To Customer Support To Customer Support

Events
Leaderboard
Customer Support

📊 2023 OpenText Cybersecurity Threat Report

2 months ago

Home
Community overview
Welcome

Welcome

News, Announcements, Tech Discussions

41075 Topics

Recently active

Most replies Most views Newest first

ConnorMThreat Research Analyst

published in Security Industry News

Cyber News Rundown: Burton Snowboards confirms customer data breachNews

Nearly 4 months after experiencing system outages that forced customers to cancel online orders, officials for Burton Snowboards have begun notifying customers that may have had their sensitive information compromised by a data breach. Additionally, the company has pushed out a mandatory password reset for all customers who have an online account in case the threat actors behind the incident decide to use them maliciously.Ransomware exposes patient data for millionsOver 2.4 million patients of Enzo Biochem, a biotechnology company, have been notified that their medical records have been compromised because of a ransomware attack that targeted their internal systems. While the company quickly isolated the affected system from the rest of their network, the stored data may have been exfiltrated by the attackers, though they maintained normal operations throughout the incident.Nova Scotian government compromised in MOVEit attackFollowing the Clop ransomware group’s zero-day attack on the

43 minutes ago

TripleHelixModerator

posted in Tech Talk

Mozilla Firefox 114.0.1 Released Jun 9, 2023.

Available via Internal Updater (6.5 MB - 64bit) Release Notes: https://www.mozilla.org/en-US/firefox/114.0.1/releasenotes/ Or Choose which Firefox Browser to download in your language: https://www.mozilla.org/en-US/firefox/all/#product-desktop-release

2 hours ago

TylerMSr. Security Analyst & Community Manager

published in News & Announcements

Webroot wins SE Labs AAA rating in 2023 for small business endpoint protectionAWARD

OpenText Cybersecurity is pleased to announce that Webroot was once again recognized for efficacy in small business endpoint protection by the software testing firm SE Labs for the January - March 2023 time period. This detailed report tested various endpoint security products between January and March 2023 and focused on their ability to handle well-known threats and targeted attacks. These tests are invaluable for helping vendors improve their products and assisting buyers in choosing the best solutions for their needs. SE Labs is known for its commitment to transparency, and this report is no exception. It has gone through the rigorous AMTSO certification process, ensuring that the testing and results are accurate and reliable. In addition to the testing results, the report also debunks five common antivirus myths that often cause misconceptions about endpoint security. These myths include beliefs such as "anti-virus slows your computer" and "updates are no longer necessary." The

26520

18 hours ago

Jasper_The_RasperModerator

posted in Security Industry News

ConnorMThreat Research Analyst

published in Security Industry News

Cyber News Rundown: City of Augusta, Georgia falls victim to BlackByte ransomwareNews

Last week, officials for the City of Augusta, Georgia have announced that the recent IT outages were the result of a ransomware attack by the BlackByte group. Shortly after the incident, a 10GB data trove was published to the BlackByte group’s leak site, with options to purchase or remove the data, with differing price tags. Ransomware attacks have been targeting cities with an increasing rate since the start of 2023, and with the pressure to restore normal functionality as quickly as possible, they tend to be highly lucrative victims.Millions of Android devices infected by SpinOk trojanResearchers have been tracking a new Android trojan, dubbed SpinOk, that can easily embed itself in innocuous apps and track a variety of information that is being sent or received by the device. The SpinOk module also offers several features that claim to provide services to the user but begins transmitting device data immediately and can hide its network activity while avoiding proxy settings. It is b

15617

23 hours ago

Jasper_The_RasperModerator

posted in Security Industry News

Honda API flaws exposed customer data, dealer panels, internal docs

June 7, 2023 By Bill Toulas Honda's e-commerce platform for power equipment, marine, lawn & garden, was vulnerable to unauthorized access by anyone due to API flaws that allow password reset for any account.Honda is a Japanese manufacturer of automobiles, motorcycles, and power equipment. In this case, only the latter division is impacted, so owners of Honda cars or motorcycles aren't affected.The security gap in Honda's systems was discovered by a security researcher using the pseudonym ‘Eaton Works,' who is the same that breached Toyota's supplier portal a few months back, leveraging similar vulnerabilities.For Honda, Eaton Works exploited a password reset API to reset the password of valuable accounts and then enjoy unrestricted admin-level data access on the firm's network. >> Full Article <<

23 hours ago

skumarsamy54Webroot Employee

published in Tech Talk

How a Layered Security Approach Can Minimize Email ThreatsBlog

Attackers frequently adapted their email-based techniques throughout 2022, cycling through new and old tactics in the hopes of evading human and cybersecurity measures. Data from the 2022 OpenText Cybersecurity Threat Report showed a 1,122% increase in phishing in the first quarter of 2022 compared to 2021. Not surprising, there is no sign of a slowdown as email continues to be a primary attack vector in 2023.An email attack has many ramifications, including reputational damage, compliance violations, fines and downtime - all of which can result in loss of revenue, customers and even business closure. According to IBM, the average cost of a data breach in the United States is $9.44 million -$4.35 million globally. When you consider that the average small and medium business makes $2.1 million per year, you see that most SMBs are unable to sustain a breach.As if the evolving threat landscape wasn’t enough, staffing issues, due in part to a complex economic environment, mean organization

1147

1 day ago

mfreetoflyNew Member

asked in Community 101

Deactivating old devices

I made the mistake of wiping my old computer clean without uninstalling software like Webroot. Back in the day you could login to your account and deactivate old computers when you buy a new computer. This doesn’t seem to be possible anymore. Can anyone tell me a way to do this? I’ve already followed the KBarticle link from 6 years ago in an old post and it’s no longer relevant.

