OpenText Cybersecurity | Webroot Community

Categories
Recently active
Help others

Welcome

News, Announcements, Tech Discussions

Product Releases

Patch Notes & Software Updates

Product Help & Discussions

Questions About a Webroot Product? Start Here!

Webroot® SecureAnywhere™ - Antivirus

6988 topics
25362 Replies

Webroot® SecureAnywhere™ - Internet Security Plus

2473 topics
9991 Replies

Webroot® SecureAnywhere™ - Complete

3838 topics
18390 Replies

Webroot® Consumer/Business - for Macs

371 topics
1921 Replies

Webroot Mobile Security for Android

943 topics
5029 Replies

Webroot® Business Endpoint Protection

1141 topics
3701 Replies

Webroot® Security Awareness Training

57 topics
175 Replies

Webroot® Business Mobile Protection

35 topics
101 Replies

Webroot® SecureAnywhere™ - Antivirus for PC Gamers

553 topics
1356 Replies

Webroot® Legacy Products (2011 and Prior)

33 topics
107 Replies

Webroot® Universal Syslog Connector

2 topics
3 Replies

Arcsight User Group

EnCase Usergroup

Fortify Usergroup

NetIQ Usergroup

Voltage Usergroup

API

All Things API

Integrations

Webroot Integration Discussions

ConnectWise Automate Integration

13 topics
35 Replies

ConnectWise Manage Integration

1 topic
1 Reply

Crypto Corner

A place to discuss all things cryptocurrency

OpenText NetIQ Access Management

Thanks for joining us! This NetIQ portfolio is focused on our access management products, which help you manage and provide secure access to your users. Select your product from the list of communities and join the conversations.

NetIQ Access Manager Portfolio Tips & Info

0 topics
0 Replies

OpenText NetIQ Access Manager Developer Discussions

0 topics
0 Replies

OpenText NetIQ Advanced Authentication Discussions

0 topics
0 Replies

OpenText NetIQ Risk Service

0 topics
0 Replies

OpenText NetIQ Secure API Manager

0 topics
0 Replies

OpenText NetIQ SecureLogin

0 topics
0 Replies

OpenText NetIQ Self Service Password Reset

0 topics
0 Replies

OpenText NetIQ Access Manager User Discussions

0 topics
0 Replies

NetIQ Access Manager Tips & Info

0 topics
0 Replies

OpenText NetIQ Advanced Authentication Tips & Info

0 topics
0 Replies

Jasper_The_RasperModerator

Security Industry News

Citrix warns admins to manually mitigate PuTTY SSH client bug

May 9, 2024 By Sergiu Gatlan Citrix notified customers this week to manually mitigate a PuTTY SSH client vulnerability that could allow attackers to steal a XenCenter admin's private SSH key.XenCenter helps manage Citrix Hypervisor environments from a Windows desktop, including deploying and monitoring virtual machines.The security flaw (tracked as CVE-2024-31497) impacts multiple versions of XenCenter for Citrix Hypervisor 8.2 CU1 LTSR, which bundle and use PuTTY to make SSH connections from XenCenter to guest VMs when clicking the "Open SSH Console" button.Citrix says that the PuTTY third-party component has been removed starting with XenCenter 8.2.6, and any versions after 8.2.7 will no longer include it. >> Full Article <<

4 hours ago

Jasper_The_RasperModerator

Security Industry News

87% of DDoS Attacks Targeted Windows OS Devices in 2023

PRESS RELEASE Singapore, 8th May, 2024 - New data from Nexusguard’s DDoS Statistical Trends Report 2024 reveals bad actors are shifting DDoS tactics. Computers and servers became the primary target of attacks, making up 92% of DDoS attempts, compared to only 68% in the previous year. Attacks are also becoming shorter and less frequent, but more powerful. While the overall count in attack frequency dropped 55% in 2023, the size of attacks grew 233%.Attacks lasting 90 minutes increased by 22%. This attack duration now makes up 81% of all DDoS attacks, while the most prolonged attacks spanning over 1200+ minutes saw a steep 95% reduction. “The modus operandi of cyber criminals is to cause maximum disruption with minimal effort,” says Donny Chong. “Modern cybersecurity tools have become so advanced, it’s compelling bad actors to look for attack opportunities where the shortest disruption wreaks the most havoc. This is likely why we’re seeing more high-profile DDoS attacks on governments a

