OpenText Cybersecurity | Webroot Community

Categories
Recently active
Help others

Welcome

News, Announcements, Tech Discussions

Product Releases

Patch Notes & Software Updates

Product Help & Discussions

Questions About a Webroot Product? Start Here!

Webroot® SecureAnywhere™ - Antivirus

6988 topics
25362 Replies

Webroot® SecureAnywhere™ - Internet Security Plus

2474 topics
9992 Replies

Webroot® SecureAnywhere™ - Complete

3838 topics
18390 Replies

Webroot® Consumer/Business - for Macs

371 topics
1921 Replies

Webroot Mobile Security for Android

943 topics
5029 Replies

Webroot® Business Endpoint Protection

1141 topics
3701 Replies

Webroot® Security Awareness Training

57 topics
175 Replies

Webroot® Business Mobile Protection

35 topics
101 Replies

Webroot® SecureAnywhere™ - Antivirus for PC Gamers

553 topics
1356 Replies

Webroot® Legacy Products (2011 and Prior)

33 topics
107 Replies

Webroot® Universal Syslog Connector

2 topics
3 Replies

Arcsight User Group

EnCase Usergroup

Fortify Usergroup

NetIQ Usergroup

Voltage Usergroup

API

All Things API

Integrations

Webroot Integration Discussions

ConnectWise Automate Integration

13 topics
35 Replies

ConnectWise Manage Integration

1 topic
1 Reply

Crypto Corner

A place to discuss all things cryptocurrency

OpenText NetIQ Access Management

Thanks for joining us! This NetIQ portfolio is focused on our access management products, which help you manage and provide secure access to your users. Select your product from the list of communities and join the conversations.

NetIQ Access Manager Portfolio Tips & Info

0 topics
0 Replies

OpenText NetIQ Access Manager Developer Discussions

0 topics
0 Replies

OpenText NetIQ Advanced Authentication Discussions

0 topics
0 Replies

OpenText NetIQ Risk Service

0 topics
0 Replies

OpenText NetIQ Secure API Manager

0 topics
0 Replies

OpenText NetIQ SecureLogin

0 topics
0 Replies

OpenText NetIQ Self Service Password Reset

0 topics
0 Replies

OpenText NetIQ Access Manager User Discussions

0 topics
0 Replies

NetIQ Access Manager Tips & Info

0 topics
0 Replies

OpenText NetIQ Advanced Authentication Tips & Info

0 topics
0 Replies

Jasper_The_RasperModerator

Security Industry News

US AI Experts Targeted in SugarGh0st RAT Campaign

Researchers believe the attacker is likely China-affiliated, since a previous version of the malware was used by a China nation-state attack group. May 16, 2024 By Jai Vijayan A likely Chinese threat actor is using a recent variant of the notorious Gh0st RAT malware to try and steal information from artificial intelligence experts in US companies, government agencies, and academia.Researchers at security vendor Proofpoint first spotted the campaign earlier this month and are tracking the previously unknown threat actor behind it as "UNK_SweetSpecter."A Super-Targeted SugarGh0st CampaignIn a report released on May 16, the security vendor identified the group as using an AI-themed phishing lure to distribute a remote access trojan (RAT) called SugarGh0st to a highly selective list of AI experts. "The May 2024 campaign appeared to target less than 10 individuals, all of whom appear to have a direct connection to a single leading US-based artificial intelligence organization according to o

1 hour ago

Jasper_The_RasperModerator

Security Industry News

Critical Git vulnerability allows RCE when cloning repositories with submodules (CVE-2024-32002)

May 16, 2024 By Zeljka Zorz New versions of Git are out, with fixes for five vulnerabilities, the most critical (CVE-2024-32002) of which can be used by attackers to remotely execute code during a “clone” operation.About GitGit is a widely-popular distributed version control system for collaborative software development. It can be installed on machines running Windows, macOS, Linux, and various *BSD distributions.Web-based software development platforms GitHub and GitLab are based on Git. Visual Studio, Microsoft’s integrated development environment, has Git tooling (MinGit) built directly into it, and other IDEs rely on it. >> Full Article <<

1 hour ago

Jasper_The_RasperModerator

Security Industry News

Scammers can easily phish your multi-factor authentication codes. Here’s how to avoid it

May 16, 2024 By Pieter Arntz More and more websites and services are making multi-factor-authentication (MFA) mandatory, which makes it much harder for cybercriminals to access your accounts. That’s a great thing. But as security evolves, so do cybercriminals who are always looking for new ways to scam us.A type of phishing we’re calling authentication-in-the-middle is showing up in online media. While these techniques, named after man-in-the-middle (MitM) attacks, have existed for a while, they appear to be gaining traction now.It works like this: A user gets lured to a phishing site masquerading as a site they normally use, such as a bank, email or social media account. Once the user enters their login into the fake site, that information gets redirected by the cybercriminals to the actual site, without the user knowing. >> Full Article <<

