OpenText Cybersecurity | Webroot Community

Categories
Recently active
Help others

Welcome

News, Announcements, Tech Discussions

Product Releases

Patch Notes & Software Updates

Product Help & Discussions

Questions About a Webroot Product? Start Here!

Webroot® SecureAnywhere™ - Antivirus

6988 topics
25362 Replies

Webroot® SecureAnywhere™ - Internet Security Plus

2473 topics
9991 Replies

Webroot® SecureAnywhere™ - Complete

3838 topics
18386 Replies

Webroot® Consumer/Business - for Macs

371 topics
1921 Replies

Webroot Mobile Security for Android

943 topics
5029 Replies

Webroot® Business Endpoint Protection

1141 topics
3701 Replies

Webroot® Security Awareness Training

57 topics
174 Replies

Webroot® Business Mobile Protection

35 topics
101 Replies

Webroot® SecureAnywhere™ - Antivirus for PC Gamers

553 topics
1356 Replies

Webroot® Legacy Products (2011 and Prior)

33 topics
107 Replies

Webroot® Universal Syslog Connector

2 topics
3 Replies

Arcsight User Group

EnCase Usergroup

Fortify Usergroup

NetIQ Usergroup

Voltage Usergroup

API

All Things API

Integrations

Webroot Integration Discussions

ConnectWise Automate Integration

13 topics
35 Replies

ConnectWise Manage Integration

1 topic
1 Reply

Crypto Corner

A place to discuss all things cryptocurrency

OpenText NetIQ Access Management

Thanks for joining us! This NetIQ portfolio is focused on our access management products, which help you manage and provide secure access to your users. Select your product from the list of communities and join the conversations.

NetIQ Access Manager Portfolio Tips & Info

0 topics
0 Replies

OpenText NetIQ Access Manager Developer Discussions

0 topics
0 Replies

OpenText NetIQ Advanced Authentication Discussions

0 topics
0 Replies

OpenText NetIQ Risk Service

0 topics
0 Replies

OpenText NetIQ Secure API Manager

0 topics
0 Replies

OpenText NetIQ SecureLogin

0 topics
0 Replies

OpenText NetIQ Self Service Password Reset

0 topics
0 Replies

OpenText NetIQ Access Manager User Discussions

0 topics
0 Replies

NetIQ Access Manager Tips & Info

0 topics
0 Replies

OpenText NetIQ Advanced Authentication Tips & Info

0 topics
0 Replies

ConnorMThreat Research Analyst

Security Industry News

$10 Million Bounty on Iranian Hackers for Cyber Attacks on US Gov, Defense Contractors

Four Iranians are accused of hacking into critical systems at the Departments of Treasury and State and dozens of private US companies. April 23, 2024 By Ryan Naraine Four Iranian nationals were indicted in Manhattan federal court on Tuesday, charged with conducting a sophisticated cyber-espionage campaign targeting U.S. government departments, defense contractors, and private firms. The accused, still at large, are accused of targeting and hacking into critical systems at the Departments of Treasury and State and more than a dozen private US companies with access to defense-related information.The four Iranians — Hossein Harooni, Reza Kazemifar, Komeil Baradaran Salmani, and Alireza Shafie Nasab — are accused of participating in a malware operation using spear-phishing and other hacking techniques to harvest hundreds of thousands of corporate employee accounts. >> Full Article <<

17 hours ago

Jasper_The_RasperModerator

Security Industry News

Hackers spread malware by hijacking unencrypted antivirus update mechanism

eScan AV updates were delivered over HTTP for five years.DAN GOODIN - 4/23/2024 Hackers abused an antivirus service for five years in order to infect end users with malware. The attack worked because the service delivered updates over HTTP, a protocol vulnerable to attacks that corrupt or tamper with data as it travels over the Internet.The unknown hackers, who may have ties to the North Korean government, pulled off this feat by performing a man-in-the-middle (MiitM) attack that replaced the genuine update with a file that installed an advanced backdoor instead, said researchers from security firm Avast today.eScan, an AV service headquartered in India, has delivered updates over HTTP since at least 2019, Avast researchers reported. This protocol presented a valuable opportunity for installing the malware, which is tracked in security circles under the name GuptiMiner."This sophisticated operation has been performing MitM attacks targeting an update mechanism of the eScan antivirus v

17 hours ago

Jasper_The_RasperModerator

Security Industry News

“Substantial proportion” of Americans may have had health and personal data stolen in Change Healthcare breach