4 hours ago

Jasper_The_RasperModerator

Security Industry News

Cancer patients' sensitive information accessed by "unidentified parties" after being left exposed by screening lab for years

May 9, 2024 By Graham CLULEY A medical lab that specialises in cancer screenings has admitted to an alarming data breach that left sensitive patient information exposed for years - and accessible by unauthorised parties.California-based Guardant Health is notifying affected individuals that information related to samples collected in late 2019 and 2020 was "inadvertently" left exposed online to the general public after an employee mistakenly uploaded it.The leaked data included:names ages medical record and identification numbers medical information such as treatment information and dates test results>> Full Article <<

4 hours ago

Jasper_The_RasperModerator

Security Industry News

Zscaler takes "test environment" offline after rumors of a breach

May 9, 2024 By Lawrence Abrams Update 5/8/24: Out original article was updated to include new information about a breached "test" environment.Zscaler says that they discovered an exposed "test environment" that was taken offline for analysis after rumors circulated that a threat actor was selling access to the company's systems.In a Wednesday afternoon post, Zscaler initially stated that its ongoing investigation showed no evidence that its customer or production environments were breached."Zscaler’s priority is our customer and production environment and we have not discovered any evidence of incident or compromise to these environments. We are continuing our investigation and closely monitoring the situation," reads a post on Zscaler's Trust site. >> Full Article <<

5 hours ago

TripleHelixModerator

Security Industry News

Microsoft April 2024 Security Updates (Patch Tuesday)

5 hours ago

Jasper_The_RasperModerator

Security Industry News

Urgent WhatsApp chat warning issued to all UK users - ignoring it will be costly

All UK WhatsApp users must be on high alert after the resurgence of a money-stealing chat scam. May 9, 2024 By Dave Snelling Sadly, there is no video to watch with the criminal simply using this trick to get access to the security registration code that WhatsApp issues. This allows them to register the victim’s WhatsApp account to a new device and fully take over the account.The moment they are successful, they then begin messaging friends and family of the victim claiming they urgently need help and money transferred into their account.It's similar to the infamous "Hi mum" attack that saw some users handing over thousands of pounds to scammers.“WhatsApp remains an integral mode of communication for many people across the UK, however fraudsters still find ways to infiltrate these platforms. Sadly, anyone can be become a target for fraud," Detective Superintendent Gary Miles, Head of the National Fraud Intelligence Bureau at the City of London Police. >> Full Article <<

5 hours ago

Jasper_The_RasperModerator

Security Industry News

DocGo patient health data stolen in cyberattack

May 9, 2024 By Pieter Arntz Medical health care provider DocGo has disclosed in a form 8-K that it experienced a cybersecurity incident involving some of the company’s systems. As part of the investigation of the incident, the company says it has determined that the attacker accessed and acquired data, including certain protected health information.DocGo is a healthcare provider that offers mobile health services, ambulance services, and remote monitoring for patients in 30 US states, and across the United Kingdom. On its company website it touts over 7,000,000 patient interactions.In the same form, DocGo says the breach concerns a limited number of healthcare records within the company’s US-based ambulance transportation business, and that no other business lines have been involved.DocGo says it is actively reaching out to those individuals who had their data compromised in the attack. >> Full Article <<

5 hours ago

Jasper_The_RasperModerator

Security Industry News

Dell warns of data breach, 49 million customers allegedly affected

May 9, 2024 By Lawrence Abrams Dell is warning customers of a data breach after a threat actor claimed to have stolen information for approximately 49 million customers.The computer maker began emailing data breach notifications to customers yesterday, stating that a Dell portal containing customer information related to purchases was breached."We are currently investigating an incident involving a Dell portal, which contains a database with limited types of customer information related to purchases from Dell," reads a Dell data breach notification shared with BleepingComputer."We believe there is not a significant risk to our customers given the type of information involved." >> Full Article <<

