Our blog | Matthews Enterprises

12 Articles

Cybersecurity ×

Rand Mutual Assurance: Kazu gang claims 366GB of claim records

Matthews Enterprises (PTY) LTD, Francois Matthews

Rand Mutual Assurance: Kazu gang claims 366GB of claim records

Kazu says it holds 366GB of Rand Mutual Assurance claim records and has set a 4 November deadline. The insurer says only that it is investigating.

Cybersecurity

Oct 23, 2026

Microsoft 365 token replay: 497 sign-ins at 79 tenants, 48 rogue Entra devices

Matthews Enterprises (PTY) LTD, Francois Matthews

Microsoft 365 token replay: 497 sign-ins at 79 tenants, 48 rogue Entra devices

Huntress handled incidents at 79 organisations where attackers relayed the login, kept the post-MFA token and replayed it. Password resets alone left them inside.

Cybersecurity

Oct 23, 2026

ArubaOS: eight CVSS 10.0 flaws among 72 patched, pre-auth on AOS-8 and AOS-10

Matthews Enterprises (PTY) LTD, Francois Matthews

ArubaOS: eight CVSS 10.0 flaws among 72 patched, pre-auth on AOS-8 and AOS-10

HPE shipped 72 ArubaOS fixes. Eight are pre-auth authentication bypass and code execution flaws on AOS-8 and AOS-10, reachable with no credentials and no user action.

Cybersecurity

Oct 23, 2026

Pillow CVE-2026-112900: EPS filename injection, CVSS 9.2, fixed in 13.0.0

Matthews Enterprises (PTY) LTD, Francois Matthews

Pillow CVE-2026-112900: EPS filename injection, CVSS 9.2, fixed in 13.0.0

Pillow handed an attacker-controlled EPS filename straight to Ghostscript. A leading @ turned that name into an argument file, and the fix only landed in 13.0.0.

Cybersecurity

Oct 23, 2026

Linux KSMBD ZDI-CAN-33774: pre-auth RCE on port 445, CVSS 9.0, no kernel fix

Matthews Enterprises (PTY) LTD, Francois Matthews

Linux KSMBD ZDI-CAN-33774: pre-auth RCE on port 445, CVSS 9.0, no kernel fix

ZDI published a CVSS 9.0 pre-authentication RCE in Linux's in-kernel SMB server before any patch existed. If ksmbd is loaded and 445 is reachable, that is the exposure.

Cybersecurity

Oct 23, 2026

Rapuncel infostealer: fake GitHub downloads, signed driver kills 145 security tools

Matthews Enterprises (PTY) LTD, Francois Matthews

Rapuncel infostealer: fake GitHub downloads, signed driver kills 145 security tools

SEO-optimised GitHub repos impersonating 40 software brands drop a signed driver that kills 145 AV and EDR processes before stealing browser passwords.

Cybersecurity

Oct 23, 2026

Node.js CVE-2026-111497: Brotli decoder RCE across 22.x, 24.x and 26.x

Matthews Enterprises (PTY) LTD, Francois Matthews

Node.js CVE-2026-111497: Brotli decoder RCE across 22.x, 24.x and 26.x

Brotli's decoder buffer overflow ships inside Node.js 22, 24 and 26. Ten flaws were fixed on 21 October; 20.x is end-of-life and gets nothing.

Cybersecurity

Oct 23, 2026

Staples and Dell order emails carried scam helplines past DMARC

Matthews Enterprises (PTY) LTD, Francois Matthews

Staples and Dell order emails carried scam helplines past DMARC

Attackers put phone numbers into the shipping fields of real Staples and Dell order emails, so the messages passed DKIM and DMARC. Authentication proves the sender, not the content.

Cybersecurity

Oct 22, 2026

FortiGate and FortiWeb: 70,000 credentials taken in k0t edge campaign

Matthews Enterprises (PTY) LTD, Francois Matthews

FortiGate and FortiWeb: 70,000 credentials taken in k0t edge campaign

Group-IB and NyxLab traced an operator that exploits FortiWeb, brute forces FortiGate and then decrypts device configs with Fortinet's default key. Over 70,000 credentials are in the dataset.

Cybersecurity

Oct 22, 2026

PAN-OS CVE-2026-0257: Qilin and INC ransomware enter through GlobalProtect

Matthews Enterprises (PTY) LTD, Francois Matthews

PAN-OS CVE-2026-0257: Qilin and INC ransomware enter through GlobalProtect

Unit 42 has tied a May PAN-OS authentication bypass to Qilin, INC and Settra ransomware crews that turn a GlobalProtect session into domain credentials stolen from a virtual disk.

Cybersecurity

Oct 22, 2026

333 hijacked Tor exit relays stole SSH passwords for five days

Matthews Enterprises (PTY) LTD, Francois Matthews

333 hijacked Tor exit relays stole SSH passwords for five days

A researcher found 333 Tor exit relays redirecting SSH connections to 12 interception servers. Anyone who typed a password and accepted an unfamiliar host key handed it over.

Cybersecurity

Oct 22, 2026

Operation Serengeti III: 1,462 arrests, 10,909 networks across Africa

Matthews Enterprises (PTY) LTD, Francois Matthews

Operation Serengeti III: 1,462 arrests, 10,909 networks across Africa

Interpol's third Africa-wide cybercrime operation arrested 1,462 suspects and broke up 10,909 networks. Business email compromise was one of the main targets.

Cybersecurity

Oct 22, 2026

Prev
1
2
3
4
5
Next