OpenText Cybersecurity | Webroot Community

Categories
Recently active
Help others

Welcome

News, Announcements, Tech Discussions

Product Releases

Patch Notes & Software Updates

Product Help & Discussions

Questions About a Webroot Product? Start Here!

Webroot® SecureAnywhere™ - Antivirus

6988 topics
25362 Replies

Webroot® SecureAnywhere™ - Internet Security Plus

2473 topics
9991 Replies

Webroot® SecureAnywhere™ - Complete

3838 topics
18390 Replies

Webroot® Consumer/Business - for Macs

371 topics
1921 Replies

Webroot Mobile Security for Android

943 topics
5029 Replies

Webroot® Business Endpoint Protection

1141 topics
3701 Replies

Webroot® Security Awareness Training

57 topics
174 Replies

Webroot® Business Mobile Protection

35 topics
101 Replies

Webroot® SecureAnywhere™ - Antivirus for PC Gamers

553 topics
1356 Replies

Webroot® Legacy Products (2011 and Prior)

33 topics
107 Replies

Webroot® Universal Syslog Connector

2 topics
3 Replies

Arcsight User Group

EnCase Usergroup

Fortify Usergroup

NetIQ Usergroup

Voltage Usergroup

API

All Things API

Integrations

Webroot Integration Discussions

ConnectWise Automate Integration

13 topics
35 Replies

ConnectWise Manage Integration

1 topic
1 Reply

Crypto Corner

A place to discuss all things cryptocurrency

OpenText NetIQ Access Management

Thanks for joining us! This NetIQ portfolio is focused on our access management products, which help you manage and provide secure access to your users. Select your product from the list of communities and join the conversations.

NetIQ Access Manager Portfolio Tips & Info

0 topics
0 Replies

OpenText NetIQ Access Manager Developer Discussions

0 topics
0 Replies

OpenText NetIQ Advanced Authentication Discussions

0 topics
0 Replies

OpenText NetIQ Risk Service

0 topics
0 Replies

OpenText NetIQ Secure API Manager

0 topics
0 Replies

OpenText NetIQ SecureLogin

0 topics
0 Replies

OpenText NetIQ Self Service Password Reset

0 topics
0 Replies

OpenText NetIQ Access Manager User Discussions

0 topics
0 Replies

NetIQ Access Manager Tips & Info

0 topics
0 Replies

OpenText NetIQ Advanced Authentication Tips & Info

0 topics
0 Replies

Jasper_The_RasperModerator

Security Industry News

KAISER PERMANENTE DATA BREACH MAY HAVE IMPACTED 13.4 MILLION PATIENTS

April 26, 2024 By Pierluigi Paganini Healthcare service provider Kaiser Permanente disclosed a security breach that may impact 13.4 million individuals in the United States.Kaiser Permanente is an American integrated managed care consortium, it is made up of three distinct but interdependent groups of entities: the Kaiser Foundation Health Plan, Inc. (KFHP) and its regional operating subsidiaries; Kaiser Foundation Hospitals; and the regional Permanente Medical Groups.The health giant operates 39 hospitals and more than 700 medical offices, with over 300,000 personnel, including more than 87,000 physicians and nurses.It operates in California, Colorado, the District of Columbia, Georgia, Hawaii, Maryland, Oregon, Virginia, and Washington. >> Full Article <<

11 minutes ago

joyhillNew Member

Threat Reports

Chinese emails

I have been getting emails with 2 rows of Chinese characters. They are listed under lots of different subjects so I don’y know what they are until I see it. I get a notice in my right hand screen after that that I should run my anti virus for hackers. I run web root but it never finds anything,has anyone else had this and what should I do? bj

15 minutes ago

Jasper_The_RasperModerator

Security Industry News

Fake job interviews target developers with new Python backdoor

April 26, 2024 By Bill Toulas A new campaign tracked as “Dev Popper” is targeting software developers with fake job interviews in an attempt to trick them into installing a Python remote access trojan (RAT).The developers are asked to perform tasks supposedly related to the interview, like downloading and running code from GitHub, in an effort to make the entire process appear legitimate.However, the threat actor's goal is make their targets download malicious software that gathers system information and enables remote access to the host.According to Securonix analysts, the campaign is likely orchestrated by North Korean threat actors based on the observed tactics. The connections are not strong enough for attribution, though. >> Full Article <<

