matthews Enterprises (PTY) LTD, Francois Matthews

TA419 phishes AI policy experts with Microsoft AitM

Proofpoint says China-aligned TA419 impersonates AI policymakers, then proxies Microsoft sign-in to steal session cookies past MFA.

Cybersecurity

Oct 5, 2026

CVE-2026-88779 crashes SAML NetScaler, patch by 7 October

Matthews Enterprises (PTY) LTD, Francois Matthews

CVE-2026-88779 crashes SAML NetScaler, patch by 7 October

Citrix shipped emergency builds after CVE-2026-88779 was used to crash SAML-enabled NetScaler ADC and Gateway. CISA due date is 7 October.

Cybersecurity

Oct 5, 2026

Cisco SD-WAN Manager admin bypass is on the KEV list

Matthews Enterprises (PTY) LTD, Francois Matthews

Cisco SD-WAN Manager admin bypass is on the KEV list

CVE-2026-76504 lets an unauthenticated caller reach the Catalyst SD-WAN Manager admin API. There is no workaround. Fixed trains are out.

Cybersecurity

Oct 3, 2026

Warlock is still entering through on-prem SharePoint, including water and telecom

Matthews Enterprises (PTY) LTD, Francois Matthews

Warlock is still entering through on-prem SharePoint, including water and telecom

Warlock is still using on-prem SharePoint for initial access, including water and telecom. Confirm the 2025 fixes and look for webshells and SYSVOL drops.

Cybersecurity

Oct 3, 2026

Frontline Education is notifying districts after a third-party software breach

Matthews Enterprises (PTY) LTD, Francois Matthews

Frontline Education is notifying districts after a third-party software breach

Frontline Education is notifying school districts after a third-party software breach. Exposed staff data includes Social Security numbers and addresses. Confirm the notice with the vendor.

Cybersecurity

Oct 3, 2026

Attackers are getting more from AI than defenders

Matthews Enterprises (PTY) LTD, Francois Matthews

Attackers are getting more from AI than defenders

Microsoft's 2026 Digital Defense Report says attackers are ahead on AI and now weaponize flaws in well under 24 hours. A weekly patch window is no longer enough.

Cybersecurity

Oct 3, 2026

GitLab AI Gateway sandbox escape is a 9.9, patches are out

Matthews Enterprises (PTY) LTD, Francois Matthews

GitLab AI Gateway sandbox escape is a 9.9, patches are out

Self-managed GitLab AI Gateway needs 19.2.4, 19.3.2, or 19.4.1. An authenticated Duo user can escape the prompt sandbox and run commands. GitLab-hosted is already fixed.

Cybersecurity

Oct 3, 2026

CISA lists two Zammad bugs that an AI-driven attack already chained to root

Matthews Enterprises (PTY) LTD, Francois Matthews

CISA lists two Zammad bugs that an AI-driven attack already chained to root

Two Zammad bugs were used as zero-days and chained to root. CISA listed both. Move to Zammad 7 or take the instance offline, then hunt.

Cybersecurity

Oct 3, 2026

Prev
11
12
13
14
15
Next