Our blog | Matthews Enterprises

Our blog

GitLab CVE-2026-110264: CVSS 10.0 unauthenticated RCE on self-managed servers

Matthews Enterprises (PTY) LTD, Francois Matthews

GitLab CVE-2026-110264: CVSS 10.0 unauthenticated RCE on self-managed servers

A max-severity integer overflow in GitLab's regex compiler lets an unauthenticated attacker run code on any self-managed instance back to version 7.0. Fixed builds are out.

Cybersecurity

Oct 22, 2026

Microsoft 365 device code phishing: Wazza kit steals Entra tokens without a password

Matthews Enterprises (PTY) LTD, Francois Matthews

Microsoft 365 device code phishing: Wazza kit steals Entra tokens without a password

PDF lures from hijacked mailboxes lead to a page that hands the victim a real Microsoft device code. Enter it and the attacker holds your tokens, MFA or not.

Cybersecurity

Oct 22, 2026

SafePay ransomware: 600+ victims, entered through VPN and edge-device flaws

Matthews Enterprises (PTY) LTD, Francois Matthews

SafePay ransomware: 600+ victims, entered through VPN and edge-device flaws

A joint CISA, FBI and international advisory puts SafePay at 600+ victims since 2024. Entry is usually a VPN or edge-device flaw; the exit is your backups, deleted.

Cybersecurity

Oct 21, 2026

eMudhra: eight weak CA keys could forge any HTTPS certificate

Matthews Enterprises (PTY) LTD, Francois Matthews

eMudhra: eight weak CA keys could forge any HTTPS certificate

Eight eMudhra intermediate CA keys were generated with so little randomness that one private key was the number 4. Browsers blocked them in hours; anything with its own trust store still has to be fixed.

Cybersecurity

Oct 21, 2026

Windows Secure Boot 2011 certificates expired on 19 October

Matthews Enterprises (PTY) LTD, Francois Matthews

Windows Secure Boot 2011 certificates expired on 19 October

The Secure Boot certificate that signs the Windows boot manager expired on 19 October. PCs and servers still holding the 2011 keys keep running, but lose future boot-level protections.

Cybersecurity

Oct 21, 2026

OVHcloud CLI 0.11.0 to 0.15.0 shipped a credential stealer

Matthews Enterprises (PTY) LTD, Francois Matthews

OVHcloud CLI 0.11.0 to 0.15.0 shipped a credential stealer

Someone used an OVHcloud developer's GitHub account to swap official CLI release binaries for a build that harvests secrets from disk. The window was about 94 minutes.

Cybersecurity

Oct 21, 2026

Chrome 156 fixes 353 flaws, six of them critical

Matthews Enterprises (PTY) LTD, Francois Matthews

Chrome 156 fixes 353 flaws, six of them critical

Chrome 156 landed on 20 October with 353 fixes, six of them critical memory-corruption bugs. Desktop builds older than 156.0.8078.47 carry the exposure.

Cybersecurity

Oct 21, 2026

Siemens Software Center CVE-2026-110936: signed installer, sideloaded RAT, CVSS 8.4

Matthews Enterprises (PTY) LTD, Francois Matthews

Siemens Software Center CVE-2026-110936: signed installer, sideloaded RAT, CVSS 8.4

Attackers pair a genuine signed Siemens installer with a crafted archive.dll to plant a remote access trojan. Fixed in V4.0.9.8, and CISA wants action by 3 November.

Cybersecurity

Oct 21, 2026

UpdraftCentral key theft: 99 fake plugin names used to backdoor WordPress sites

Matthews Enterprises (PTY) LTD, Francois Matthews

UpdraftCentral key theft: 99 fake plugin names used to backdoor WordPress sites

Keys lifted from TeamUpdraft's customer database were used to install backdoor plugins on connected WordPress sites. Updating the plugin is not enough; the connection keys must go.

Cybersecurity

Oct 21, 2026

PHP CVE-2026-109618 and CVE-2026-109619: 9.2 RCE, patch due 14:00 UTC

Matthews Enterprises (PTY) LTD, Francois Matthews

PHP CVE-2026-109618 and CVE-2026-109619: 9.2 RCE, patch due 14:00 UTC

Two 9.2-rated flaws in PHP core get fixes on 21 October at 14:00 UTC, after the embargo leaked early. Anything running PHP 8 needs the patch same day.

Cybersecurity

Oct 21, 2026

Plex Media Server CVE-2026-96656: exploited chain, CVSS 8.6

Matthews Enterprises (PTY) LTD, Francois Matthews

Plex Media Server CVE-2026-96656: exploited chain, CVSS 8.6

Four Plex flaws chain into unauthenticated code execution. Attackers are installing miners and residential proxies on servers that were never updated past August.

Cybersecurity

Oct 21, 2026

MikroTik RouterOS CVE-2026-88464: SNMP crash on 7.20 and later

Matthews Enterprises (PTY) LTD, Francois Matthews

MikroTik RouterOS CVE-2026-88464: SNMP crash on 7.20 and later

A single SNMP packet can crash the SNMP service on RouterOS 7.20 and later. SNMP off is safe, SNMP open to the WAN is not.

Cybersecurity

Oct 21, 2026

Prev
3
4
5
6
7
Next