OpenText Cybersecurity | Webroot Community

Categories
Recently active
Help others

Welcome

News, Announcements, Tech Discussions

Product Releases

Patch Notes & Software Updates

Product Help & Discussions

Questions About a Webroot Product? Start Here!

Webroot® SecureAnywhere™ - Antivirus

6988 topics
25362 Replies

Webroot® SecureAnywhere™ - Internet Security Plus

2474 topics
9992 Replies

Webroot® SecureAnywhere™ - Complete

3838 topics
18390 Replies

Webroot® Consumer/Business - for Macs

371 topics
1921 Replies

Webroot Mobile Security for Android

943 topics
5029 Replies

Webroot® Business Endpoint Protection

1141 topics
3701 Replies

Webroot® Security Awareness Training

57 topics
175 Replies

Webroot® Business Mobile Protection

35 topics
101 Replies

Webroot® SecureAnywhere™ - Antivirus for PC Gamers

553 topics
1356 Replies

Webroot® Legacy Products (2011 and Prior)

33 topics
107 Replies

Webroot® Universal Syslog Connector

2 topics
3 Replies

Arcsight User Group

EnCase Usergroup

Fortify Usergroup

NetIQ Usergroup

Voltage Usergroup

API

All Things API

Integrations

Webroot Integration Discussions

ConnectWise Automate Integration

13 topics
35 Replies

ConnectWise Manage Integration

1 topic
1 Reply

Crypto Corner

A place to discuss all things cryptocurrency

OpenText NetIQ Access Management

Thanks for joining us! This NetIQ portfolio is focused on our access management products, which help you manage and provide secure access to your users. Select your product from the list of communities and join the conversations.

NetIQ Access Manager Portfolio Tips & Info

0 topics
0 Replies

OpenText NetIQ Access Manager Developer Discussions

0 topics
0 Replies

OpenText NetIQ Advanced Authentication Discussions

0 topics
0 Replies

OpenText NetIQ Risk Service

0 topics
0 Replies

OpenText NetIQ Secure API Manager

0 topics
0 Replies

OpenText NetIQ SecureLogin

0 topics
0 Replies

OpenText NetIQ Self Service Password Reset

0 topics
0 Replies

OpenText NetIQ Access Manager User Discussions

0 topics
0 Replies

NetIQ Access Manager Tips & Info

0 topics
0 Replies

OpenText NetIQ Advanced Authentication Tips & Info

0 topics
0 Replies

ConnorMThreat Research Analyst

Security Industry News

Critical Git vulnerability allows RCE when cloning repositories with submodules (CVE-2024-32002)

May 16, 2024 By Zeljka Zorz New versions of Git are out, with fixes for five vulnerabilities, the most critical (CVE-2024-32002) of which can be used by attackers to remotely execute code during a “clone” operation.About GitGit is a widely-popular distributed version control system for collaborative software development. It can be installed on machines running Windows, macOS, Linux, and various *BSD distributions.Web-based software development platforms GitHub and GitLab are based on Git. Visual Studio, Microsoft’s integrated development environment, has Git tooling (MinGit) built directly into it, and other IDEs rely on it. >> Full Article <<

22 hours ago

Jasper_The_RasperModerator

Security Industry News

Russian hackers use new Lunar malware to breach a European govt's agencies

May 16, 2024 By Bill Toulas Security researchers discovered two previously unseen backdoors dubbed LunarWeb and LunarMail that were used to compromise a European government's diplomatic institutions abroad.The pieces of malware have been used to breach the Ministry of Foreign Affairs of a European country with diplomatic missions in the Middle East and have been active since at least 2020.Researchers at cybersecurity company ESET believe that the backdoors may be connected to the Russian state-sponsored hacker group Turla, although attribution has medium confidence at this point. >> Full Article <<

22 hours ago

Jasper_The_RasperModerator

Security Industry News

New Wi-Fi Vulnerability Enables Network Eavesdropping via Downgrade Attacks

May 16, 2024 By Newsroom Researchers have discovered a new security vulnerability stemming from a design flaw in the IEEE 802.11 Wi-Fi standard that tricks victims into connecting to a less secure wireless network and eavesdrop on their network traffic.The SSID Confusion attack, tracked as CVE-2023-52424, impacts all operating systems and Wi-Fi clients, including home and mesh networks that are based on WEP, WPA3, 802.11X/EAP, and AMPE protocols.The method "involves downgrading victims to a less secure network by spoofing a trusted network name (SSID) so they can intercept their traffic or carry out further attacks," TopVPN said, which collaborated with KU Leuven professor and researcher Mathy Vanhoef. >> Full Article <<

