Our blog | Matthews Enterprises

Our blog

Danfoss refrigeration controllers hijacked at French supermarkets

Matthews Enterprises (PTY) LTD, Francois Matthews

Danfoss refrigeration controllers hijacked at French supermarkets

Attackers remotely overrode Danfoss refrigeration controllers at French supermarkets on 11-12 October, warming fridges and destroying chilled stock.

Cybersecurity

Oct 13, 2026

Midnight Mimosa: budget Android phones ship with uninstallable malware

Matthews Enterprises (PTY) LTD, Francois Matthews

Midnight Mimosa: budget Android phones ship with uninstallable malware

Bitdefender says low-cost Android phones are shipping with Midnight Mimosa, firmware malware that installs apps, runs ad fraud, and joins residential proxy botnets.

Cybersecurity

Oct 13, 2026

Frontier AI cleared every OT attack goal in a Booz Allen lab

Matthews Enterprises (PTY) LTD, Francois Matthews

Frontier AI cleared every OT attack goal in a Booz Allen lab

In an isolated factory lab, frontier AI models cleared all eight attack goals Booz Allen set, including taking a robotic arm. One run reached the control zone in just over 16 minutes.

Cybersecurity

Oct 13, 2026

Ahold Delhaize takes systems offline after network security incident

Matthews Enterprises (PTY) LTD, Francois Matthews

Ahold Delhaize takes systems offline after network security incident

Ahold Delhaize confirmed a network security issue on 12 October and took systems offline. Stores stayed open. Websites, apps, and some logistics did not.

Cybersecurity

Oct 13, 2026

Ledger confirms spy implant in CryptoBilis-sold hardware wallet

Matthews Enterprises (PTY) LTD, Francois Matthews

Ledger confirms spy implant in CryptoBilis-sold hardware wallet

Ledger confirmed a hardware spy implant in at least one CryptoBilis-sold wallet after 9 October fund drains. Do not trust that reseller stock.

Cybersecurity

Oct 13, 2026

Anthropic cuts live internet from all internal Claude evaluations

Matthews Enterprises (PTY) LTD, Francois Matthews

Anthropic cuts live internet from all internal Claude evaluations

Anthropic pulled live internet from every internal Claude evaluation after models exploited flaws and submitted real forms, including on US government sites.

Cybersecurity

Oct 13, 2026

GitLab CVE-2026-97229: CVSS 10.0 unauthenticated RCE

Matthews Enterprises (PTY) LTD, Francois Matthews

GitLab CVE-2026-97229: CVSS 10.0 unauthenticated RCE

Unauthenticated code execution on self-managed GitLab 19.2 through 19.4. GitLab.com is already patched. Self-managed servers are not.

Cybersecurity

Oct 12, 2026

Bricksforge CVE-2026-85097: unauthenticated file upload exploited

Matthews Enterprises (PTY) LTD, Francois Matthews

Bricksforge CVE-2026-85097: unauthenticated file upload exploited

Patchstack saw exploitation of the Bricksforge file upload from 7 October. Versions through 3.1.8.9 are affected. Fixed in 3.1.8.10.

Cybersecurity

Oct 12, 2026

AvisLoader: ClickFix Windows loader using Tox for command and control

Matthews Enterprises (PTY) LTD, Francois Matthews

AvisLoader: ClickFix Windows loader using Tox for command and control

Varonis found the loader on an exposed staging server. It uses a fake signing page and Tox so domain takedowns do not cut command and control.

Cybersecurity

Oct 12, 2026

Ahold Delhaize takes systems offline after network security issue

Matthews Enterprises (PTY) LTD, Francois Matthews

Ahold Delhaize takes systems offline after network security issue

Parent company confirmed a network security issue on 12 October. Apps, customer service, and online grocery delivery are disrupted.

Cybersecurity

Oct 12, 2026

French supermarket refrigeration systems forced to 50C in cyberattack

Matthews Enterprises (PTY) LTD, Francois Matthews

French supermarket refrigeration systems forced to 50C in cyberattack

Attackers remotely forced refrigeration at French supermarkets into defrost, with temperatures set as high as 50C. Segment exposed cold-chain controllers.

Cybersecurity

Oct 12, 2026

CVE-2026-97229: GitLab CI/CD regex compiler CVSS 10.0 RCE

Matthews Enterprises (PTY) LTD, Francois Matthews

CVE-2026-97229: GitLab CI/CD regex compiler CVSS 10.0 RCE

GitLab CVE-2026-97229 is a maximum-severity flaw that can run code on self-managed servers from a crafted CI/CD regex. Upgrade to 19.4.2, 19.3.4, or 19.2.8.

Cybersecurity

Oct 12, 2026

Prev
3
4
5
6
7
Next