Our blog | Matthews Enterprises

Our blog

VOLTA infostealer: Microsoft OAuth tokens and SSH keys, ranked by AI

Matthews Enterprises (PTY) LTD, Francois Matthews

VOLTA infostealer: Microsoft OAuth tokens and SSH keys, ranked by AI

A new Windows stealer takes passwords, session cookies, Microsoft OAuth tokens and SSH keys, then pays a language model to rank how much the victim is worth.

Cybersecurity

Nov 2, 2026

Android SMS of Death: one text crashes the phone, and Android 12 and 13 get no fix

Matthews Enterprises (PTY) LTD, Francois Matthews

Android SMS of Death: one text crashes the phone, and Android 12 and 13 get no fix

One crafted text message kills Android's telephony process, drops calls and can leave a phone in a reboot loop until it is factory reset. Android 12 and 13 get no fix.

Cybersecurity

Nov 2, 2026

Veeam Backup for Microsoft 365 CVE-2026-106076: CVSS 9.0 SQL injection to RCE

Matthews Enterprises (PTY) LTD, Francois Matthews

Veeam Backup for Microsoft 365 CVE-2026-106076: CVSS 9.0 SQL injection to RCE

Veeam fixed four flaws in Backup for Microsoft 365, led by a 9.0 SQL injection that ends in code execution as the PostgreSQL service account. Only 8.6 Patch 1 closes all four.

Cybersecurity

Oct 30, 2026

FortiBleed 2.0: 40,573 plaintext credentials in exposed FortiGate configs

Matthews Enterprises (PTY) LTD, Francois Matthews

FortiBleed 2.0: 40,573 plaintext credentials in exposed FortiGate configs

A second FortiBleed dataset adds 1,703 FortiGate configuration reports holding 40,573 cleartext credentials, including 1,576 Active Directory LDAP bind records.

Cybersecurity

Oct 30, 2026

VMware ESXi CVE-2026-41709: 2.7 logging flaw exploited to hide vCenter intrusions

Matthews Enterprises (PTY) LTD, Francois Matthews

VMware ESXi CVE-2026-41709: 2.7 logging flaw exploited to hide vCenter intrusions

CISA listed a 2.7-rated ESXi logging flaw as exploited after CrowdStrike tied it to a China-nexus group hiding its tracks inside vCenter.

Cybersecurity

Oct 30, 2026

GCIS e-recruitment breach: applicant ID numbers and contact details exposed

Matthews Enterprises (PTY) LTD, Francois Matthews

GCIS e-recruitment breach: applicant ID numbers and contact details exposed

GCIS has told job applicants that its e-recruitment system was compromised, with ID numbers, phone numbers and email addresses potentially exposed.

Cybersecurity

Oct 30, 2026

Drupal Commerce Core CVE-2026-118539: access bypass exploited on 42,000 store sites

Matthews Enterprises (PTY) LTD, Francois Matthews

Drupal Commerce Core CVE-2026-118539: access bypass exploited on 42,000 store sites

Drupal rates CVE-2026-118539 highly critical: no login is needed to reach protected commerce routes and entity fields, and the module's own team says attacks are already live.

Cybersecurity

Oct 30, 2026

GitLab CVE-2026-97229: CVSS 10.0 RCE now exploited, and the Ruby fix matters too

Matthews Enterprises (PTY) LTD, Francois Matthews

GitLab CVE-2026-97229: CVSS 10.0 RCE now exploited, and the Ruby fix matters too

CISA added GitLab's CVSS 10.0 CI/CD regex flaw to its exploited list after an attacker nearly broke into Alpine Linux's instance. Upgrading GitLab alone was not enough.

Cybersecurity

Oct 30, 2026

Linux kernel CVE-2026-98432: 9.8 remote root flaw with no Ubuntu or RHEL patch

Matthews Enterprises (PTY) LTD, Francois Matthews

Linux kernel CVE-2026-98432: 9.8 remote root flaw with no Ubuntu or RHEL patch

The Linux kernel CVE team rates a TCP use-after-free 9.8. Fixed kernels exist for Debian and Oracle Linux, but not yet for Ubuntu or RHEL.

Cybersecurity

Oct 30, 2026

FNB fined R1 million after one access-control slip exposed 88 home loan files to 696 clients

Matthews Enterprises (PTY) LTD, Francois Matthews

FNB fined R1 million after one access-control slip exposed 88 home loan files to 696 clients

South Africa's Information Regulator fined FNB R1 million after a misconfigured app exposed 88 home loan applications to 696 unauthorised users.

Cybersecurity

Oct 30, 2026

319 Chrome extensions with 13.4 million installs hijacked search traffic

Matthews Enterprises (PTY) LTD, Francois Matthews

319 Chrome extensions with 13.4 million installs hijacked search traffic

Socket found 319 unlisted Chrome extensions with 13.4 million installs rerouting searches to Bing and Yahoo through operator-controlled proxies.

Cybersecurity

Oct 30, 2026

Tailscale SSH Tailworm Flaws: Root Escalation Fixed in 1.104.4

Matthews Enterprises (PTY) LTD, Francois Matthews

Tailscale SSH Tailworm Flaws: Root Escalation Fixed in 1.104.4

Eleven Tailscale findings let an already-authorised device reach root-only sockets through SSH forwarding. Patched in v1.104.4 this week.

Cybersecurity

Oct 29, 2026

Prev
2
3
4
5
6
Next