Our blog | Matthews Enterprises

12 Articles

Cybersecurity ×

Siemens Software Center CVE-2026-110936: signed installer, sideloaded RAT, CVSS 8.4

Matthews Enterprises (PTY) LTD, Francois Matthews

Siemens Software Center CVE-2026-110936: signed installer, sideloaded RAT, CVSS 8.4

Attackers pair a genuine signed Siemens installer with a crafted archive.dll to plant a remote access trojan. Fixed in V4.0.9.8, and CISA wants action by 3 November.

Cybersecurity

Oct 21, 2026

UpdraftCentral key theft: 99 fake plugin names used to backdoor WordPress sites

Matthews Enterprises (PTY) LTD, Francois Matthews

UpdraftCentral key theft: 99 fake plugin names used to backdoor WordPress sites

Keys lifted from TeamUpdraft's customer database were used to install backdoor plugins on connected WordPress sites. Updating the plugin is not enough; the connection keys must go.

Cybersecurity

Oct 21, 2026

PHP CVE-2026-109618 and CVE-2026-109619: 9.2 RCE, patch due 14:00 UTC

Matthews Enterprises (PTY) LTD, Francois Matthews

PHP CVE-2026-109618 and CVE-2026-109619: 9.2 RCE, patch due 14:00 UTC

Two 9.2-rated flaws in PHP core get fixes on 21 October at 14:00 UTC, after the embargo leaked early. Anything running PHP 8 needs the patch same day.

Cybersecurity

Oct 21, 2026

Plex Media Server CVE-2026-96656: exploited chain, CVSS 8.6

Matthews Enterprises (PTY) LTD, Francois Matthews

Plex Media Server CVE-2026-96656: exploited chain, CVSS 8.6

Four Plex flaws chain into unauthenticated code execution. Attackers are installing miners and residential proxies on servers that were never updated past August.

Cybersecurity

Oct 21, 2026

MikroTik RouterOS CVE-2026-88464: SNMP crash on 7.20 and later

Matthews Enterprises (PTY) LTD, Francois Matthews

MikroTik RouterOS CVE-2026-88464: SNMP crash on 7.20 and later

A single SNMP packet can crash the SNMP service on RouterOS 7.20 and later. SNMP off is safe, SNMP open to the WAN is not.

Cybersecurity

Oct 21, 2026

AOMEI Backupper update servers served malware in 5-minute windows

Matthews Enterprises (PTY) LTD, Francois Matthews

AOMEI Backupper update servers served malware in 5-minute windows

Google says AOMEI Backupper update servers were swapped for a backdoor in windows of five to ten minutes. South African organisations were among those hit.

Cybersecurity

Oct 20, 2026

Legal Aid SA orders password resets after phishing emails

Matthews Enterprises (PTY) LTD, Francois Matthews

Legal Aid SA orders password resets after phishing emails

Legal Aid South Africa ordered password changes for all staff after phishing emails posed as National Prosecuting Authority summonses around 8 and 9 October.

Cybersecurity

Oct 20, 2026

Rank Math PRO CVE-2026-111862: malware in some 3.0.123 downloads, CVSS 9.8

Matthews Enterprises (PTY) LTD, Francois Matthews

Rank Math PRO CVE-2026-111862: malware in some 3.0.123 downloads, CVSS 9.8

Some Rank Math PRO 3.0.123 downloads between 15 and 16 October carried malware. Updating to 3.0.124 does not remove a backdoor that already ran.

Cybersecurity

Oct 20, 2026

NGINX CVE-2026-15176: out-of-band patch, CVSS 8.1

Matthews Enterprises (PTY) LTD, Francois Matthews

NGINX CVE-2026-15176: out-of-band patch, CVSS 8.1

F5 shipped an out-of-band NGINX fix for CVE-2026-15176, CVSS 8.1. A crafted request can crash a worker, and code execution is possible if ASLR is off.

Cybersecurity

Oct 19, 2026

Drupal Field UI CVE-2026-108097: critical RCE, risk 19/25

Matthews Enterprises (PTY) LTD, Francois Matthews

Drupal Field UI CVE-2026-108097: critical RCE, risk 19/25

Drupal patched a critical Field UI remote code execution flaw, CVE-2026-108097. Core alone is not enough, but one known path needs no login.

Cybersecurity

Oct 19, 2026

Exchange on Windows Server 2022: October update can stall OWA and mail

Matthews Enterprises (PTY) LTD, Francois Matthews

Exchange on Windows Server 2022: October update can stall OWA and mail

Microsoft says October Windows Server updates can stop Outlook on the web sign-in and leave mail stuck in the Outbox. Do not uninstall the update.

Cybersecurity

Oct 19, 2026

Ubiquiti UniFi Video still hit in proxyjacking campaign, CVE-2021-44228

Matthews Enterprises (PTY) LTD, Francois Matthews

Ubiquiti UniFi Video still hit in proxyjacking campaign, CVE-2021-44228

GreyNoise found at least 143 devices in 34 countries rented out as residential proxies, including UniFi Video NVRs hit through CVE-2021-44228.

Cybersecurity

Oct 19, 2026

Prev
1
2
3
4
5
Next