18 hours ago

Jasper_The_RasperModerator

Security Industry News

Russian FSB Counterintelligence Chief Gets 9 Years in Cybercrime Bribery Scheme

April 22, 2024 By Brian Krebs The head of counterintelligence for a division of the Russian Federal Security Service (FSB) was sentenced last week to nine years in a penal colony for accepting a USD $1.7 million bribe to ignore the activities of a prolific Russian cybercrime group that hacked thousands of e-commerce websites. The protection scheme was exposed in 2022 when Russian authorities arrested six members of the group, which sold millions of stolen payment cards at flashy online shops like Trump’s Dumps.A now-defunct carding shop that sold stolen credit cards and invoked 45’s likeness and name.As reported by The Record, a Russian court last week sentenced former FSB officer Grigory Tsaregorodtsev for taking a $1.7 million bribe from a cybercriminal group that was seeking a “roof,” a well-placed, corrupt law enforcement official who could be counted on to both disregard their illegal hacking activities and run interference with authorities in the event of their arrest. >> F

18 hours ago

Jasper_The_RasperModerator

Security Industry News

A CYBER ATTACK PARALYZED OPERATIONS AT SYNLAB ITALIA

April 23, 2024 By Pierluigi Paganini A cyber attack has been disrupting operations at Synlab Italia, a leading provider of medical diagnosis services, since April 18.Since April 18, Synlab Italia, a major provider of medical diagnosis services, has been experiencing disruptions due to a cyber attack.The company initially cited technical issues as the cause leading to “temporary interruption of access to computer and telephone systems and related services.” However, a concerning scenario has emerged a few hours later.The company has released a statement informing customers of the ongoing attack and has “disabled” all company computer systems in Italy as a precautionary measure.Patients are facing significant disruptions, with many social media users complaining about their inability to access urgently needed diagnostic test results. >> Full Article <<

19 hours ago

Jasper_The_RasperModerator

Security Industry News

US imposes visa bans on 13 spyware makers and their families

April 23, 2024 By Sergiu Gatlan The Department of State has started imposing visa restrictions on mercenary spyware makers and peddlers, prohibiting their entry into the United States, as announced earlier in February.The crackdown has begun with 13 individuals and their close families (i.e., spouses and children) linked to commercial spyware operations.Taken pursuant to Section 212 (a)(3)(C) of the Immigration and Nationality Act, these visa restrictions allow the Secretary of State to exclude visa applications whose entry would have adverse foreign policy consequences for the U.S., effectively banning those linked to commercial spyware from entering the country."As part of the United States' efforts to counter the ongoing proliferation and misuse of commercial spyware as documented today in the Department of State's Country Reports on Human Rights Practices, the Department is taking steps to impose visa restrictions on 13 individuals who have been involved in the development and sa

19 hours ago

TripleHelixModerator

Security Industry News

Alert CISA Adds One Known Exploited Vulnerability to Catalog Release Date April 23, 2024

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.CVE-2022-38028 Microsoft Windows Print Spooler Privilege Escalation VulnerabilityThese types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the Known Exploited Vulnerabilities Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.Although BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritiz

22 hours ago

jeremyvFresh Face

Webroot® Business Endpoint Protection

Can we audit device per sites if Web Threat Shield extension for Browser is enabled or disabled?

Hi Webroot Team, Newbie here. Can we audit device per sites if Web Threat Shield extension for Browser is enabled or disabled? Also, if the Web Threat Shield extension is disabled from a device with Webroot client program, does it mean that if the User accessed a malicious site, Webroot would not block it? Thank you.

28 days ago

jhartnerd123Community Expert Advisor

Webroot® WiFi Security

Is Webroot VPN going away?

Hi All,Curious if Webroot VPN is going away now that SaferVPN is being decommissioned as of Dec 15th, 2023. If readers didn’t know, Webroot VPN is technically NOT an in house product, but rather a reskinned/rebranded version of SaferVPN, but added some of their BrightCloud tech to it. I received a notice today that SaferVPN is recommending IPVanish and the website is saying they’ve joined with IPVanish. So does this mean, the Webroot VPN will be changing their product to update it’s look and feel of IPVanish? CuriousRegardsJohn H

4 months ago

chrisroseNew Voice

Webroot® Business Endpoint Protection

Deprecation of old Endpoint Management Console

Good day,I’m curious if anybody can shed any insight on the deprecation of the old Endpoint Protection Console and what we are to expect in terms of changes as of November 28th? I have reviewed training videos and understand where to perform most functions using the new console and entities.Please understand that we have hundreds of a sites listed in our consoles and I have reviewed the videos.Currently if I wish to go to the console and perform work on a site, I can go to the Sites list and I can search and find the site wether that is ABC company or XYZ, then I can click the little pop out or go to Endpoint Protection and click the “Go to Endpoint Protection Console” and I can access the old console.So what happens when the existing console is deprecated? will this button go away? Will there be a new button that will jump us to the specific site in Entities?There are also some logs areas that I’m suspect will no longer be available.Currently I can see which users accessed a site in

5 months ago

JB4New Member

Webroot® Universal Reporter

SkyStatus request failed (No parameterless constructor defined...