23 hours ago

Jasper_The_RasperModerator

Security Industry News

Asian Threat Actors Use New Techniques to Attack Familiar Targets

Generative AI and software supply chain attacks are being exploited to disrupt, manipulate, and steal. May 16, 2024 By Microsoft Security, Microsoft Since June 2023, Microsoft has observed several notable cyber and influence trends from China and North Korea that indicate nation-state threat groups are doubling down on familiar targets by using more sophisticated influence techniques to achieve their goals. To protect their organizations against the latest attack vectors and nation-state threats, security teams must remain abreast of these trends.Chinese Influence Actors Hone Techniques, Experiment With AIIn recent months, Chinese cyber actors have broadly targeted three core areas: entities across the South Pacific islands, regional adversaries in the South China Sea, and the US defense industrial base. Meanwhile, Chinese influence actors have been able to refine their use of AI-generated and AI-enhanced content while also experimenting with new media in an attempt to stoke divisions

23 hours ago

Jasper_The_RasperModerator

Security Industry News

Scammers can easily phish your multi-factor authentication codes. Here’s how to avoid it

May 16, 2024 By Pieter Arntz More and more websites and services are making multi-factor-authentication (MFA) mandatory, which makes it much harder for cybercriminals to access your accounts. That’s a great thing. But as security evolves, so do cybercriminals who are always looking for new ways to scam us.A type of phishing we’re calling authentication-in-the-middle is showing up in online media. While these techniques, named after man-in-the-middle (MitM) attacks, have existed for a while, they appear to be gaining traction now.It works like this: A user gets lured to a phishing site masquerading as a site they normally use, such as a bank, email or social media account. Once the user enters their login into the fake site, that information gets redirected by the cybercriminals to the actual site, without the user knowing. >> Full Article <<

23 hours ago

Jasper_The_RasperModerator

Security Industry News

SANTANDER: A DATA BREACH AT A THIRD-PARTY PROVIDER IMPACTED CUSTOMERS AND EMPLOYEES

May 16, 2024 By Pierluigi Paganini The Spanish bank Santander disclosed a data breach at a third-party provider that impacted customers in Chile, Spain, and Uruguay.The Spanish financial institution Santander revealed a data breach involving a third-party provider that affected customers in Chile, Spain, and Uruguay.The bank recently became aware of unauthorized access to one of its databases hosted by a third-party provider.The company announced that it immediately implemented measures to contain the incident. The company blocked the compromised access to the database and established additional fraud prevention controls to protect affected customers.“We recently became aware of an unauthorized access to a Santander database hosted by a third-party provider.” reads the statement published by the bank. “Following an investigation, we have now confirmed that certain information relating to customers of Santander Chile, Spain and Uruguay, as well as all current and some former Santander e

23 hours ago

Jasper_The_RasperModerator

Tech Talk

Archie, the Internet’s first search engine, is rescued and running

A journey through busted tapes, the Internet Old Farts Club, and SPARCstations.KEVIN PURDY - 5/16/2024 It's amazing, and a little sad, to think that something created in 1989 that changed how people used and viewed the then-nascent Internet had nearly vanished by 2024.Nearly, that is, because the dogged researchers and enthusiasts at The Serial Port channel on YouTube have found what is likely the last existing copy of Archie. Archie, first crafted by Alan Emtage while a student at McGill University in Montreal, Quebec, allowed for the searching of various "anonymous" FTP servers around what was then a very small web of universities, researchers, and government and military nodes. It was groundbreaking; it was the first echo of the "anything, anywhere" Internet to come. And when The Serial Port went looking, it very much did not exist. >> Full Article <<

23 hours ago

kleinmat4103Popular Voice

Webroot® Security Awareness Training

Advice to Prevent Phish Tests from Overwhelming Help Desk

Every time we push a phish test our help desk is inundated with tickets from clients “helpfully” informing us that they discovered a phishing email in their inbox.We’ve tried distributing the phish test over the course of a month to keep volume down, but that just spreads out the tickets.We have a few ideas we’re kicking around, but wondering if others have good strategies already in place. Thanks!

20 days ago

jeremyvFresh Face

Webroot® Business Endpoint Protection

Can we audit device per sites if Web Threat Shield extension for Browser is enabled or disabled?

Hi Webroot Team, Newbie here. Can we audit device per sites if Web Threat Shield extension for Browser is enabled or disabled? Also, if the Web Threat Shield extension is disabled from a device with Webroot client program, does it mean that if the User accessed a malicious site, Webroot would not block it? Thank you.

1 month ago

jhartnerd123Community Expert Advisor

Webroot® WiFi Security

Is Webroot VPN going away?

