Our blog | Matthews Enterprises

Our blog

Dahua IP cameras hijacked via Easy4IP P2P and CVE-2021-33044 bypass

Matthews Enterprises (PTY) LTD, Francois Matthews

Dahua IP cameras hijacked via Easy4IP P2P and CVE-2021-33044 bypass

CERT-UA says attackers are hijacking Dahua cameras and recorders through the Easy4IP P2P cloud, using guessable serial numbers and a 2021 login bypass that still works on old firmware.

Cybersecurity

Oct 27, 2026

Information Regulator fines Johannesburg TVET college R500,000 under POPIA

Matthews Enterprises (PTY) LTD, Francois Matthews

Information Regulator fines Johannesburg TVET college R500,000 under POPIA

A Johannesburg TVET college was fined R500,000 for ignoring a POPIA enforcement notice. The failures it was punished for are common: no registered Information Officer, no framework, no breach report.

Cybersecurity

Oct 27, 2026

Tailworm: 11 unpatched Tailscale flaws, Tailscale SSH gives root

Matthews Enterprises (PTY) LTD, Francois Matthews

Tailworm: 11 unpatched Tailscale flaws, Tailscale SSH gives root

A researcher published 11 Tailscale findings without a coordinated fix. One lets any permitted Tailscale SSH user reach root on the target server, using forwarding that runs as root.

Cybersecurity

Oct 27, 2026

DreamHost forced email and FTP password resets after 23 October incident

Matthews Enterprises (PTY) LTD, Francois Matthews

DreamHost forced email and FTP password resets after 23 October incident

DreamHost reset email and FTP/SFTP passwords for affected accounts after File Manager problems on 23 October spread to other services. It still has not said what happened.

Cybersecurity

Oct 27, 2026

AGENTS.md in Downloads: Codex ran planted npm malware in over 90% of tests

Matthews Enterprises (PTY) LTD, Francois Matthews

AGENTS.md in Downloads: Codex ran planted npm malware in over 90% of tests

A 13 KB AGENTS.md in a customer's Downloads folder told the coding agent to install a malicious npm package. Codex complied in over 90% of tests, and no vendor patch can stop it.

Cybersecurity

Oct 26, 2026

ConnectWise cloud backup: 2,250 Microsoft 365 tenants reached at 2,900 sign-ins per minute

Matthews Enterprises (PTY) LTD, Francois Matthews

ConnectWise cloud backup: 2,250 Microsoft 365 tenants reached at 2,900 sign-ins per minute

Stolen ConnectWise cloud backup credentials were used against more than 2,250 downstream Microsoft 365 tenants at 2,900 sign-ins a minute, with backdoor credentials added along the way.

Cybersecurity

Oct 26, 2026

Magento loader: 953 online stores hit, and deleting the script is not a fix

Matthews Enterprises (PTY) LTD, Francois Matthews

Magento loader: 953 online stores hit, and deleting the script is not a fix

A loader domain registered on 6 October appeared on 83 stores in days, 60 of which were already infected months earlier. Removing the script leaves the attacker's database access intact.

Cybersecurity

Oct 26, 2026

CVE-2026-110447: web shells planted on Nextcloud through Collabora's CODE app

Matthews Enterprises (PTY) LTD, Francois Matthews

CVE-2026-110447: web shells planted on Nextcloud through Collabora's CODE app

An unauthenticated request could run a command whenever the bundled document server was down, and attackers used that window to drop PHP web shells on file servers.

Cybersecurity

Oct 26, 2026

PHP2Shell: CVE-2026-109618 RCE confirmed on a live PHP 8.4.26 server

Matthews Enterprises (PTY) LTD, Francois Matthews

PHP2Shell: CVE-2026-109618 RCE confirmed on a live PHP 8.4.26 server

Honeypot telemetry recorded working code execution against Apache mod_php on PHP 8.4.26. The flaw sits in the PHP engine, so no plugin, theme or framework update saves an unpatched server.

Cybersecurity

Oct 26, 2026

GitHub Actions: Gheist planted 13,500 credential-dumping workflows

Matthews Enterprises (PTY) LTD, Francois Matthews

GitHub Actions: Gheist planted 13,500 credential-dumping workflows

Wiz recovered 13,500 ci-sync branches created with 850 stolen GitHub tokens. Each one printed repository secrets into a log the attackers downloaded and then deleted.

Cybersecurity

Oct 26, 2026

.NET out-of-band update: CVE-2026-70197 and CVE-2026-102870 needed a second fix

Matthews Enterprises (PTY) LTD, Francois Matthews

.NET out-of-band update: CVE-2026-70197 and CVE-2026-102870 needed a second fix

Two fixes shipped on 13 October did not fully close the holes. Microsoft pushed corrected .NET 8, 9 and 10 builds on 25 October, and self-contained apps need a rebuild.

Cybersecurity

Oct 26, 2026

FNB fined R1 million under POPIA for exposing 88 home-loan applicants

Matthews Enterprises (PTY) LTD, Francois Matthews

FNB fined R1 million under POPIA for exposing 88 home-loan applicants

The Information Regulator fined FNB R1 million after a permissions error let 696 app users read the names, ID numbers and salary details of 88 home-loan applicants.

Cybersecurity

Oct 26, 2026

Prev
5
6
7
8
9
Next