To Customer Support To Customer Support

Events
Leaderboard
Customer Support

📊 2023 OpenText Cybersecurity Threat Report

2 months ago

Home
Community overview
Welcome
Tech Talk

Tech Talk

Help each other out of non-Webroot technical jams and discuss tech-related stuff in general.

4,793 Topics
12,203 Replies

When you subscribe we will email you when there is a new topic in this category

Business email compromise can sink a small business. Here’s how to prot...

COVID Clicks

COVID-19 and Phishing: Q&A with a Human Behavior and Technology Expert

Blog

[Discussion] A Cybersecurity Guide for Digital Nomads

4793 Topics

Most replies

Recently active Most views Newest first

TripleHelixModerator

posted in Tech Talk

freydrewRetired Webrooter

published in Tech Talk

Cyber News Rundown: September 2020

American Payroll Association Announces Data BreachOfficials for the American Payroll Association (APA) have recently revealed a data breach that could stem all the way back to some unauthorized activity at the end of May. The breach could affect upwards of 20,000 members of the association who have entered information into both the login system and the payment card check-out page, as both were infected with data skimmers for at least 2 months prior to being discovered. Following this discovery, the APA has reached out to all affected clients to both reset their compromised passwords, but to also offer credit monitoring services.Staffing Firm Suffers Second Ransomware Attack in 2020It has recently been revealed that Artech Information Systems, a global IT staffing firm has fallen victim to their second ransomware attack of the year. Following the January attack by the REvil ransomware group, which released a small portion of company data after not receiving the ransom payment, Artech ha

420

2 years ago

ProTruckDriverModerator

posted in Tech Talk

MacOS Big Sur Beta 5 Released to Download

MacOS Big Sur beta 5 is now available to download for all users who are registered to participate in the beta testing programs. Typically the developer build comes along first and is quickly followed by the same build as a public beta release. Anyone can download and install the macOS Big Sur public beta on a compatible Mac, but beta system software is best reserved for advanced users on secondary hardware.The release of the fifth beta of macOS Big Sur comes just after iOS 14 beta 5 and iPadOS 14 beta 5 were also released, along with the fifth betas of watchOS 7 and tvOS 14.Full Article

2 years ago

Jasper_The_RasperModerator

posted in Tech Talk

iPhone and iPad photos permanently wiped, as Adobe bungles iOS Lightroom app update

Lightroom iOS users learn a hard lesson in backing up photos, but Adobe doesn't even offer an offline back-up option. August 22, 2020 By Liam Tung Adobe has admitted that a recent update to its popular Lightroom photo-editing app for iOS devices has wiped users' photos and custom preset filters permanently if they didn't pay for a subscription to sync their files to Adobe's cloud. As spotted by PetaPixel, Lightroom users with iPhones and iPads started complaining about lost photos and custom preset filters on the Photoshop feedback forum this week, after affected users installed the Lightroom 5.4 update for iOS. Full Article.

2 months ago

TripleHelixModerator

posted in Tech Talk

Ready to fly again? Microsoft Flight Simulator scheduled to launch Aug. 18 for PC

July 13, 2020 8:45 am By Athima Chansanchai / Writer, Windows Blog Xbox Game Studios and Asobo Studio have announced the launch of Microsoft Flight Simulator on Aug. 18. You can now pre-order on Windows 10* or pre-install with Xbox Game Pass for PC (Beta). The game’s features include: detailed landscapes, live traffic, real-time weather, and highly detailed and accurate cockpits with realistic instrumentation. Get all the details at Xbox Wire. *For more information on supported specs, please visit FlightSimulator.com. https://blogs.windows.com/windowsexperience/2020/07/13/ready-to-fly-again-microsoft-flight-simulator-scheduled-to-launch-aug-18-for-pc/

2 years ago

Jasper_The_RasperModerator

posted in Tech Talk

Microsoft releases update to remove Adobe Flash from Windows

October 27, 2020 By Lawrence Abrams Microsoft has released the KB4577586 update to remove Adobe Flash from Windows and prevents it from being installed again.In September 2020, Microsoft announced that an optional update would be released in the fall to uninstall Adobe Flash Player and prevent it from being installed again on the same device.Today, Microsoft has released the "Update for the removal of Adobe Flash Player: October 27, 2020" KB4577586 update to remove Adobe Flash from all versions of Windows 10 and Windows Server. Full Article.