20 minutes ago

TylerMSr. Security Analyst & Community Manager

What's New

What’s New at Carbonite + Webroot: May 2024UPDATES

What is being released?  Activate All your Microsoft 365 Backups with One Click! (For Partners and their Customers Only) Maximize Your Productivity. Use our new One-Click Activation feature to set up your customers’ Microsoft backup tasks with one click. Instead of activating Microsoft 365 backups for Exchange, OneDrive, SharePoint and Teams & Groups one at a time, the One-Click Activation feature enables you to activate all of your Microsoft 365 backups at once South Africa Data CenterHowzit, South Africa, we've added a new data center here!Easily comply with local data sovereignty and regulatory laws with nine data centers worldwide - in Africa (South Africa), Asia-Pacific (Australia and Tokyo), Europe (Dublin, Frankfurt, Paris), North America (Canada, US), and the UK. The new region is called "Africa (Cape Town)”Bulk Activate your Google Workspace Backups by Organizational Unit Save your Admin’s time and effort with bulk activation that automatically backs up data that belongs

123

20 minutes ago

ConnorMThreat Research Analyst

Security Industry News

Cyber News Rundown Week: Volkswagen suffers data breachNews

Officials for the automotive manufacturer, Volkswagen, have confirmed that their internal network was breached by hackers and resulted in the exfiltration of 19,000 files. Based on the content of the targeted files, it is believed that the hackers were focused exclusively on proprietary technology and have been traced back to threat groups located in China. Fortunately, Volkswagen staff were quick to identify the breach and are working to improve their security standings, as well as assist global law enforcement agencies in tracking the suspects.Frontier Communications works to restore services after cyberattack Following a cyberattack early last week, officials for the telecom provider, Frontier Communications, are working diligently to restore internet services that were taken offline after discovering unauthorized activity on their internal network. Due to this incident's nature, it is likely that some customer information was illicitly accessed and may be used for future phishing a

162

26 minutes ago

TylerMSr. Security Analyst & Community Manager

What's New

What’s New at Carbonite + Webroot: March 2024Updates

This release includes bug fixes and security hardening along with a much-requested feature from our customers:Add ability to restore from quarantine via console command Cloud Security is the theme for our March WSAT Content Release. The release consists of 36 total updates across our entire content library to help our customers drive ongoing engagement with their Phishing simulations and Training campaigns. Regular monthly updates to courses are included as well. See below for details. What is being released?* New courses from NINJIO and Skillsoft in English and French* New email and page templates to simulate expected seasonal phishing attacks* Autopilot training and phishing campaigns in the baseline track Email Threat Protection now includes optional DomainKeys Identified Mail (DKIM) Signing. DKIM is an email security standard to ensure messages weren’t altered in transit between sending and recipient servers. Previously exclusive to Encryption customers, this capability is

72617

5 hours ago

Jasper_The_RasperModerator

Security Industry News

Health data of millions of veterans might have been leaked in cyberattack of VA vendor

April 25, 2024 By LINDA F. HERSEY WASHINGTON — Fifteen million veterans were notified by the Department of Veterans Affairs this week that a cybersecurity breach involving one its vendors might have exposed their private health care information.Change Healthcare, which processes payments for VA patients, informed the agency that a “substantial proportion of people in America could have had some information leaked,” VA Secretary Denis McDonough said Thursday during his monthly news conference.“We are pushing for more information. We will move quickly to provide full support and protect veteran data. We are not waiting for that confirmation,” he said. >> Full Article <<

13 hours ago

Jasper_The_RasperModerator

Security Industry News

Godfather Banking Trojan Spawns 1.2K Samples Across 57 Countries

Mobile malware-as-a-service operators are upping their game by automatically churning out hundreds of unique samples on a whim. April 25, 2024 By Nate Nelson North of 1,000 samples of the Godfather mobile banking Trojan are circulating in dozens of countries worldwide, targeting hundreds of banking apps.First discovered in 2022, Godfather — which can record screens and keystrokes, intercepts two-factor authentication (2FA) calls and texts, initiates bank transfers, and more — has quickly become one of the most widespread malware-as-a-service offerings in cybercrime, especially mobile cybercrime. According to Zimperium's 2023 "Mobile Banking Heists Report," as of late last year, Godfather was targeting 237 banking apps spread across 57 countries. Its affiliates exfiltrated stolen financial information to at least nine countries, primarily in Europe and including the US. >> Full Article <<

