Our blog | Matthews Enterprises

12 Articles

Cybersecurity ×

Outlook.com 550 5.7.1: mail from domains without DMARC is rejected

Matthews Enterprises (PTY) LTD, Francois Matthews

Outlook.com 550 5.7.1: mail from domains without DMARC is rejected

Since 5 November, mail to outlook.com, hotmail.com, live.com and msn.com bounces with a permanent 550 5.7.1 when the sending domain publishes no DMARC record, even with SPF and DKIM passing.

Cybersecurity

Nov 10, 2026

WP Data Access CVE-2026-118267: CVSS 8.1 Flaw Resets Admin Password

Matthews Enterprises (PTY) LTD, Francois Matthews

WP Data Access CVE-2026-118267: CVSS 8.1 Flaw Resets Admin Password

The plugin's write endpoints accept key and val parameters without the restrictions its read endpoints enforce, so a Subscriber account can overwrite the administrator password hash.

Cybersecurity

Nov 10, 2026

The Courier Guy: MedusaLocker Publishes Stolen Files at R239,300

Matthews Enterprises (PTY) LTD, Francois Matthews

The Courier Guy: MedusaLocker Publishes Stolen Files at R239,300

MedusaLocker has published The Courier Guy's supplier, lease and staff documents on its leak site, at a price cut of roughly half. The company traces it to one legacy file server.

Cybersecurity

Nov 10, 2026

FreeSWITCH CVE-2026-116779: one SIP message runs OS commands on the PBX

Matthews Enterprises (PTY) LTD, Francois Matthews

FreeSWITCH CVE-2026-116779: one SIP message runs OS commands on the PBX

A crafted SIP MESSAGE sent to a stock FreeSWITCH profile makes the switch run its own API commands, including operating system commands. Fixed in 1.11.3.

Cybersecurity

Nov 10, 2026

Chrome CVE-2026-125350: exploited XML zero-day fixed in 157.0.8103.50

Matthews Enterprises (PTY) LTD, Francois Matthews

Chrome CVE-2026-125350: exploited XML zero-day fixed in 157.0.8103.50

Google patched the eighth Chrome zero-day of 2026 on 9 November: a use-after-free in XML that is already exploited in attacks. The fix ships in 157.0.8103.50.

Cybersecurity

Nov 10, 2026

LatePoint CVE-2026-118066: unauthenticated takeover of WordPress booking accounts

Matthews Enterprises (PTY) LTD, Francois Matthews

LatePoint CVE-2026-118066: unauthenticated takeover of WordPress booking accounts

A public password reset route in the LatePoint booking plugin let an attacker rewrite a customer password without logging in. Versions up to 5.7.6 are affected.

Cybersecurity

Nov 10, 2026

N-able N-central: 33 flaws published, hosted RMM taken offline

Matthews Enterprises (PTY) LTD, Francois Matthews

N-able N-central: 33 flaws published, hosted RMM taken offline

An independent researcher published 33 N-central flaws with working exploit code on 8 November. N-able has taken hosted RMM offline worldwide and told on-premises customers to shut their servers down.

Cybersecurity

Nov 10, 2026

Productive Commerce CVE-2026-109925: unauthenticated SQL injection at CVSS 8.6

Matthews Enterprises (PTY) LTD, Francois Matthews

Productive Commerce CVE-2026-109925: unauthenticated SQL injection at CVSS 8.6

A wishlist parameter reaches the database without sanitising, so an unauthenticated request can query a store's data. Fixed in 1.1.54.

Cybersecurity

Nov 9, 2026

X.CPE botnet: 41,651 South African TV boxes shipped with a backdoor

Matthews Enterprises (PTY) LTD, Francois Matthews

X.CPE botnet: 41,651 South African TV boxes shipped with a backdoor

The malware was in the firmware before the boxes were sold. 41,651 South African devices formed part of a 1.3 million-device botnet that Google has now disrupted.

Cybersecurity

Nov 9, 2026

AutomatorWP CVE-2026-104768: approving a comment can mint an administrator

Matthews Enterprises (PTY) LTD, Francois Matthews

AutomatorWP CVE-2026-104768: approving a comment can mint an administrator

WordPress sites running AutomatorWP 6.0.4 or earlier can hand out an administrator account from an anonymous automation and a routine comment approval.

Cybersecurity

Nov 9, 2026

CWPdoor: a backdoored Control Web Panel binary sits on 340,000 exposed servers

Matthews Enterprises (PTY) LTD, Francois Matthews

CWPdoor: a backdoored Control Web Panel binary sits on 340,000 exposed servers

Attackers are swapping Control Web Panel's cwpsrv web server for a backdoored build that runs signed commands and hides them from the access log.

Cybersecurity

Nov 9, 2026

Open V exposure: 9,000 client call recordings sat open for two months

Matthews Enterprises (PTY) LTD, Francois Matthews

Open V exposure: 9,000 client call recordings sat open for two months

Recordings of medical scheme calls sat on a Shodan-indexed host for two months, next to databases, logins and source code. The client, not the IT supplier, carries the POPIA duty.

Cybersecurity

Nov 9, 2026

Prev
1
2
3
4
5
Next