1 day ago

Jasper_The_RasperModerator

posted in Security Industry News

FBI: Sextortionist Campaigns Use Deepfakes to Target Children, Adults

Threat actors are lifting public images and videos from the Internet, altering them, and posting them online in a new wave of sextortion campaigns. June 7, 2023 By Elizabeth Montalbano Threat actors are manipulating stolen images and videos using artificial intelligence (AI) to create deepfakes that show innocent people — including minor children and non-consenting adults — in fake but explicit sexual activity. It's part of a growing new wave of sextortionist scams, the FBI is warning.Victims of these scams increasingly are reporting to the agency that personal photos and videos of them that are posted on on their pages online are being manipulated and then publicly circulated on social media or pornographic websites, the FBI said in an advisory posted this week. Threat actors usually contact the victims to demand payment with money or gift cards in exchange for removing the images or refraining from sharing them with family members or friends. However, once the photos and videos are c

1 day ago

Jasper_The_RasperModerator

posted in Security Industry News

VMware Plugs Critical Flaws in Network Monitoring Product

VMware ships urgent patches to cover security defects that expose businesses to remote code execution attacks. June 7, 2023 By Ryan Naraine Virtualization technology giant VMware on Wednesday shipped urgent patches to cover security defects in the Aria Operations for Networks product, warning that the flaws expose business to remote code execution attacks.VMware released an advisory documenting three critical-severity vulnerabilities haunting the network and application monitoring tool and called special attention to a command injection issue (CVE-2023-20887) that carries a CVSSv3 base score of 9.8/10. >> Full Article <<

1 day ago

Jasper_The_RasperModerator

posted in Security Industry News

Cisco fixes AnyConnect bug giving Windows SYSTEM privileges

June 7, 2023 By Sergiu Gatlan Cisco has fixed a high-severity vulnerability found in Cisco Secure Client (formerly AnyConnect Secure Mobility Client) software that can let attackers escalate privileges to the SYSTEM account used by the operating system.Cisco Secure Client enables employees to work from anywhere via a secure Virtual Private Network (VPN) and provides admins with endpoint management and telemetry features.Low-privileged, local attackers can exploit this security flaw (tracked as CVE-2023-20178) in low-complexity attacks that don't require user interaction. >> Full Article <<

1 day ago

Jasper_The_RasperModerator

posted in Security Industry News

New PowerDrop malware targets U.S. aerospace defense industry

June 7, 2023 By Pierluigi Paganini A previously unknown threat actor has been observed targeting the U.S. aerospace defense sector with a new PowerShell malware dubbed PowerDrop.Researchers from the Adlumin Threat Research discovered a new malicious PowerShell script, dubbed PowerDrop, that was employed in attacks aimed at organizations in the U.S. aerospace sector.The PowerShell-based malware uses advanced techniques to evade detection, including deception, encoding, and encryption.At this time Adlumin has yet to link the malware to a specific threat actor, but the researchers believe it could be a nation-state actor due to the level of sophistication of the malware and the nature of the targets. >> Full Article <<

1 day ago

Jasper_The_RasperModerator

posted in Security Industry News

Dozens of popular Minecraft mods found infected with Fracturiser malware

Stop downloading or updating Minecraft mods for now, investigators say.DAN GOODIN - 6/7/2023 A platform that provides plugin software for the wildly popular Minecraft game is advising users to immediately stop downloading or updating mods after discovering malware has been injected into dozens of offerings it makes available online.The mod-developer accounts were hosted by CurseForge, a platform that hosts accounts and forums related to add-on software known as mods or plugins, which extend the capabilities of the standalone Minecraft game. Some of the malicious files used in the attack date back to mid-April, a sign that the account compromises have been active for weeks. Bukkit.org, a developer platform run by CurseForge, is also believed to be affected.Fracturiser infecting Windows and Linux systems“A number of Curseforge and dev.bukkit.org (not the Bukkit software itself) accounts were compromised, and malicious software was injected into copies of many popular plugins and mods,”

1 day ago

Jasper_The_RasperModerator

posted in Security Industry News

Service Rents Email Addresses for Account Signups

June 6, 2023 By Brian Krebs One of the most expensive aspects of any cybercriminal operation is the time and effort it takes to constantly create large numbers of new throwaway email accounts. Now a new service offers to help dramatically cut costs associated with large-scale spam and account creation campaigns, by paying people to sell their email account credentials and letting customers temporarily rent access to a vast pool of established accounts at major providers. The service in question — kopeechka[.]store — is perhaps best described as a kind of unidirectional email confirmation-as-a-service that promises to “save your time and money for successfully registering multiple accounts.”“Are you working on large volumes and are costs constantly growing?” Kopeechka’s website asks. “Our service will solve all your problems.”As a customer of this service, you don’t get full access to the email inboxes you are renting. Rather, you configure your botnet or spam machine to make an automat