18 hours ago

Jasper_The_RasperModerator

Security Industry News

WP Automatic WordPress plugin hit by millions of SQL injection attacks

April 25, 2024 By Bill Toulas Hackers have started to target a critical severity vulnerability in the WP Automatic plugin for WordPress to create user accounts with administrative privileges and to plant backdoors for long-term access.Currently installed on more than 30,000 websites, WP Automatic lets administrators automate content importing (e.g. text, images, video) from various online sources and publishing on their WordPress site.The exploited vulnerability is identified as as CVE-2024-27956 and received a severity score of 9.9/10.It was disclosed publicly by researchers at PatchStack vulnerability mitigation service on March 13 and described as an SQL injection issue that impacts affecting WP Automatic versions before 3.9.2.0.The issus is in the plugin’s user authentication mechanism, which can be bypassed to submit SQL queries to the site’s database. Hackers can use specially crafted queries to create administrator accounts on the target website. >> Full Article <<

22 hours ago

Jasper_The_RasperModerator

Security Industry News

Millions of IPs remain infected by USB worm years after its creators left it for dead

Ability of PlugX worm to live on presents a vexing dilemma: Delete it or leave it be. DAN GOODIN - 4/25/2024 A now-abandoned USB worm that backdoors connected devices has continued to self-replicate for years since its creators lost control of it and remains active on thousands, possibly millions, of machines, researchers said Thursday.The worm—which first came to light in a 2023 post published by security firm Sophos—became active in 2019 when a variant of malware known as PlugX added functionality that allowed it to infect USB drives automatically. In turn, those drives would infect any new machine they connected to, a capability that allowed the malware to spread without requiring any end-user interaction. Researchers who have tracked PlugX since at least 2008 have said that the malware has origins in China and has been used by various groups tied to the country’s Ministry of State Security.Still active after all these yearsFor reasons that aren’t clear, the worm creator abandoned

22 hours ago

joyhillNew Member

Threat Reports

Chinese emails

15 minutes ago

jeremyvFresh Face

Webroot® Business Endpoint Protection

Can we audit device per sites if Web Threat Shield extension for Browser is enabled or disabled?

Hi Webroot Team, Newbie here. Can we audit device per sites if Web Threat Shield extension for Browser is enabled or disabled? Also, if the Web Threat Shield extension is disabled from a device with Webroot client program, does it mean that if the User accessed a malicious site, Webroot would not block it? Thank you.

30 days ago

jhartnerd123Community Expert Advisor

Webroot® WiFi Security

Is Webroot VPN going away?

Hi All,Curious if Webroot VPN is going away now that SaferVPN is being decommissioned as of Dec 15th, 2023. If readers didn’t know, Webroot VPN is technically NOT an in house product, but rather a reskinned/rebranded version of SaferVPN, but added some of their BrightCloud tech to it. I received a notice today that SaferVPN is recommending IPVanish and the website is saying they’ve joined with IPVanish. So does this mean, the Webroot VPN will be changing their product to update it’s look and feel of IPVanish? CuriousRegardsJohn H

4 months ago

chrisroseNew Voice

Webroot® Business Endpoint Protection

Deprecation of old Endpoint Management Console

Good day,I’m curious if anybody can shed any insight on the deprecation of the old Endpoint Protection Console and what we are to expect in terms of changes as of November 28th? I have reviewed training videos and understand where to perform most functions using the new console and entities.Please understand that we have hundreds of a sites listed in our consoles and I have reviewed the videos.Currently if I wish to go to the console and perform work on a site, I can go to the Sites list and I can search and find the site wether that is ABC company or XYZ, then I can click the little pop out or go to Endpoint Protection and click the “Go to Endpoint Protection Console” and I can access the old console.So what happens when the existing console is deprecated? will this button go away? Will there be a new button that will jump us to the specific site in Entities?There are also some logs areas that I’m suspect will no longer be available.Currently I can see which users accessed a site in

5 months ago

JB4New Member

Webroot® Universal Reporter

SkyStatus request failed (No parameterless constructor defined...