Hi All,Curious if Webroot VPN is going away now that SaferVPN is being decommissioned as of Dec 15th, 2023. If readers didn’t know, Webroot VPN is technically NOT an in house product, but rather a reskinned/rebranded version of SaferVPN, but added some of their BrightCloud tech to it. I received a notice today that SaferVPN is recommending IPVanish and the website is saying they’ve joined with IPVanish. So does this mean, the Webroot VPN will be changing their product to update it’s look and feel of IPVanish? CuriousRegardsJohn H

5 months ago

chrisroseNew Voice

Webroot® Business Endpoint Protection

Deprecation of old Endpoint Management Console

Good day,I’m curious if anybody can shed any insight on the deprecation of the old Endpoint Protection Console and what we are to expect in terms of changes as of November 28th? I have reviewed training videos and understand where to perform most functions using the new console and entities.Please understand that we have hundreds of a sites listed in our consoles and I have reviewed the videos.Currently if I wish to go to the console and perform work on a site, I can go to the Sites list and I can search and find the site wether that is ABC company or XYZ, then I can click the little pop out or go to Endpoint Protection and click the “Go to Endpoint Protection Console” and I can access the old console.So what happens when the existing console is deprecated? will this button go away? Will there be a new button that will jump us to the specific site in Entities?There are also some logs areas that I’m suspect will no longer be available.Currently I can see which users accessed a site in

6 months ago

JB4New Member

Webroot® Universal Reporter

SkyStatus request failed (No parameterless constructor defined...

Had been running this report (Endpoint:List) with no problems.I added a couple of new sites.Universal Reporter is log indicates it is successful on the first site, and I get output for it.It fails on the second site (the first NEW site), with the error: :: ERROR [2023-10-12 15:54:16Z] Exception occurred. Exiting processing.... {"statusCode":500,"requestId":"31205b99-c3da-4e7b-8618-cd183536f303","error":null,"error_description":"SkyStatus request failed (No parameterless constructor defined for type of 'System.String'.)","AdditionalInformation":{}} At C:\Users\Me\OneDrive - MyCompany\Documents\Webroot Reporting\Runs\20231012T2153265213848Z\Templates\Endpoint List - 1.3\Scripts\template.psm1:275 char:5+ Get-UnityAPISkyStatusSiteEndpointStatusSite -UnityAPIClient $Scri ...The output for the failed site appears to have legitimate Parameters, Site, and ConsoleEndpoints sheets, but the other sheets all have headers but no endpoints.

7 months ago

Matthew_LangFresh Face

Unity API Forum

SkyStatus request failed (No parameterless constructor defined for type of 'System.String'.)

We have been using the API https://unityapi.webrootcloudav.com/service/api/status/site/{GSMKey} for many months now and it has been working fine until this morning.I have started receiving the following response and was wondering why this woudl suddenly be the case. I am getting the same result from other API calls for the endpoint status. { "statusCode": 500, "requestId": ", "error": null, "error_description": "SkyStatus request failed (No parameterless constructor defined for type of 'System.String'.)", "AdditionalInformation": {}}

7 months ago

TheNickleNew Member

Webroot® Security Awareness Training

Webroot Security Awareness Training Platform Throwing a 500 Error

Hello all!I am a cybersecurity analyst for an MSP and I am in charge of the Security Awareness Training program. I have been getting this error when trying to access the Webroot SAT platform:{"statusCode":500,"error":"Internal Server Error","message":"An internal server error occurred"}Probably every other day I get this error. It is getting annoying as I have to delay training until this error is resolved. Do you guys have insight as to why this is happening? Your help is much appreciated. Thank you!

7 months ago

MrPeteNew Voice

Webroot® Business Endpoint Protection

Where is the new Console Documented? (6.x version)

I seem to be missing something. I assume I’m just blind.Where in the documentation is the new Business Admin Console documented? We’re now on version 6.7, yet all I can find is documentation for the traditional console.

8 months ago

RockRidderFresh Face

Webroot® Universal Syslog Connector

Universal syslog connector: Run as Service

I was really excited to see this Application, we use Rapid7 and there was no good way to get this data into IDR. My excitement was quickly diminished immediately after I installed this software. Why create a software that is to redirect logs, and in this case to a SIEM and not make it run as a service? I tested it, right after I set it up, I monitored the service running and as soon as I logged off my admin account the service stopped and I can only assume the logging stopped as well. Is there anyway to run this as a service? I really don’t need to see the Scrolling CLI, that feature is pretty much pointless.

8 months ago

AsadPNew Voice

ConnectWise Automate Integration

Webroot Plugin not displaying menu when clicked (v4.1.1.416)

Recently updated Webroot Solution last night in one of our Automate Servers as we have two, but our first instance now no longer displays the plugin menu popup when accessed from Tools in Automate.Has the update broken this?As on our Server 2, V3.2.1.242 works fine when trying to access the plugin menu.

8 months ago

Events Calendar

User leaderboard

Show full leaderboard

Consumer Common KB Articles

Business Common KB Articles

Join the Conversation

Tweets by Webroot

Featured Topics

Upcoming Events

Cyber News Rundown: Hackers target City of HelsinkiNews

Events Calendar

User leaderboard

Join the Conversation

Sign up

Login to the community

Scanning file for viruses.

This file cannot be downloaded