Our blog | Matthews Enterprises

12 Articles

Cybersecurity ×

CryptoPayment Gateway CVE-2026-81648: CVSS 10.0, no patch, exploit attempts underway

Matthews Enterprises (PTY) LTD, Francois Matthews

CryptoPayment Gateway CVE-2026-81648: CVSS 10.0, no patch, exploit attempts underway

A WordPress payment plugin with a 10.0 unauthenticated flaw has no fixed version, and researchers say attackers are already probing for it. Deactivating it is the only fix.

Cybersecurity

Nov 3, 2026

XCPE backdoor: 1.3 million Android TV boxes left the factory infected

Matthews Enterprises (PTY) LTD, Francois Matthews

XCPE backdoor: 1.3 million Android TV boxes left the factory infected

Google says Videostrong built the x.cpe backdoor into firmware and sold access to criminals. 1.3 million boxes enrolled, and a restart brings it back.

Cybersecurity

Nov 2, 2026

Danfoss AK-SM 800A: 115 supermarkets had freezers defrosted overnight

Matthews Enterprises (PTY) LTD, Francois Matthews

Danfoss AK-SM 800A: 115 supermarkets had freezers defrosted overnight

A second wave hit more than 115 stores in six countries after the French attacks in October. The controller flaw was fixed in firmware 4.3.1.

Cybersecurity

Nov 2, 2026

Cursor served a tampered Claude Code extension that opened a reverse SSH backdoor

Matthews Enterprises (PTY) LTD, Francois Matthews

Cursor served a tampered Claude Code extension that opened a reverse SSH backdoor

Two tampered builds of the Claude Code extension sat in Cursor's marketplace for about 11 hours, carrying an SSH key, a reverse tunnel and persistence.

Cybersecurity

Nov 2, 2026

Microsoft Teams help-desk impersonation: AD CS ESC1 and ESC8 abuse ends in domain certificates

Matthews Enterprises (PTY) LTD, Francois Matthews

Microsoft Teams help-desk impersonation: AD CS ESC1 and ESC8 abuse ends in domain certificates

Attackers posed as IT support on Teams, walked users into Quick Assist, then abused certificate templates and NTLM relay to reach domain certificates.

Cybersecurity

Nov 2, 2026

TeamViewer CVE-2026-111585: a malicious host can run code on the technician's PC

Matthews Enterprises (PTY) LTD, Francois Matthews

TeamViewer CVE-2026-111585: a malicious host can run code on the technician's PC

An integer overflow in TeamViewer's screen decompression lets an attacker-controlled host take over the viewer's machine during an ordinary support session. Version 15.83 closes it.

Cybersecurity

Nov 2, 2026

Ivanti Connect Secure CVE-2026-111357: privilege escalation to root, exploited since 1 October

Matthews Enterprises (PTY) LTD, Francois Matthews

Ivanti Connect Secure CVE-2026-111357: privilege escalation to root, exploited since 1 October

Ivanti patched two more Connect Secure flaws chained with an October authentication bypass to reach root on fully patched gateways. No malware was dropped; the device was re-exploited for every command.

Cybersecurity

Nov 2, 2026

National Credit Regulator cyberattack: Auditor-General finds no isolated off-site backups

Matthews Enterprises (PTY) LTD, Francois Matthews

National Credit Regulator cyberattack: Auditor-General finds no isolated off-site backups

The Auditor-General could not verify the National Credit Regulator's first-half performance targets because a cyberattack destroyed the supporting records and no isolated off-site backup existed to restore them.

Cybersecurity

Nov 2, 2026

VOLTA infostealer: Microsoft OAuth tokens and SSH keys, ranked by AI

Matthews Enterprises (PTY) LTD, Francois Matthews

VOLTA infostealer: Microsoft OAuth tokens and SSH keys, ranked by AI

A new Windows stealer takes passwords, session cookies, Microsoft OAuth tokens and SSH keys, then pays a language model to rank how much the victim is worth.

Cybersecurity

Nov 2, 2026

Android SMS of Death: one text crashes the phone, and Android 12 and 13 get no fix

Matthews Enterprises (PTY) LTD, Francois Matthews

Android SMS of Death: one text crashes the phone, and Android 12 and 13 get no fix

One crafted text message kills Android's telephony process, drops calls and can leave a phone in a reboot loop until it is factory reset. Android 12 and 13 get no fix.

Cybersecurity

Nov 2, 2026

Veeam Backup for Microsoft 365 CVE-2026-106076: CVSS 9.0 SQL injection to RCE

Matthews Enterprises (PTY) LTD, Francois Matthews

Veeam Backup for Microsoft 365 CVE-2026-106076: CVSS 9.0 SQL injection to RCE

Veeam fixed four flaws in Backup for Microsoft 365, led by a 9.0 SQL injection that ends in code execution as the PostgreSQL service account. Only 8.6 Patch 1 closes all four.

Cybersecurity

Oct 30, 2026

FortiBleed 2.0: 40,573 plaintext credentials in exposed FortiGate configs

Matthews Enterprises (PTY) LTD, Francois Matthews

FortiBleed 2.0: 40,573 plaintext credentials in exposed FortiGate configs

A second FortiBleed dataset adds 1,703 FortiGate configuration reports holding 40,573 cleartext credentials, including 1,576 Active Directory LDAP bind records.

Cybersecurity

Oct 30, 2026

Prev
5
6
7
8
9
Next