2 days ago

Jasper_The_RasperModerator

posted in Security Industry News

Malwarebytes may not be allowed to label rival's app as 'potentially unwanted'

Legal prof warns: 'This case is like a wrecking ball for internet law' June 6, 2023 By Thomas Claburn The US Ninth Circuit Court of Appeals last week ruled that Enigma Software Group can pursue its long standing complaint against rival security firm Malwarebytes for classifying its software as "potentially unwanted programs" or PUPs.Florida-based Enigma has been trying to hold Malwarebytes accountable for blocking its programs since 2017 when the firm initially sued Malwarebytes for tortious interference, violation of New York business law, and false advertising under the Lanham Act.This suit was filed in response to antivirus maker Malwarebytes labeling Enigma's anti-spyware tool a PUP – soft, supposedly legally safe industry jargon for malware or almost-malware. Enigma objected to the classification. >> Full Article <<

2 days ago

Jasper_The_RasperModerator

posted in Security Industry News

Outlook.com hit by outages as hacktivists claim DDoS attacks

June 6, 2023 By Mayank Parm Outlook.com is suffering a series of outages today after being down multiple times yesterday, with hacktivists known as Anonymous Sudan claiming to perform DDoS attacks on the service.This outage follows two major outages yesterday, creating widespread disruptions for global Outlook users, preventing users worldwide from reliably accessing or sending email and using the mobile Outlook app.Outlook users have taken to Twitter to complain about the spotty email service, stating that it is affecting their productivity. >> Full Article <<

2 days ago

ProTruckDriverModerator

posted in Tech Talk

Beta 1 of iOS 17 & iPadOS 17 Available to Download (Developer Beta)

by: Paul Horowitz Apple has released the first beta versions of iOS 17 and iPadOS 17.The initial beta releases of iOS 17 and iPadOS 17 are available exclusively to users registered in the developer beta testing programs, while public beta versions will be made available in July. iOS 17 includes new features and refinements to the iPhone operating system including Contact Posters for the Phone app, a NameDrop feature that allows contacts to easily be exchanged like AirDrop, FaceTime video voicemail, live transcripts on standard phone voicemails, interactive widgets, Safari profiles, and more. ⇨⇨ Full Article ⇦⇦

2 days ago

Jasper_The_RasperModerator

posted in Security Industry News

‘AI package hallucination’ can spread malicious code into developer environments

June 6, 2023 By Steve Zurier Large-language models (LLMs) such as ChatGPT can generate these “hallucinations,” which are URLs, references, and even entire code libraries and functions that do not exist. (Adobe Stock Images) Attackers can easily use ChatGPT to help them spread malicious packages into developer environments, according to new research from Vulcan Cyber.In a June 6 blog post, Vulcan Cyber researchers explained a new malicious package spreading technique they call “AI package hallucination.” The technique stems from ChatGPT and other generative AI platforms sometimes answering user queries with hallucinated sources, links, blogs and statistics.Large-language models (LLMs) such as ChatGPT can generate these “hallucinations,” which are URLs, references, and even entire code libraries and functions that do not actually exist. The researchers said ChatGPT will even generate questionable fixes to CVEs, and — in this specific case — offer links to coding libraries that don’t exis

2 days ago

Jasper_The_RasperModerator

posted in Security Industry News

Verizon 2023 Data Breach Investigations Report: 74% of breaches involve human element

June 6, 2023 By Help Net Security Verizon Business today released the results of its 16th annual Data Breach Investigations Report (2023 DBIR), which analyzed 16,312 security incidents and 5,199 breaches. Chief among its findings is the soaring cost of ransomware – malicious software (malware) that encrypts an organization’s data and extorts large sums of money to restore access. >> Full Article <<

2 days ago

1
2
3
4
...
1643

Page 1 / 1643

Badges

MajorHavochas earned the badge Product Help: Posted 100 comments!
Sean Bolashas earned the badge News: Posted 10 comments!
Petrovichas earned the badge Beta To The Max
TylerMhas earned the badge Have 50 answers marked as "solved"!
tasystemshas earned the badge Posted 100 comments!

Show all badges

Join the Conversation

Tweets by Webroot

Terms & Conditions

Sign up

Already have an account? Login

Username *

E-mail address *

Password *

I accept the terms & conditions

loginBox.register.email_repeat

Login to the community

No account yet? Create an account

Username or Email

Password

Remember me

Forgot password?

Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.

Username or e-mail

Back to overview

Scanning file for viruses.

Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.

This file cannot be downloaded

Sorry, our virus scanner detected that this file isn't safe to download.

Customer Support
Webroot.com
Blog
Status Page
Community Guidelines
Legal
Privacy
Cookie Preferences

We have recently updated our Privacy Policies. We encourage you to read the full terms here.