5 hours ago

TylerMSr. Security Analyst & Community Manager

Cybersecurity Standpoint

LockBit Saga Continues: Return of the FBITakedown

In the latest chapter of the ongoing LockBit saga, international law enforcement agencies have struck back once again, seizing the group's infrastructure and identifying the key figure behind the infamous ransomware operation. This second takedown, building on previous efforts, further demonstrates the determination of global partners to disrupt the cybercriminal network's activities. Newly seized leaksite on the darkwebSee the previous events on this epic feud between LockBit and Law Enfocement The New Takedown: Exposing the Leader Identity Revealed: Dmitry Yuryevich Khoroshev Unmasked Following a thorough investigation, authorities have unsealed an indictment revealing the mastermind behind LockBit: Dmitry Yuryevich Khoroshev, known by aliases like "LockBitSupp" and "putinkrab." This Russian national has been charged with multiple counts of fraud, extortion, and intentional damage to protected computers. Renewed Sanctions and Rewards The U.S. Department of the Treasury has imposed

394

18 hours ago

Jasper_The_RasperModerator

Security Industry News

One year on, universities org admits MOVEit attack hit data of 800K people

Nearly 95M people in total snagged by flaw in file transfer tool May 8, 2024 By Connor Jones Just short of a year after the initial incident, the state of Georgia's higher education government agency has confirmed that it was the victim of an attack on its systems affecting the data of 800,000 people.University System of Georgia (USG), which oversees 26 higher education institutions in the state, filed a disclosure with the attorney general of Maine on Tuesday – the first time it has publicly explained the incident it detected on May 31, 2023.In a letter sent to the 800,000 victims, USG explained that the breach was actually one of many from last year linked to the Cl0p gang's exploitation of a since-patched flaw in Progress Software's MOVEit MFT tool."The files and information obtained by this cybercriminal group will likely be published on its website," reads the letter, which is dated April 15. >> Full Article <<

1 day ago

kleinmat4103Popular Voice

Webroot® Security Awareness Training

Advice to Prevent Phish Tests from Overwhelming Help Desk

Every time we push a phish test our help desk is inundated with tickets from clients “helpfully” informing us that they discovered a phishing email in their inbox.We’ve tried distributing the phish test over the course of a month to keep volume down, but that just spreads out the tickets.We have a few ideas we’re kicking around, but wondering if others have good strategies already in place. Thanks!

12 days ago

jeremyvFresh Face

Webroot® Business Endpoint Protection

Can we audit device per sites if Web Threat Shield extension for Browser is enabled or disabled?

Hi Webroot Team, Newbie here. Can we audit device per sites if Web Threat Shield extension for Browser is enabled or disabled? Also, if the Web Threat Shield extension is disabled from a device with Webroot client program, does it mean that if the User accessed a malicious site, Webroot would not block it? Thank you.

1 month ago

jhartnerd123Community Expert Advisor

Webroot® WiFi Security

Is Webroot VPN going away?

Hi All,Curious if Webroot VPN is going away now that SaferVPN is being decommissioned as of Dec 15th, 2023. If readers didn’t know, Webroot VPN is technically NOT an in house product, but rather a reskinned/rebranded version of SaferVPN, but added some of their BrightCloud tech to it. I received a notice today that SaferVPN is recommending IPVanish and the website is saying they’ve joined with IPVanish. So does this mean, the Webroot VPN will be changing their product to update it’s look and feel of IPVanish? CuriousRegardsJohn H

5 months ago

chrisroseNew Voice

Webroot® Business Endpoint Protection

Deprecation of old Endpoint Management Console

Good day,I’m curious if anybody can shed any insight on the deprecation of the old Endpoint Protection Console and what we are to expect in terms of changes as of November 28th? I have reviewed training videos and understand where to perform most functions using the new console and entities.Please understand that we have hundreds of a sites listed in our consoles and I have reviewed the videos.Currently if I wish to go to the console and perform work on a site, I can go to the Sites list and I can search and find the site wether that is ABC company or XYZ, then I can click the little pop out or go to Endpoint Protection and click the “Go to Endpoint Protection Console” and I can access the old console.So what happens when the existing console is deprecated? will this button go away? Will there be a new button that will jump us to the specific site in Entities?There are also some logs areas that I’m suspect will no longer be available.Currently I can see which users accessed a site in

5 months ago

JB4New Member

Webroot® Universal Reporter

SkyStatus request failed (No parameterless constructor defined...