Had been running this report (Endpoint:List) with no problems.I added a couple of new sites.Universal Reporter is log indicates it is successful on the first site, and I get output for it.It fails on the second site (the first NEW site), with the error: :: ERROR [2023-10-12 15:54:16Z] Exception occurred. Exiting processing.... {"statusCode":500,"requestId":"31205b99-c3da-4e7b-8618-cd183536f303","error":null,"error_description":"SkyStatus request failed (No parameterless constructor defined for type of 'System.String'.)","AdditionalInformation":{}} At C:\Users\Me\OneDrive - MyCompany\Documents\Webroot Reporting\Runs\20231012T2153265213848Z\Templates\Endpoint List - 1.3\Scripts\template.psm1:275 char:5+ Get-UnityAPISkyStatusSiteEndpointStatusSite -UnityAPIClient $Scri ...The output for the failed site appears to have legitimate Parameters, Site, and ConsoleEndpoints sheets, but the other sheets all have headers but no endpoints.

6 months ago

Matthew_LangFresh Face

Unity API Forum

SkyStatus request failed (No parameterless constructor defined for type of 'System.String'.)

We have been using the API https://unityapi.webrootcloudav.com/service/api/status/site/{GSMKey} for many months now and it has been working fine until this morning.I have started receiving the following response and was wondering why this woudl suddenly be the case. I am getting the same result from other API calls for the endpoint status. { "statusCode": 500, "requestId": ", "error": null, "error_description": "SkyStatus request failed (No parameterless constructor defined for type of 'System.String'.)", "AdditionalInformation": {}}

6 months ago

TheNickleNew Member

Webroot® Security Awareness Training

Webroot Security Awareness Training Platform Throwing a 500 Error

Hello all!I am a cybersecurity analyst for an MSP and I am in charge of the Security Awareness Training program. I have been getting this error when trying to access the Webroot SAT platform:{"statusCode":500,"error":"Internal Server Error","message":"An internal server error occurred"}Probably every other day I get this error. It is getting annoying as I have to delay training until this error is resolved. Do you guys have insight as to why this is happening? Your help is much appreciated. Thank you!

6 months ago

MrPeteNew Voice

Webroot® Business Endpoint Protection

Where is the new Console Documented? (6.x version)

I seem to be missing something. I assume I’m just blind.Where in the documentation is the new Business Admin Console documented? We’re now on version 6.7, yet all I can find is documentation for the traditional console.

7 months ago

RockRidderFresh Face

Webroot® Universal Syslog Connector

Universal syslog connector: Run as Service

I was really excited to see this Application, we use Rapid7 and there was no good way to get this data into IDR. My excitement was quickly diminished immediately after I installed this software. Why create a software that is to redirect logs, and in this case to a SIEM and not make it run as a service? I tested it, right after I set it up, I monitored the service running and as soon as I logged off my admin account the service stopped and I can only assume the logging stopped as well. Is there anyway to run this as a service? I really don’t need to see the Scrolling CLI, that feature is pretty much pointless.

7 months ago

AsadPNew Voice

ConnectWise Automate Integration

Webroot Plugin not displaying menu when clicked (v4.1.1.416)

Recently updated Webroot Solution last night in one of our Automate Servers as we have two, but our first instance now no longer displays the plugin menu popup when accessed from Tools in Automate.Has the update broken this?As on our Server 2, V3.2.1.242 works fine when trying to access the plugin menu.

7 months ago

ConnerPeterFresh Face

Webroot® DNS Protection

block all websites except for my competitor on the macos

I need to block all websites except for my competitor (limited website) that are allowed on the macos. This is a very locked down environment. I don’t see a way to block “ALL websites” and only allow just a handful.

11 months ago

Events Calendar

User leaderboard

Show full leaderboard

Consumer Common KB Articles

Business Common KB Articles

Join the Conversation

Tweets by Webroot

Check out this 2023 Nastiest Malware

Featured Topics

Upcoming Events

Cyber News Rundown Daixin ransomware group adds Omni Hotels to leak siteNews

Events Calendar

User leaderboard

Join the Conversation

Sign up

Login to the community

Scanning file for viruses.

This file cannot be downloaded