Our blog | Matthews Enterprises

12 Articles

Cybersecurity ×

Windows 11 KB5132061 fails with 0x800f0989 on devices that took KB5127936

Matthews Enterprises (PTY) LTD, Francois Matthews

Windows 11 KB5132061 fails with 0x800f0989 on devices that took KB5127936

The November 2026 Windows security updates stall and fail with 0x800f0989 on devices that took the October preview KB5127936. Microsoft is pushing an automatic repair.

Cybersecurity

Nov 12, 2026

Europol seizes 235 servers behind Gootloader, CastleRAT and StealC

Matthews Enterprises (PTY) LTD, Francois Matthews

Europol seizes 235 servers behind Gootloader, CastleRAT and StealC

Police seized 235 servers and 257 domains used by Gootloader, CastleRAT and StealC, and found 6.4 million stolen credential sets on them. The infected machines stay infected.

Cybersecurity

Nov 12, 2026

Stats SA job-seeker data sells for R34,000 as SA breach reports pass 8,000

Matthews Enterprises (PTY) LTD, Francois Matthews

Stats SA job-seeker data sells for R34,000 as SA breach reports pass 8,000

An archive of 453,362 job-seeker records from the Stats SA breach is now listed at about R34,000. The regulator has passed 8,000 breach notifications.

Cybersecurity

Nov 12, 2026

Apache HTTP Server CVE-2026-119618: CVSS 9.8 mod_http2 RCE, fixed in 2.4.71

Matthews Enterprises (PTY) LTD, Francois Matthews

Apache HTTP Server CVE-2026-119618: CVSS 9.8 mod_http2 RCE, fixed in 2.4.71

A race condition in mod_http2 lets an unauthenticated request corrupt the server heap and run code. Apache fixed it in 2.4.71 on 11 November.

Cybersecurity

Nov 12, 2026

Node.js CVE-2026-123864: HTTPS flaw leaks TLS keys, patch to 22.23.5, 24.22.3 or 26.13.1

Matthews Enterprises (PTY) LTD, Francois Matthews

Node.js CVE-2026-123864: HTTPS flaw leaks TLS keys, patch to 22.23.5, 24.22.3 or 26.13.1

A zero-length TLS write re-enters the HTTP parser and copies neighbouring heap memory into a response, private keys included. Fixed on 11 November.

Cybersecurity

Nov 12, 2026

GSocket Linux backdoor: detections up 356% on web servers

Matthews Enterprises (PTY) LTD, Francois Matthews

GSocket Linux backdoor: detections up 356% on web servers

Microsoft found unrelated actors using GSocket on compromised Linux web servers to hold encrypted access after the original flaw was patched.

Cybersecurity

Nov 12, 2026

WP Duplicate CVE-2026-123751: CVSS 9.8 upload flaw exploited, no patch

Matthews Enterprises (PTY) LTD, Francois Matthews

WP Duplicate CVE-2026-123751: CVSS 9.8 upload flaw exploited, no patch

An unauthenticated upload flaw in WP Duplicate is being exploited and has no vendor fix. Removal is the only remediation available.

Cybersecurity

Nov 12, 2026

Zoom Workplace for Windows CVE-2026-108186: CVSS 9.6, fixed in 7.1.8

Matthews Enterprises (PTY) LTD, Francois Matthews

Zoom Workplace for Windows CVE-2026-108186: CVSS 9.6, fixed in 7.1.8

A 9.6-rated privilege escalation in the Windows client needs no credentials and no user action. Zoom fixed it in 7.1.8 and reports no exploitation.

Cybersecurity

Nov 12, 2026

WordPress core CVE-2026-119977: 240,000 attempts on the upgrade window

Matthews Enterprises (PTY) LTD, Francois Matthews

WordPress core CVE-2026-119977: 240,000 attempts on the upgrade window

The flaw only exists while a site is updating itself, which makes the fix awkward: patching means running the vulnerable path one last time. Attackers know that.

Cybersecurity

Nov 12, 2026

N-able N-central: 33 zero-days published, hotfix fixes 7 CVEs

Matthews Enterprises (PTY) LTD, Francois Matthews

N-able N-central: 33 zero-days published, hotfix fixes 7 CVEs

A researcher published 33 N-central exploits on 9 November. N-able pulled hosted environments offline and shipped a hotfix for seven CVEs two days later.

Cybersecurity

Nov 12, 2026

ASUS router CVE-2026-88710: CVSS 8.7 root access from the local network

Matthews Enterprises (PTY) LTD, Francois Matthews

ASUS router CVE-2026-88710: CVSS 8.7 root access from the local network

Four ASUS router firmware flaws were fixed on 10 November. The worst chains identifier guessing and credential overwriting into root command execution, with no login required.

Cybersecurity

Nov 12, 2026

NightsBridge breach: guesthouse booking data is now fueling deposit fraud

Matthews Enterprises (PTY) LTD, Francois Matthews

NightsBridge breach: guesthouse booking data is now fueling deposit fraud

A NightsBridge breach exposed names, emails and booking references. Combined with earlier platform leaks, that is enough to run convincing deposit-change fraud on December bookings.

Cybersecurity

Nov 12, 2026

Prev
1
2
3
4
5
Next