Had been running this report (Endpoint:List) with no problems.I added a couple of new sites.Universal Reporter is log indicates it is successful on the first site, and I get output for it.It fails on the second site (the first NEW site), with the error: :: ERROR [2023-10-12 15:54:16Z] Exception occurred. Exiting processing.... {"statusCode":500,"requestId":"31205b99-c3da-4e7b-8618-cd183536f303","error":null,"error_description":"SkyStatus request failed (No parameterless constructor defined for type of 'System.String'.)","AdditionalInformation":{}} At C:\Users\Me\OneDrive - MyCompany\Documents\Webroot Reporting\Runs\20231012T2153265213848Z\Templates\Endpoint List - 1.3\Scripts\template.psm1:275 char:5+ Get-UnityAPISkyStatusSiteEndpointStatusSite -UnityAPIClient $Scri ...The output for the failed site appears to have legitimate Parameters, Site, and ConsoleEndpoints sheets, but the other sheets all have headers but no endpoints.

6 months ago

Matthew_LangFresh Face

Unity API Forum

SkyStatus request failed (No parameterless constructor defined for type of 'System.String'.)

We have been using the API https://unityapi.webrootcloudav.com/service/api/status/site/{GSMKey} for many months now and it has been working fine until this morning.I have started receiving the following response and was wondering why this woudl suddenly be the case. I am getting the same result from other API calls for the endpoint status. { "statusCode": 500, "requestId": ", "error": null, "error_description": "SkyStatus request failed (No parameterless constructor defined for type of 'System.String'.)", "AdditionalInformation": {}}

6 months ago

TheNickleNew Member

Webroot® Security Awareness Training

Webroot Security Awareness Training Platform Throwing a 500 Error

Hello all!I am a cybersecurity analyst for an MSP and I am in charge of the Security Awareness Training program. I have been getting this error when trying to access the Webroot SAT platform:{"statusCode":500,"error":"Internal Server Error","message":"An internal server error occurred"}Probably every other day I get this error. It is getting annoying as I have to delay training until this error is resolved. Do you guys have insight as to why this is happening? Your help is much appreciated. Thank you!

6 months ago

MrPeteNew Voice

Webroot® Business Endpoint Protection

Where is the new Console Documented? (6.x version)

I seem to be missing something. I assume I’m just blind.Where in the documentation is the new Business Admin Console documented? We’re now on version 6.7, yet all I can find is documentation for the traditional console.

8 months ago

RockRidderFresh Face

Webroot® Universal Syslog Connector

Universal syslog connector: Run as Service

I was really excited to see this Application, we use Rapid7 and there was no good way to get this data into IDR. My excitement was quickly diminished immediately after I installed this software. Why create a software that is to redirect logs, and in this case to a SIEM and not make it run as a service? I tested it, right after I set it up, I monitored the service running and as soon as I logged off my admin account the service stopped and I can only assume the logging stopped as well. Is there anyway to run this as a service? I really don’t need to see the Scrolling CLI, that feature is pretty much pointless.

8 months ago

AsadPNew Voice

ConnectWise Automate Integration

Webroot Plugin not displaying menu when clicked (v4.1.1.416)

Recently updated Webroot Solution last night in one of our Automate Servers as we have two, but our first instance now no longer displays the plugin menu popup when accessed from Tools in Automate.Has the update broken this?As on our Server 2, V3.2.1.242 works fine when trying to access the plugin menu.

8 months ago

Events Calendar

User leaderboard

Show full leaderboard

Consumer Common KB Articles

Business Common KB Articles

Join the Conversation

Tweets by Webroot

OpenText 2024 Threat Perspective

Featured Topics

Upcoming Events

LockBit Saga Continues: Return of the FBITakedown

Events Calendar

User leaderboard

Join the Conversation

Sign up

Login to the community

Scanning file for viruses.

This file cannot be downloaded