2 years ago

TripleHelixModerator

posted in Tech Talk

Looking back—The 25th Anniversary of Windows 95

August 24, 2020 10:01 am By Brandon LeBlanc / Senior Program Manager, Windows Insider ProgramWindows 95 was launched on August 24, 1995, introducing us to many of the experiences our customers still use to interact with their PCs today such as the Start menu and Taskbar. Over the past 25 years, we have evolved these experiences, building on this rich history of innovation. Join us in looking back at how Windows has changed over the years to empower every person and every organization on the planet to achieve more! In addition to this video looking back at Windows 95, we have also done a special two-part episode of this month’s Windows Insider Podcast where Jason Howard interviews two engineers who worked on Windows 95 and still work at the company:The Start of Something Different, Part 1: In the first part of this month’s two-part episode, Jason is joined by Raymond Chen, a Principle Software Engineer in Windows. He reflects on the history of Windows 95 and the early days of applicat

2 years ago

Jasper_The_RasperModerator

posted in Tech Talk

Trump administration gives TikTok 45 days to sell to Microsoft or leave US [Updated]

Short-form video platform beloved by teens seen as a national security threat.KATE COX - 8/3/2020 After weeks of rumor and speculation, the Trump administration this weekend gave TikTok's parent company, Beijing-based ByteDance, 45 days to sell off the social media sensation or else stop operating in the United States—and Microsoft looks to be the buyer.Microsoft on Sunday confirmed what several media outlets had been speculating since Friday, saying it is in talks to buy TikTok's operations in the US, Canada, Australia, and New Zealand and may also invite other US investors to take minority stakes in the deal. Full Article.

2 years ago

TripleHelixModerator

posted in Tech Talk

Announcing Windows 10 Insider Preview Build 19042.388 (20H2)

July 14, 2020 10:54 am By Brandon LeBlanc / Senior Program Manager, Windows Insider Program Hello Windows Insiders, today we’re releasing 20H2 Build 19042.388 (KB4565503) to Windows Insiders in the Beta Channel. This Cumulative Update includes quality improvements. Key changes include: We fixed an issue that might prevent you from using PowerShell to change the system locale on Server Core platforms. We fixed an issue that might cause certain games and applications to have visual distortion when resizing in windowed mode or switching from full screen to window mode. We fixed an issue that causes lsass.exe to fail with the following error message, “A critical system process, C:\WINDOWS\system32\lsass.exe, failed with status code c0000008. The machine must now be restarted.” We fixed an issue that might prevent some applications from printing documents that contain graphics or large files after installing Windows Updates released June 9, 2020. We fixed an issue that might prev

2 years ago

freydrewRetired Webrooter

published in Tech Talk

Cyber News Rundown: June 2020

Steganography Makes Leaps into Industrial Cyberattacks Researchers have been following a new trend of incorporating multiple levels of steganography into cyber attacks that are focusing mainly on large industries. The attacks themselves are highly specified for the victim, including a language localization script to only execute if the local OS is in the right language, and using macros to launch malicious PowerShell scripts that stay hidden from the victim’s view and require no additional input. The scripts, when executed, communicate with imgur.com or other image hosting sites and grab pictures that have malicious code hidden within the pixels, that eventually drops an encrypting payload. Honda Shuts Plants After Ransomware Attack Several Honda plants around the world have recently closed due to a ransomware attack that has targeted several manufacturing systems. The shutdown came only hours after a new Snake ransomware sample was uploaded to Virus Total and was seen attempting

680

2 years ago

Jasper_The_RasperModerator

posted in Tech Talk

Windows 10: This handy new feature will warn if your drive is about to fail

Windows 10 will soon alert users if their SSD is at risk of breaking down, and advise them to back up their data pronto. October 6, 2020 By Owen Hughes We've all been in the unfortunate situation of desperately trying to recover important data from a storage drive that's met an untimely end. Fortunately, Microsoft is now working on a new feature that will help warn users of an impending drive failure before the dreaded event occurs.The new feature comes packaged as part of the latest Windows 10 Insider Preview Build 20226, and is designed to detect hardware abnormalities for NVMe SSD and provide a heads-up when it detects a risk of imminent failure. If a problem is detected, Windows will provide a notification recommending that users immediately back up their data – immediately being the key word, here. Full Article.

2 years ago

freydrewRetired Webrooter

published in Tech Talk

Cyber News Rundown: July 2020

UCSF Pays Hefty RansomFollowing a ransomware attack on the University of California San Francisco last month, officials have finally decided to pay the demanded ransom of $1.14 million, in order to decrypt several of their vital systems. The decided ransom amount came after negotiations between the University and the attackers that started around $3 million, but was worked down to under half, which was paid by the University the following day. UCSF is only one of three Universities that were targeted by ransomware attacks at the start of June from the Netwalker hacker group and concluded to simply pay the ransom to restore normalcy to their networks. Magecart Group Surpasses 570 Victim SitesIn the 3 years since Magecart Group 8’s initial step onto the card-skimming scene, they have successfully compromised over 570 e-commerce sites around the world. Over 25% of the attacks targeted US domains and stemmed from 64 unique attack domains that were able to distribute the injected JavaScript

