Our blog | Matthews Enterprises

Our blog

DPRK laptop farms: FBI seized 187 devices, 14 charged

Matthews Enterprises (PTY) LTD, Francois Matthews

DPRK laptop farms: FBI seized 187 devices, 14 charged

DOJ charged 14 people and the FBI seized 187 laptops from Texas laptop farms used by North Korean remote IT workers. CrowdStrike tracks the cluster as Famous Chollima.

Cybersecurity

Oct 15, 2026

CVE-2026-0322: PAN-OS management root RCE, CVSS 8.6

Matthews Enterprises (PTY) LTD, Francois Matthews

CVE-2026-0322: PAN-OS management root RCE, CVSS 8.6

Palo Alto confirmed limited attacks using CVE-2026-0322 to run code as root on the PAN-OS management interface. Credentials plus network access are required.

Cybersecurity

Oct 15, 2026

YAM Store takedown: kits behind 1 billion scam messages

Matthews Enterprises (PTY) LTD, Francois Matthews

YAM Store takedown: kits behind 1 billion scam messages

A court-backed takedown hit YAM Store, CoGUI, and Iron Man, kits tied to more than 1 billion phishing messages and 75,000 organizations.

Cybersecurity

Oct 15, 2026

CVE-2026-76519: Cisco Secure Email Gateway root via one attachment

Matthews Enterprises (PTY) LTD, Francois Matthews

CVE-2026-76519: Cisco Secure Email Gateway root via one attachment

Attackers are writing files as root on Cisco Secure Email Gateway by sending one crafted attachment. File Reputation must be on, and the scanner tools must be old.

Cybersecurity

Oct 15, 2026

n0n lists 38 ports and shipping firms, deadline 19 October

Matthews Enterprises (PTY) LTD, Francois Matthews

n0n lists 38 ports and shipping firms, deadline 19 October

n0n named 38 shipping, port, and logistics firms and threatened to publish data on 19 October. None of the claims were confirmed when reported.

Cybersecurity

Oct 14, 2026

Linux Vghost CVE-2026-74580 can root a host or hit QEMU

Matthews Enterprises (PTY) LTD, Francois Matthews

Linux Vghost CVE-2026-74580 can root a host or hit QEMU

Vghost, CVE-2026-74580, is a stale cache in Linux vhost. A local user who can open /dev/vhost-* can reach root. A narrower path can hit QEMU.

Cybersecurity

Oct 14, 2026

YAM Store phishing market disrupted after 1 billion messages

Matthews Enterprises (PTY) LTD, Francois Matthews

YAM Store phishing market disrupted after 1 billion messages

Microsoft, Japan police, and Health-ISAC disrupted a Chinese-language phishing market that helped send more than 1 billion emails and texts since January.

Cybersecurity

Oct 14, 2026

Ivanti Connect Secure CVE-2026-104935 exploited for root access

Matthews Enterprises (PTY) LTD, Francois Matthews

Ivanti Connect Secure CVE-2026-104935 exploited for root access

Attackers have used CVE-2026-104935 since at least 1 October to reach root on Ivanti Connect Secure. Patch and assume the integrity checker can miss it.

Cybersecurity

Oct 14, 2026

FBI seizes 187 laptops in North Korean IT worker farm raids

Matthews Enterprises (PTY) LTD, Francois Matthews

FBI seizes 187 laptops in North Korean IT worker farm raids

US investigators arrested two facilitators and seized 187 laptops from 40 Texas sites used as laptop farms for North Korean IT workers. The scheme allegedly brought in over 3 million dollars.

Cybersecurity

Oct 14, 2026

Microsoft seizes YAM Store phishing kits behind 1 billion messages

Matthews Enterprises (PTY) LTD, Francois Matthews

Microsoft seizes YAM Store phishing kits behind 1 billion messages

Microsoft and Health-ISAC seized domains used by YAM Store, CoGUI, and Iron Man. The kits helped send more than one billion phishing emails and SMS messages since January 2026.

Cybersecurity

Oct 14, 2026

Ampath breach: attacker claims 80 million records, lab disputes count

Matthews Enterprises (PTY) LTD, Francois Matthews

Ampath breach: attacker claims 80 million records, lab disputes count

Ampath confirmed a 2 October cyberattack and notified data subjects under POPIA. An attacker claims 80 million records. Ampath says that figure is database entries, not patients, and that clinical results are not.

Cybersecurity

Oct 14, 2026

Ivanti Connect Secure CVE-2026-104935 exploited, patch by 16 Oct

Matthews Enterprises (PTY) LTD, Francois Matthews

Ivanti Connect Secure CVE-2026-104935 exploited, patch by 16 Oct

CISA added an exploited Ivanti Connect Secure auth bypass to KEV. Unauthenticated attackers can run commands and steal credentials. Federal deadline is 16 October.

Cybersecurity

Oct 14, 2026

Prev
1
2
3
4
5
Next