Our blog | Matthews Enterprises

Our blog

AOMEI Backupper update servers served malware in 5-minute windows

Matthews Enterprises (PTY) LTD, Francois Matthews

AOMEI Backupper update servers served malware in 5-minute windows

Google says AOMEI Backupper update servers were swapped for a backdoor in windows of five to ten minutes. South African organisations were among those hit.

Cybersecurity

Oct 20, 2026

Legal Aid SA orders password resets after phishing emails

Matthews Enterprises (PTY) LTD, Francois Matthews

Legal Aid SA orders password resets after phishing emails

Legal Aid South Africa ordered password changes for all staff after phishing emails posed as National Prosecuting Authority summonses around 8 and 9 October.

Cybersecurity

Oct 20, 2026

Rank Math PRO CVE-2026-111862: malware in some 3.0.123 downloads, CVSS 9.8

Matthews Enterprises (PTY) LTD, Francois Matthews

Rank Math PRO CVE-2026-111862: malware in some 3.0.123 downloads, CVSS 9.8

Some Rank Math PRO 3.0.123 downloads between 15 and 16 October carried malware. Updating to 3.0.124 does not remove a backdoor that already ran.

Cybersecurity

Oct 20, 2026

NGINX CVE-2026-15176: out-of-band patch, CVSS 8.1

Matthews Enterprises (PTY) LTD, Francois Matthews

NGINX CVE-2026-15176: out-of-band patch, CVSS 8.1

F5 shipped an out-of-band NGINX fix for CVE-2026-15176, CVSS 8.1. A crafted request can crash a worker, and code execution is possible if ASLR is off.

Cybersecurity

Oct 19, 2026

Drupal Field UI CVE-2026-108097: critical RCE, risk 19/25

Matthews Enterprises (PTY) LTD, Francois Matthews

Drupal Field UI CVE-2026-108097: critical RCE, risk 19/25

Drupal patched a critical Field UI remote code execution flaw, CVE-2026-108097. Core alone is not enough, but one known path needs no login.

Cybersecurity

Oct 19, 2026

Exchange on Windows Server 2022: October update can stall OWA and mail

Matthews Enterprises (PTY) LTD, Francois Matthews

Exchange on Windows Server 2022: October update can stall OWA and mail

Microsoft says October Windows Server updates can stop Outlook on the web sign-in and leave mail stuck in the Outbox. Do not uninstall the update.

Cybersecurity

Oct 19, 2026

Ubiquiti UniFi Video still hit in proxyjacking campaign, CVE-2021-44228

Matthews Enterprises (PTY) LTD, Francois Matthews

Ubiquiti UniFi Video still hit in proxyjacking campaign, CVE-2021-44228

GreyNoise found at least 143 devices in 34 countries rented out as residential proxies, including UniFi Video NVRs hit through CVE-2021-44228.

Cybersecurity

Oct 19, 2026

ConnectWise Cloud Backup app credentials used against Microsoft 365 tenants

Matthews Enterprises (PTY) LTD, Francois Matthews

ConnectWise Cloud Backup app credentials used against Microsoft 365 tenants

ConnectWise shut off Cloud Backup after stolen app credentials signed in to Microsoft 365 tenants from 15 October. Disable the apps and review roles.

Cybersecurity

Oct 19, 2026

Fortinet CVE-2025-61624 path traversal added to KEV, CVSS 5.4

Matthews Enterprises (PTY) LTD, Francois Matthews

Fortinet CVE-2025-61624 path traversal added to KEV, CVSS 5.4

Fortinet marks CVE-2025-61624 exploited. An admin CLI path traversal can write or delete files on FortiOS. Upgrade 7.4 and 7.6, or migrate older branches.

Cybersecurity

Oct 19, 2026

Bootlegger: AI-built dashboard leaked data for 132 stores

Matthews Enterprises (PTY) LTD, Francois Matthews

Bootlegger: AI-built dashboard leaked data for 132 stores

A Bootlegger operations dashboard, built with AI and hosted on Railway, sent store and franchisee data with the login page. MyBroadband verified 132 locations.

Cybersecurity

Oct 16, 2026

Ampath confirms a patient-data breach, disputes the 80 million figure

Matthews Enterprises (PTY) LTD, Francois Matthews

Ampath confirms a patient-data breach, disputes the 80 million figure

Ampath confirmed a 2 October cyberattack. ID numbers and medical aid details may be exposed. The 80 million figure is database rows, not confirmed people.

Cybersecurity

Oct 16, 2026

Cisco Secure Email Gateway CVE-2026-76519, CVSS 9.8, KEV due 17 October

Matthews Enterprises (PTY) LTD, Francois Matthews

Cisco Secure Email Gateway CVE-2026-76519, CVSS 9.8, KEV due 17 October

Cisco confirmed attackers are using CVE-2026-76519 to write files as root on Secure Email Gateway when File Reputation is on. Update Content Scanner Tools or AsyncOS.

Cybersecurity

Oct 16, 2026

Prev
4
5
6
7
8
Next