400

2 years ago

ProTruckDriverModerator

posted in Tech Talk

MacOS Catalina 10.15.6 Released, & Security Update 2020-004 for Mojave & High Sierra

Apple has released macOS Catalina 10.15.6, along with Security Update 2020-004 Mojave, and Security Update 2020-004 High Sierra. MacOS Catalina 10.15.6 includes several bug fixes and security patches, and the Security Update 2020-004 for Mojave and High Sierra both include important security fixes for Mac users running macOS Mojave and macOS High Sierra. Separately, Apple also released updates of iOS 13.6 for iPhone and iPadOS 13.6 for iPad, along with small updates to watchOS and tvOS. Full Article

2 years ago

freydrewRetired Webrooter

published in Tech Talk

Cyber News Rundown: October 2020

Cyber Attack Forces Swatch to Disconnect Online ServicesThough not confirmed by Swatch, the Swiss watchmaker was forced to take many of their systems offline after falling victim to a likely ransomware attack. While the company did not verify the exact type of attack, ransomware has been increasingly prevalent this year, and Swatch has announced that they plan to seek legal action against the attackers. Hopefully Swatch was quick enough in their discovery of the attack that shutting down their own systems was able to prevent the attack from spreading. New Jersey Hospital Pays Massive RansomIn the wake of a ransomware attack on the University Hospital in New Jersey, officials have decided to pay the demanded ransom of roughly $670,000. The hospital was likely pushed to this decision due to the 240GB of data that was stolen in the attack on their systems and were not capable of returning to normal operations from proper backups. It’s not entirely clear what information was stolen, but wi

430

2 years ago

freydrewRetired Webrooter

published in Tech Talk

Cyber News Rundown: August 2020

Multiple Individuals Charged for Twitter Hack Three people have been identified and charged with the Twitter hack that occurred last month, that generated over $100,000 in bitcoin, through hijacking high-profile accounts. Of the 130 accounts that were used to spread the Bitcoin scam, some major names included Elon Musk and Bill Gates, who have been portrayed in similar scams in the past. It appears that the FBI was able to identify the perpetrators through a known hacking forum that offered up Twitter account hacking services for a fee. Colorado Town Suffers Ransomware Attack The town of Lafayette, CO became the victim of a ransomware attack last week, and unfortunately didn’t have the capabilities to recover from the attack without paying the ransom, of $45,000 in cryptocurrency. The attack itself took many of the City’s major services offline for a number of days, until officials determined they wouldn’t be able to recover without paying for their systems to be decrypted. In situatio

2310

2 years ago

freydrewRetired Webrooter

published in Tech Talk

Malware Phishing

Next up in our series on the diverse types of phishing now used by cybercriminals, we come to malware phishing. Using the same techniques, this type of phishing introduces nasty bugs by convincing a user to click a link or download an attachment so malware can be installed on a machine. It is currently the most widely used form of phishing attacks. SIM swapping is a type of spear phishing where attackers phish a target’s phone carrier, pretending to be the target to replace the SIM card with one of their own. One such case resulted in $24 million of lost cryptocurrency. Tip: Received an unsolicited email from an unknown sender? Beware of downloading anything sent along with it. Many are malicious attachments known as ‘macros.’ How to Spot Malware Phishing One hallmark of malware phishing is the attachment of a blank document requiring you to enable macros to view its contents. This is a major red flag. Download the 11 Types of Phishing eBook

2640

2 years ago

freydrewRetired Webrooter

published in Tech Talk

Vishing

Like smishing, vishing will be familiar to many, even if not by name. The next attack in our series covering the diverse forms of phishing seems to touch everyone these days, whether at home, work, or on mobile. Vishing involves a fraudulent actor calling a victim pretending to be from a reputable organization and trying to extract personal information, such as banking or credit card information. Most often, the “caller” on the other line obviously sounds like a robot, but as technology advances this tactic has become more difficult to identify. How to Avoid Vishing Scams Be skeptical when answering calls from unknown numbers. If they ask for personal information, don’t provide it over the phone. Use a caller ID app, but don’t trust it completely. Search for the caller’s phone number online to see if it’s a known scam. 5. If the call is about a product or service you use, go to the vendor’s website or call the vendor directly to confirm. Being Vished? Here’s What to Do. Eac

9300

2 years ago

freydrewRetired Webrooter

published in Tech Talk

Pharming: Poisoning the Waterhole

Also known as DNS poisoning, pharming is a technically sophisticated form of phishing involving the internet’s domain name system (DNS). Pharming reroutes legitimate web traffic to a spoofed page without the user’s knowledge, often to steal valuable information. Did You Know: DNS acts as the phonebook of the internet, taking a long string of numbers—the IP address—and translating it to the URLs we all know, like webroot.com. When cybercriminals interfere with this communication, it’s known as DNS poisoning. Operation Sea Turtle Given the level of technical sophistication it requires, DNS poisoning is often carried out by state-backed hackers. In one of the most famous examples, a group known by the code name "Sea Turtle" used the technique to spy on governmental intelligence agencies across the Middle East and North Africa. The attack was announced by the private intelligence group Cisco Talos in 2019. Download the 11 Types of Phishing eBook

