Our blog | Matthews Enterprises

Our blog

Rapuncel infostealer: fake GitHub downloads, signed driver kills 145 security tools

Matthews Enterprises (PTY) LTD, Francois Matthews

Rapuncel infostealer: fake GitHub downloads, signed driver kills 145 security tools

SEO-optimised GitHub repos impersonating 40 software brands drop a signed driver that kills 145 AV and EDR processes before stealing browser passwords.

Cybersecurity

Oct 23, 2026

Node.js CVE-2026-111497: Brotli decoder RCE across 22.x, 24.x and 26.x

Matthews Enterprises (PTY) LTD, Francois Matthews

Node.js CVE-2026-111497: Brotli decoder RCE across 22.x, 24.x and 26.x

Brotli's decoder buffer overflow ships inside Node.js 22, 24 and 26. Ten flaws were fixed on 21 October; 20.x is end-of-life and gets nothing.

Cybersecurity

Oct 23, 2026

Staples and Dell order emails carried scam helplines past DMARC

Matthews Enterprises (PTY) LTD, Francois Matthews

Staples and Dell order emails carried scam helplines past DMARC

Attackers put phone numbers into the shipping fields of real Staples and Dell order emails, so the messages passed DKIM and DMARC. Authentication proves the sender, not the content.

Cybersecurity

Oct 22, 2026

FortiGate and FortiWeb: 70,000 credentials taken in k0t edge campaign

Matthews Enterprises (PTY) LTD, Francois Matthews

FortiGate and FortiWeb: 70,000 credentials taken in k0t edge campaign

Group-IB and NyxLab traced an operator that exploits FortiWeb, brute forces FortiGate and then decrypts device configs with Fortinet's default key. Over 70,000 credentials are in the dataset.

Cybersecurity

Oct 22, 2026

PAN-OS CVE-2026-0257: Qilin and INC ransomware enter through GlobalProtect

Matthews Enterprises (PTY) LTD, Francois Matthews

PAN-OS CVE-2026-0257: Qilin and INC ransomware enter through GlobalProtect

Unit 42 has tied a May PAN-OS authentication bypass to Qilin, INC and Settra ransomware crews that turn a GlobalProtect session into domain credentials stolen from a virtual disk.

Cybersecurity

Oct 22, 2026

333 hijacked Tor exit relays stole SSH passwords for five days

Matthews Enterprises (PTY) LTD, Francois Matthews

333 hijacked Tor exit relays stole SSH passwords for five days

A researcher found 333 Tor exit relays redirecting SSH connections to 12 interception servers. Anyone who typed a password and accepted an unfamiliar host key handed it over.

Cybersecurity

Oct 22, 2026

Operation Serengeti III: 1,462 arrests, 10,909 networks across Africa

Matthews Enterprises (PTY) LTD, Francois Matthews

Operation Serengeti III: 1,462 arrests, 10,909 networks across Africa

Interpol's third Africa-wide cybercrime operation arrested 1,462 suspects and broke up 10,909 networks. Business email compromise was one of the main targets.

Cybersecurity

Oct 22, 2026

Windows 11 Always On VPN: the October update did not fix it

Matthews Enterprises (PTY) LTD, Francois Matthews

Windows 11 Always On VPN: the October update did not fix it

Microsoft marked the Always On VPN failure as fixed on 13 October, then returned it to Mitigated on 20 October. Affected fleets need the workaround for longer.

Cybersecurity

Oct 22, 2026

Duplicator CVE-2026-82814: CVSS 8.8 object injection on 1M+ sites

Matthews Enterprises (PTY) LTD, Francois Matthews

Duplicator CVE-2026-82814: CVSS 8.8 object injection on 1M+ sites

An anonymous comment can carry a PHP object that stays dormant until an administrator migrates the site. Duplicator 5.0.0 fixes it; old packages keep the old installer.

Cybersecurity

Oct 22, 2026

WP Mailster CVE-2026-111832: CVSS 10.0 web shell upload with no login

Matthews Enterprises (PTY) LTD, Francois Matthews

WP Mailster CVE-2026-111832: CVSS 10.0 web shell upload with no login

An unauthenticated upload path in WP Mailster let anyone drop a PHP web shell on a WordPress site. Fixed in 1.9.2.0; the patch does not remove what is already there.

Cybersecurity

Oct 22, 2026

Fortinet FortiOS 7.4.13 and 7.6.8 close critical flaws, advisories held to 10 November

Matthews Enterprises (PTY) LTD, Francois Matthews

Fortinet FortiOS 7.4.13 and 7.6.8 close critical flaws, advisories held to 10 November

Fortinet pushed critical FortiOS, FortiManager and FortiAnalyzer fixes on 22 October. Advisories and CVE numbers only arrive on 10 November, so this has to be scheduled on trust.

Cybersecurity

Oct 22, 2026

Chrome now warns when a ClickFix command lands on the clipboard

Matthews Enterprises (PTY) LTD, Francois Matthews

Chrome now warns when a ClickFix command lands on the clipboard

Chrome will now interrupt the moment a ClickFix page talks a user into pasting a PowerShell command. It only works where Enhanced Protection is switched on.

Cybersecurity

Oct 22, 2026

Prev
2
3
4
5
6
Next