Our blog | Matthews Enterprises

Our blog

Ledger finds unauthorized implant in CryptoBilis-sold wallets

Matthews Enterprises (PTY) LTD, Francois Matthews

Ledger finds unauthorized implant in CryptoBilis-sold wallets

Ledger paused CryptoBilis sales after fund-theft reports and found an unauthorized hardware implant in one device. Do not set up recent reseller units.

Cybersecurity

Oct 12, 2026

CVE-2026-102255: SonicWall SMA1000 CVSS 10.0 SSRF under attack

Matthews Enterprises (PTY) LTD, Francois Matthews

CVE-2026-102255: SonicWall SMA1000 CVSS 10.0 SSRF under attack

SonicWall SMA1000 CVE-2026-102255 is a CVSS 10.0 pre-auth SSRF. Probes started two days after the 6 October patch. Upgrade 6210, 7210, and 8200v now.

Cybersecurity

Oct 12, 2026

Ledger Confirms Hardware Implant in CryptoBilis Wallets

Matthews Enterprises (PTY) LTD, Francois Matthews

Ledger Confirms Hardware Implant in CryptoBilis Wallets

Ledger confirmed an unauthorized implant in a wallet sold by CryptoBilis. On-chain researchers estimate $86 million to $93 million taken from more than 300 wallets.

Cybersecurity

Oct 12, 2026

Bricksforge CVE-2026-85097 CVSS 10 WordPress RCE Exploited

Matthews Enterprises (PTY) LTD, Francois Matthews

Bricksforge CVE-2026-85097 CVSS 10 WordPress RCE Exploited

Patchstack says attackers are already exploiting CVE-2026-85097, a CVSS 10 unauthenticated file-upload flaw in Bricksforge through version 3.1.8.9.

Cybersecurity

Oct 12, 2026

SonicWall SMA1000 CVE-2026-102255 CVSS 10 SSRF Under Attack

Matthews Enterprises (PTY) LTD, Francois Matthews

SonicWall SMA1000 CVE-2026-102255 CVSS 10 SSRF Under Attack

A CVSS 10 SSRF in SonicWall SMA1000 Work Place was probed within two days of the patch. Models 6210, 7210, and 8200v need the new hotfix.

Cybersecurity

Oct 12, 2026

Palo Alto CVE-2026-0257 Still Used for Ransomware VPN Access

Matthews Enterprises (PTY) LTD, Francois Matthews

Palo Alto CVE-2026-0257 Still Used for Ransomware VPN Access

Five months after the patch, Qilin and Settra are still using CVE-2026-0257 to open unauthorized GlobalProtect sessions that look like normal remote work.

Cybersecurity

Oct 12, 2026

FortiBleed still holds 86,644 Fortinet device credentials

Matthews Enterprises (PTY) LTD, Francois Matthews

FortiBleed still holds 86,644 Fortinet device credentials

The FBI and Secret Service say FortiBleed is still active. SOCRadar verified working credentials for 86,644 Fortinet devices in 194 countries, and some victims are locked out.

Cybersecurity

Oct 12, 2026

Fake Claude ads hide a ClickFix command behind Bing

Matthews Enterprises (PTY) LTD, Francois Matthews

Fake Claude ads hide a ClickFix command behind Bing

Push Security found Google ads for Claude on Mac that bounce through Bing and a compromised shop to a fake installer. The copy button hides a different command.

Cybersecurity

Oct 12, 2026

Edward Dubrovsky arrested in Pennsylvania extortion case

Matthews Enterprises (PTY) LTD, Francois Matthews

Edward Dubrovsky arrested in Pennsylvania extortion case

A Canadian ransomware-negotiation executive was arrested at a Pennsylvania conference on sealed conspiracy and extortion charges. The FBI has not confirmed a ShinyHunters link.

Cybersecurity

Oct 12, 2026

Nippon Columbia malware exposed 8.63 million karaoke records

Matthews Enterprises (PTY) LTD, Francois Matthews

Nippon Columbia malware exposed 8.63 million karaoke records

Daiichi Kosho says malware on a contractor PC at Nippon Columbia exposed names and contact data for 8.63 million customers and 93,000 employees. Data theft is not confirmed.

Cybersecurity

Oct 12, 2026

CyberXero used Claude Code to steal 628,000 Ukrainian records

Matthews Enterprises (PTY) LTD, Francois Matthews

CyberXero used Claude Code to steal 628,000 Ukrainian records

SOCRadar says CyberXero ran 51 Claude Code agents against WordPress and Ukrainian critical infrastructure, with confirmed theft of more than 628,000 records.

Cybersecurity

Oct 12, 2026

Germany Arrests Alleged Qilin Ransomware Leader

Matthews Enterprises (PTY) LTD, Francois Matthews

Germany Arrests Alleged Qilin Ransomware Leader

Germany arrested a Russian national suspected of being a leading Qilin ransomware member after Japan extradited him. The leak site kept listing victims after the May detention.

Cybersecurity

Oct 9, 2026

Prev
4
5
6
7
8
Next