1460

2 years ago

freydrewRetired Webrooter

published in Tech Talk

Clone Phishing

Our phishing series continues with an especially nefarious form, one that can be very difficult to detect once a cybercriminal has gained access to an account, likely leveraging stolen credentials, perhaps even obtained via another one of the forms of phishing we’ve covered. In clone phishing, a shady actor makes changes to an existing email, resulting in a nearly identical (cloned) email but with a legitimate link, attachment, or other element swapped for a malicious one. These attacks can’t get off the ground without an attacker first compromising an email account, so a good defense is using strong, unique passwords paired with two-factor authentication. What Clone Phishing Looks Like Download the 11 Types of Phishing eBook

740

2 years ago

freydrewRetired Webrooter

published in Tech Talk

Man-in-the-Middle Phishing: The Public WiFi Phisherman

More generally, a man-in-the-middle attack involves an eavesdropper monitoring correspondence between two unsuspecting parties. But when this is done to steal credentials or other sensitive information, it becomes the next type of phishing in our series: a man-in-the-middle phishing attack. These attacks are often carried out by creating phony public WiFi networks at coffee shops, shopping malls, and other public locations. It can be surprisingly simple to make the phony network lures and, once joined, the man in the middle can phish for info or push malware onto devices. Man-in-the-middle phishing attacks should impress on us the importance of using good cyber hygiene when on public networks. Consider refraining from conducting highly sensitive work—like banking transactions, bill paying, or transferring confidential work documents—on public networks. Tip: On most personal computers, especially those running on Windows operating systems, local file sharing is turned on by default.

630

2 years ago

freydrewRetired Webrooter

published in Tech Talk

Business Email Compromise (BEC): Don’t Make the Payment

The next attack in our series on the diverse methods hackers use to phish their targets has earned the ire of the FBI. It’s the source of over a billion dollars of lost revenue for businesses and, not surprisingly, a method favored by cybercriminals for its low-effort, high-return paybacks. One of the most expensive threats facing businesses today, business email compromise involves a phony email, usually claiming to be someone from within or associated with a target's company, requesting a payment or purchase be made (often of gift cards). A "confidence game" according to the FBI, BEC attempts are often accompanied by a sense of high urgency to discourage critical thinking. FYI: Of the $3.5 billion the FBI estimates businesses lost to cybercrime in 2019, nearly half ($1.7 billion) was blamed on business email compromise. The Classic BEC Scheme One of the most famous templates for achieving business email compromise is a frantic request by a supposed superior for gift cards. Oft

490

2 years ago

khumphreyCommunity Specialist

published in Tech Talk

Social Engineering: Hacking Human NatureBlog

Social Engineering is the art of manipulating people into giving up their confidential information. This information could include passwords, bank info, birthdate, or anything else that could be used for identity theft. Cybercriminals use this tactic because it is generally easier to hack your trust than it is to hack your computer. Even if you believe yourself to be a skeptical, critical thinking individual, you can still fall prey to a social engineering attack. Therein lies the real danger behind social engineering:Most people think they are immune to becoming a victim, and most are similarly vulnerable as targets. This is because 97% of malware operators target users through Social Engineering rather than technical flaws.It’s worth noting that social engineering is a broad term covering a range of methods and tools. All seek to achieve an end-result of acquiring valuable data and/or access to a computer system. Let’s dive into some of these methods and how you can protect against t

49030

2 years ago

Page 177 / 192

Badges

MajorHavochas earned the badge Product Help: Posted 100 comments!
Sean Bolashas earned the badge News: Posted 10 comments!
Petrovichas earned the badge Beta To The Max
TylerMhas earned the badge Have 50 answers marked as "solved"!
tasystemshas earned the badge Posted 100 comments!

Show all badges

Join the Conversation

Tweets by Webroot

Terms & Conditions

Sign up

Already have an account? Login

Username *

E-mail address *

Password *

I accept the terms & conditions

loginBox.register.email_repeat

Login to the community

No account yet? Create an account

Username or Email

Password

Remember me

Forgot password?

Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.

Username or e-mail

Back to overview

Scanning file for viruses.

Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.

This file cannot be downloaded

Sorry, our virus scanner detected that this file isn't safe to download.

Customer Support
Webroot.com
Blog
Status Page
Community Guidelines
Legal
Privacy
Cookie Preferences

We have recently updated our Privacy Policies. We encourage you to read the full terms here.