2 hours ago

Jasper_The_RasperModerator

Security Industry News

SANTANDER: A DATA BREACH AT A THIRD-PARTY PROVIDER IMPACTED CUSTOMERS AND EMPLOYEES

May 16, 2024 By Pierluigi Paganini The Spanish bank Santander disclosed a data breach at a third-party provider that impacted customers in Chile, Spain, and Uruguay.The Spanish financial institution Santander revealed a data breach involving a third-party provider that affected customers in Chile, Spain, and Uruguay.The bank recently became aware of unauthorized access to one of its databases hosted by a third-party provider.The company announced that it immediately implemented measures to contain the incident. The company blocked the compromised access to the database and established additional fraud prevention controls to protect affected customers.“We recently became aware of an unauthorized access to a Santander database hosted by a third-party provider.” reads the statement published by the bank. “Following an investigation, we have now confirmed that certain information relating to customers of Santander Chile, Spain and Uruguay, as well as all current and some former Santander e

2 hours ago

Jasper_The_RasperModerator

Tech Talk

Archie, the Internet’s first search engine, is rescued and running

A journey through busted tapes, the Internet Old Farts Club, and SPARCstations.KEVIN PURDY - 5/16/2024 It's amazing, and a little sad, to think that something created in 1989 that changed how people used and viewed the then-nascent Internet had nearly vanished by 2024.Nearly, that is, because the dogged researchers and enthusiasts at The Serial Port channel on YouTube have found what is likely the last existing copy of Archie. Archie, first crafted by Alan Emtage while a student at McGill University in Montreal, Quebec, allowed for the searching of various "anonymous" FTP servers around what was then a very small web of universities, researchers, and government and military nodes. It was groundbreaking; it was the first echo of the "anything, anywhere" Internet to come. And when The Serial Port went looking, it very much did not exist. >> Full Article <<

2 hours ago

Jasper_The_RasperModerator

Security Industry News

MediSecure e-script firm hit by ‘large-scale’ ransomware data breach

May 16, 2024 By Bill Toulas Electronic prescription provider MediSecure in Australia has shut down its website and phone lines following a ransomware attack believed to originate from a third-party vendor.The incident has impacted personal and health information of individuals but the extent remains unclear at this time.Operating since 2009, MediSecure provides digital tools to healthcare professionals to manage and dispense medications to patients.The company has issued millions of eScripts via its private and the state-backed eRx systems. Until November 2009, it was one of the two two paperless script networks in Australia. >> Full Article <<

3 hours ago

TripleHelixModerator

Security Industry News

Alert Cisco Releases Security Updates for Multiple Products Last Revised May 16, 2024

Cisco has released security updates to address vulnerabilities in Cisco software. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system.Users and administrators are encouraged to review the following advisories and apply necessary updates:Cisco Crosswork Network Services OrchestratorCisco Crosswork Network Services Orchestrator Privilege EscalationConfD CLI Privilege Escalation and Arbitrary File Read and WriteCisco Secure Client for Windows with Network Access Manager Module Privilege EscalationCisco Crosswork Network Services Orchestrator Open RedirectCisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Cross-Site ScriptingCisco Secure Email Gateway HTTP Response SplittingCisco AppDynamics Network Visibility Service Denial of Service https://www.cisa.gov/news-events/alerts/2024/05/16/cisco-releases-security-updates-multiple-products

3 hours ago

kleinmat4103Popular Voice

Webroot® Security Awareness Training

Advice to Prevent Phish Tests from Overwhelming Help Desk

Every time we push a phish test our help desk is inundated with tickets from clients “helpfully” informing us that they discovered a phishing email in their inbox.We’ve tried distributing the phish test over the course of a month to keep volume down, but that just spreads out the tickets.We have a few ideas we’re kicking around, but wondering if others have good strategies already in place. Thanks!

19 days ago

jeremyvFresh Face

Webroot® Business Endpoint Protection

Can we audit device per sites if Web Threat Shield extension for Browser is enabled or disabled?

Hi Webroot Team, Newbie here. Can we audit device per sites if Web Threat Shield extension for Browser is enabled or disabled? Also, if the Web Threat Shield extension is disabled from a device with Webroot client program, does it mean that if the User accessed a malicious site, Webroot would not block it? Thank you.

1 month ago

jhartnerd123Community Expert Advisor

Webroot® WiFi Security

Is Webroot VPN going away?