Had been running this report (Endpoint:List) with no problems.I added a couple of new sites.Universal Reporter is log indicates it is successful on the first site, and I get output for it.It fails on the second site (the first NEW site), with the error: :: ERROR [2023-10-12 15:54:16Z] Exception occurred. Exiting processing.... {"statusCode":500,"requestId":"31205b99-c3da-4e7b-8618-cd183536f303","error":null,"error_description":"SkyStatus request failed (No parameterless constructor defined for type of 'System.String'.)","AdditionalInformation":{}} At C:\Users\Me\OneDrive - MyCompany\Documents\Webroot Reporting\Runs\20231012T2153265213848Z\Templates\Endpoint List - 1.3\Scripts\template.psm1:275 char:5+ Get-UnityAPISkyStatusSiteEndpointStatusSite -UnityAPIClient $Scri ...The output for the failed site appears to have legitimate Parameters, Site, and ConsoleEndpoints sheets, but the other sheets all have headers but no endpoints.

6 months ago

Matthew_LangFresh Face

Unity API Forum

SkyStatus request failed (No parameterless constructor defined for type of 'System.String'.)

We have been using the API https://unityapi.webrootcloudav.com/service/api/status/site/{GSMKey} for many months now and it has been working fine until this morning.I have started receiving the following response and was wondering why this woudl suddenly be the case. I am getting the same result from other API calls for the endpoint status. { "statusCode": 500, "requestId": ", "error": null, "error_description": "SkyStatus request failed (No parameterless constructor defined for type of 'System.String'.)", "AdditionalInformation": {}}

6 months ago

TheNickleNew Member

Webroot® Security Awareness Training

Webroot Security Awareness Training Platform Throwing a 500 Error

Hello all!I am a cybersecurity analyst for an MSP and I am in charge of the Security Awareness Training program. I have been getting this error when trying to access the Webroot SAT platform:{"statusCode":500,"error":"Internal Server Error","message":"An internal server error occurred"}Probably every other day I get this error. It is getting annoying as I have to delay training until this error is resolved. Do you guys have insight as to why this is happening? Your help is much appreciated. Thank you!

6 months ago

MrPeteNew Voice

Webroot® Business Endpoint Protection

Where is the new Console Documented? (6.x version)

I seem to be missing something. I assume I’m just blind.Where in the documentation is the new Business Admin Console documented? We’re now on version 6.7, yet all I can find is documentation for the traditional console.

7 months ago

RockRidderFresh Face

Webroot® Universal Syslog Connector

Universal syslog connector: Run as Service

I was really excited to see this Application, we use Rapid7 and there was no good way to get this data into IDR. My excitement was quickly diminished immediately after I installed this software. Why create a software that is to redirect logs, and in this case to a SIEM and not make it run as a service? I tested it, right after I set it up, I monitored the service running and as soon as I logged off my admin account the service stopped and I can only assume the logging stopped as well. Is there anyway to run this as a service? I really don’t need to see the Scrolling CLI, that feature is pretty much pointless.

7 months ago

AsadPNew Voice

ConnectWise Automate Integration

Webroot Plugin not displaying menu when clicked (v4.1.1.416)

Recently updated Webroot Solution last night in one of our Automate Servers as we have two, but our first instance now no longer displays the plugin menu popup when accessed from Tools in Automate.Has the update broken this?As on our Server 2, V3.2.1.242 works fine when trying to access the plugin menu.

7 months ago

Events Calendar

User leaderboard

Show full leaderboard

Consumer Common KB Articles

Business Common KB Articles

Join the Conversation

Tweets by Webroot

Check out this 2023 Nastiest Malware

Featured Topics

Upcoming Events

What’s New at Carbonite + Webroot: May 2024UPDATES

Cyber News Rundown Week: Volkswagen suffers data breachNews

What’s New at Carbonite + Webroot: March 2024Updates

Events Calendar

User leaderboard

Join the Conversation

Sign up

Login to the community

Scanning file for viruses.

This file cannot be downloaded