Our blog | Matthews Enterprises

Our blog

LiteSpeed Cache CVE-2026-113500: unauthenticated stored XSS, fixed in 7.9.2

Matthews Enterprises (PTY) LTD, Francois Matthews

LiteSpeed Cache CVE-2026-113500: unauthenticated stored XSS, fixed in 7.9.2

LiteSpeed Cache carries two unauthenticated stored XSS flaws, both rated 7.2, on a plugin with seven million active installs. The fix is in 7.9.2.

Cybersecurity

Oct 26, 2026

Windows Server 2016: the last security update lands in January 2027

Matthews Enterprises (PTY) LTD, Francois Matthews

Windows Server 2016: the last security update lands in January 2027

Microsoft has confirmed that the January 2027 security update is the last one Windows Server 2016 will get. Every edition is affected, and the replacement is Windows Server 2025.

Cybersecurity

Oct 26, 2026

Rand Mutual Assurance: Kazu gang claims 366GB of claim records

Matthews Enterprises (PTY) LTD, Francois Matthews

Rand Mutual Assurance: Kazu gang claims 366GB of claim records

Kazu says it holds 366GB of Rand Mutual Assurance claim records and has set a 4 November deadline. The insurer says only that it is investigating.

Cybersecurity

Oct 23, 2026

Microsoft 365 token replay: 497 sign-ins at 79 tenants, 48 rogue Entra devices

Matthews Enterprises (PTY) LTD, Francois Matthews

Microsoft 365 token replay: 497 sign-ins at 79 tenants, 48 rogue Entra devices

Huntress handled incidents at 79 organisations where attackers relayed the login, kept the post-MFA token and replayed it. Password resets alone left them inside.

Cybersecurity

Oct 23, 2026

ArubaOS: eight CVSS 10.0 flaws among 72 patched, pre-auth on AOS-8 and AOS-10

Matthews Enterprises (PTY) LTD, Francois Matthews

ArubaOS: eight CVSS 10.0 flaws among 72 patched, pre-auth on AOS-8 and AOS-10

HPE shipped 72 ArubaOS fixes. Eight are pre-auth authentication bypass and code execution flaws on AOS-8 and AOS-10, reachable with no credentials and no user action.

Cybersecurity

Oct 23, 2026

Pillow CVE-2026-112900: EPS filename injection, CVSS 9.2, fixed in 13.0.0

Matthews Enterprises (PTY) LTD, Francois Matthews

Pillow CVE-2026-112900: EPS filename injection, CVSS 9.2, fixed in 13.0.0

Pillow handed an attacker-controlled EPS filename straight to Ghostscript. A leading @ turned that name into an argument file, and the fix only landed in 13.0.0.

Cybersecurity

Oct 23, 2026

Linux KSMBD ZDI-CAN-33774: pre-auth RCE on port 445, CVSS 9.0, no kernel fix

Matthews Enterprises (PTY) LTD, Francois Matthews

Linux KSMBD ZDI-CAN-33774: pre-auth RCE on port 445, CVSS 9.0, no kernel fix

ZDI published a CVSS 9.0 pre-authentication RCE in Linux's in-kernel SMB server before any patch existed. If ksmbd is loaded and 445 is reachable, that is the exposure.

Cybersecurity

Oct 23, 2026

Rapuncel infostealer: fake GitHub downloads, signed driver kills 145 security tools

Matthews Enterprises (PTY) LTD, Francois Matthews

Rapuncel infostealer: fake GitHub downloads, signed driver kills 145 security tools

SEO-optimised GitHub repos impersonating 40 software brands drop a signed driver that kills 145 AV and EDR processes before stealing browser passwords.

Cybersecurity

Oct 23, 2026

Node.js CVE-2026-111497: Brotli decoder RCE across 22.x, 24.x and 26.x

Matthews Enterprises (PTY) LTD, Francois Matthews

Node.js CVE-2026-111497: Brotli decoder RCE across 22.x, 24.x and 26.x

Brotli's decoder buffer overflow ships inside Node.js 22, 24 and 26. Ten flaws were fixed on 21 October; 20.x is end-of-life and gets nothing.

Cybersecurity

Oct 23, 2026

Staples and Dell order emails carried scam helplines past DMARC

Matthews Enterprises (PTY) LTD, Francois Matthews

Staples and Dell order emails carried scam helplines past DMARC

Attackers put phone numbers into the shipping fields of real Staples and Dell order emails, so the messages passed DKIM and DMARC. Authentication proves the sender, not the content.

Cybersecurity

Oct 22, 2026

FortiGate and FortiWeb: 70,000 credentials taken in k0t edge campaign

Matthews Enterprises (PTY) LTD, Francois Matthews

FortiGate and FortiWeb: 70,000 credentials taken in k0t edge campaign

Group-IB and NyxLab traced an operator that exploits FortiWeb, brute forces FortiGate and then decrypts device configs with Fortinet's default key. Over 70,000 credentials are in the dataset.

Cybersecurity

Oct 22, 2026

PAN-OS CVE-2026-0257: Qilin and INC ransomware enter through GlobalProtect

Matthews Enterprises (PTY) LTD, Francois Matthews

PAN-OS CVE-2026-0257: Qilin and INC ransomware enter through GlobalProtect

Unit 42 has tied a May PAN-OS authentication bypass to Qilin, INC and Settra ransomware crews that turn a GlobalProtect session into domain credentials stolen from a virtual disk.

Cybersecurity

Oct 22, 2026

Prev
6
7
8
9
10
Next