Hi All,Curious if Webroot VPN is going away now that SaferVPN is being decommissioned as of Dec 15th, 2023. If readers didn’t know, Webroot VPN is technically NOT an in house product, but rather a reskinned/rebranded version of SaferVPN, but added some of their BrightCloud tech to it. I received a notice today that SaferVPN is recommending IPVanish and the website is saying they’ve joined with IPVanish. So does this mean, the Webroot VPN will be changing their product to update it’s look and feel of IPVanish? CuriousRegardsJohn H

5 months ago

chrisroseNew Voice

Webroot® Business Endpoint Protection

Deprecation of old Endpoint Management Console

Good day,I’m curious if anybody can shed any insight on the deprecation of the old Endpoint Protection Console and what we are to expect in terms of changes as of November 28th? I have reviewed training videos and understand where to perform most functions using the new console and entities.Please understand that we have hundreds of a sites listed in our consoles and I have reviewed the videos.Currently if I wish to go to the console and perform work on a site, I can go to the Sites list and I can search and find the site wether that is ABC company or XYZ, then I can click the little pop out or go to Endpoint Protection and click the “Go to Endpoint Protection Console” and I can access the old console.So what happens when the existing console is deprecated? will this button go away? Will there be a new button that will jump us to the specific site in Entities?There are also some logs areas that I’m suspect will no longer be available.Currently I can see which users accessed a site in

5 months ago

JB4New Member

Webroot® Universal Reporter

SkyStatus request failed (No parameterless constructor defined...

Had been running this report (Endpoint:List) with no problems.I added a couple of new sites.Universal Reporter is log indicates it is successful on the first site, and I get output for it.It fails on the second site (the first NEW site), with the error: :: ERROR [2023-10-12 15:54:16Z] Exception occurred. Exiting processing.... {"statusCode":500,"requestId":"31205b99-c3da-4e7b-8618-cd183536f303","error":null,"error_description":"SkyStatus request failed (No parameterless constructor defined for type of 'System.String'.)","AdditionalInformation":{}} At C:\Users\Me\OneDrive - MyCompany\Documents\Webroot Reporting\Runs\20231012T2153265213848Z\Templates\Endpoint List - 1.3\Scripts\template.psm1:275 char:5+ Get-UnityAPISkyStatusSiteEndpointStatusSite -UnityAPIClient $Scri ...The output for the failed site appears to have legitimate Parameters, Site, and ConsoleEndpoints sheets, but the other sheets all have headers but no endpoints.

7 months ago

Matthew_LangFresh Face

Unity API Forum

SkyStatus request failed (No parameterless constructor defined for type of 'System.String'.)

We have been using the API https://unityapi.webrootcloudav.com/service/api/status/site/{GSMKey} for many months now and it has been working fine until this morning.I have started receiving the following response and was wondering why this woudl suddenly be the case. I am getting the same result from other API calls for the endpoint status. { "statusCode": 500, "requestId": ", "error": null, "error_description": "SkyStatus request failed (No parameterless constructor defined for type of 'System.String'.)", "AdditionalInformation": {}}

7 months ago

TheNickleNew Member

Webroot® Security Awareness Training

Webroot Security Awareness Training Platform Throwing a 500 Error

Hello all!I am a cybersecurity analyst for an MSP and I am in charge of the Security Awareness Training program. I have been getting this error when trying to access the Webroot SAT platform:{"statusCode":500,"error":"Internal Server Error","message":"An internal server error occurred"}Probably every other day I get this error. It is getting annoying as I have to delay training until this error is resolved. Do you guys have insight as to why this is happening? Your help is much appreciated. Thank you!

7 months ago

MrPeteNew Voice

Webroot® Business Endpoint Protection

Where is the new Console Documented? (6.x version)

I seem to be missing something. I assume I’m just blind.Where in the documentation is the new Business Admin Console documented? We’re now on version 6.7, yet all I can find is documentation for the traditional console.

8 months ago

RockRidderFresh Face

Webroot® Universal Syslog Connector

Universal syslog connector: Run as Service

I was really excited to see this Application, we use Rapid7 and there was no good way to get this data into IDR. My excitement was quickly diminished immediately after I installed this software. Why create a software that is to redirect logs, and in this case to a SIEM and not make it run as a service? I tested it, right after I set it up, I monitored the service running and as soon as I logged off my admin account the service stopped and I can only assume the logging stopped as well. Is there anyway to run this as a service? I really don’t need to see the Scrolling CLI, that feature is pretty much pointless.

8 months ago

AsadPNew Voice

ConnectWise Automate Integration

Webroot Plugin not displaying menu when clicked (v4.1.1.416)

Recently updated Webroot Solution last night in one of our Automate Servers as we have two, but our first instance now no longer displays the plugin menu popup when accessed from Tools in Automate.Has the update broken this?As on our Server 2, V3.2.1.242 works fine when trying to access the plugin menu.

8 months ago

Events Calendar

User leaderboard

Show full leaderboard

Consumer Common KB Articles

Business Common KB Articles

Join the Conversation

Tweets by Webroot

Featured Topics

Upcoming Events

Events Calendar

User leaderboard

Join the Conversation

Sign up

Login to the community

Scanning file for viruses.

This file cannot be downloaded