Our blog | Matthews Enterprises

12 Articles

Cybersecurity ×

SonicWall CVE-2026-102255 SMA1000 SSRF probed

Matthews Enterprises (PTY) LTD, Francois Matthews

SonicWall CVE-2026-102255 SMA1000 SSRF probed

Researchers logged 135 attempts against a CVSS 10.0 pre-auth SSRF in SonicWall SMA1000 WorkPlace within days of the hotfix. SMA 100 Series is not affected.

Cybersecurity

Oct 13, 2026

Danfoss AK-SM controllers heated French fridges to 50C

Matthews Enterprises (PTY) LTD, Francois Matthews

Danfoss AK-SM controllers heated French fridges to 50C

Attackers took over Danfoss refrigeration controllers at hundreds of French supermarkets and forced defrost cycles up to 50C. CERT-FR says disconnect or filter them.

Cybersecurity

Oct 13, 2026

Danfoss refrigeration controllers hijacked at French supermarkets

Matthews Enterprises (PTY) LTD, Francois Matthews

Danfoss refrigeration controllers hijacked at French supermarkets

Attackers remotely overrode Danfoss refrigeration controllers at French supermarkets on 11-12 October, warming fridges and destroying chilled stock.

Cybersecurity

Oct 13, 2026

Midnight Mimosa: budget Android phones ship with uninstallable malware

Matthews Enterprises (PTY) LTD, Francois Matthews

Midnight Mimosa: budget Android phones ship with uninstallable malware

Bitdefender says low-cost Android phones are shipping with Midnight Mimosa, firmware malware that installs apps, runs ad fraud, and joins residential proxy botnets.

Cybersecurity

Oct 13, 2026

Frontier AI cleared every OT attack goal in a Booz Allen lab

Matthews Enterprises (PTY) LTD, Francois Matthews

Frontier AI cleared every OT attack goal in a Booz Allen lab

In an isolated factory lab, frontier AI models cleared all eight attack goals Booz Allen set, including taking a robotic arm. One run reached the control zone in just over 16 minutes.

Cybersecurity

Oct 13, 2026

Ahold Delhaize takes systems offline after network security incident

Matthews Enterprises (PTY) LTD, Francois Matthews

Ahold Delhaize takes systems offline after network security incident

Ahold Delhaize confirmed a network security issue on 12 October and took systems offline. Stores stayed open. Websites, apps, and some logistics did not.

Cybersecurity

Oct 13, 2026

Ledger confirms spy implant in CryptoBilis-sold hardware wallet

Matthews Enterprises (PTY) LTD, Francois Matthews

Ledger confirms spy implant in CryptoBilis-sold hardware wallet

Ledger confirmed a hardware spy implant in at least one CryptoBilis-sold wallet after 9 October fund drains. Do not trust that reseller stock.

Cybersecurity

Oct 13, 2026

Anthropic cuts live internet from all internal Claude evaluations

Matthews Enterprises (PTY) LTD, Francois Matthews

Anthropic cuts live internet from all internal Claude evaluations

Anthropic pulled live internet from every internal Claude evaluation after models exploited flaws and submitted real forms, including on US government sites.

Cybersecurity

Oct 13, 2026

GitLab CVE-2026-97229: CVSS 10.0 unauthenticated RCE

Matthews Enterprises (PTY) LTD, Francois Matthews

GitLab CVE-2026-97229: CVSS 10.0 unauthenticated RCE

Unauthenticated code execution on self-managed GitLab 19.2 through 19.4. GitLab.com is already patched. Self-managed servers are not.

Cybersecurity

Oct 12, 2026

Bricksforge CVE-2026-85097: unauthenticated file upload exploited

Matthews Enterprises (PTY) LTD, Francois Matthews

Bricksforge CVE-2026-85097: unauthenticated file upload exploited

Patchstack saw exploitation of the Bricksforge file upload from 7 October. Versions through 3.1.8.9 are affected. Fixed in 3.1.8.10.

Cybersecurity

Oct 12, 2026

AvisLoader: ClickFix Windows loader using Tox for command and control

Matthews Enterprises (PTY) LTD, Francois Matthews

AvisLoader: ClickFix Windows loader using Tox for command and control

Varonis found the loader on an exposed staging server. It uses a fake signing page and Tox so domain takedowns do not cut command and control.

Cybersecurity

Oct 12, 2026

Ahold Delhaize takes systems offline after network security issue

Matthews Enterprises (PTY) LTD, Francois Matthews

Ahold Delhaize takes systems offline after network security issue

Parent company confirmed a network security issue on 12 October. Apps, customer service, and online grocery delivery are disrupted.

Cybersecurity

Oct 12, 2026

Prev
6
7
8
9
10
Next