To Customer Support To Customer Support

Welcome

News, Announcements, Tech Discussions

43267 Topics

Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News

Oracle VirtualBox Memory Corruption Vulnerabilities Uncovered

[b]Researchers at Core Security uncovered a set of serious vulnerabilities affecting Oracle VirtualBox that can be targeted to remotely execute code.[/b] VirtualBox is a virtualization software package for x86 and AMD64/Intel64-based computers. Among other capabilities, VirtualBox allows guest machines to use the host machine's GPU to render 3D graphics based on OpenGL or Direct3D APIs. [url=http://www.coresecurity.com/advisories/oracle-virtualbox-3d-acceleration-multiple-memory-corruption-vulnerabilities]According to Core Security[/url], there are multiple memory corruption vulnerabilities in the code that implements this feature for OpenGL graphics that permit an attacker who is already running code within a guest OS to escape from the virtual machine and execute code on the host. "VirtualBox makes use of the Chromium open-source library (not to be confused with the open-source web browser) in order to provide 3D Acceleration for OpenGL graphics," Core Security explained in its ad

0
Jasper_The_Rasper
Moderator
10 years ago
Petrovic
Gold VIP
PetrovicGold VIP
posted in Security Industry News

How can business take mobile security to the next level?

As the modern workforce continues to become more mobile, new IT challenges and demands have arisen, placing pressure on the IT department to adapt its security procedures. End-users now work on a whole host of devices and in a multitude of locations. But one thing remains the same; all of them want access to data regardless of device or place. Because of this, the need for strong security is more evident than ever. The challenge for IT managers is how to deliver access to data securely. They have to put systems in place that will not only consider user data security, but also allow workers to be flexible in how they use technology to get the job done. [b]The consumerisation of the working landscape[/b] The latest versions of the Kindle Fire and iPad Air being released drew attention to the growing consumer interest in new devices, and also the levels of sophistication the devices and software running on them have reached. BlackBerry has also had a variety of announcements recently abou

1
nic
10 years ago
Baldrick
Gold VIP
BaldrickGold VIP
posted in Security Industry News

BT caught in data gaffe drama: Whistleblower squeals over alleged email fail

[H2]Britain's privacy watchdog probes 'likely breach'[/H2]By [url=http://www.theregister.co.uk/Author/2553]Kelly Fiveash[/url], 13 Mar 2014 [b]Exclusive[/b] BT is being investigated by the UK's data regulator after a whistleblower exposed evidence that allegedly showed the one-time national telco's customer email accounts were being compromised by spammers, [i]The Register[/i] has learned.   In May last year, [url=http://www.theregister.co.uk/2013/05/31/bt_ditches_yahoo/]BT unceremoniously ditched Yahoo[i]![/i] Mail[/url] in favour of a white label product from San Mateo, California-based Critical Path Inc.  At the time, Britain's largest ISP explained that it was "always looking for ways to improve and develop products and services", while Critical Path chimed in by adding that it was offering a "flexible and consistent experience across ... devices", and added that the deal included "email antivirus/anti-spam security services."

0
Baldrick
Gold VIP
10 years ago
Baldrick
Gold VIP
BaldrickGold VIP
posted in Security Industry News

Noooo... WAIT. Google slaps on Chrome patches ahead of Pwn2Own hackfest

[H2]Hackers break IE11 and Firefox, hand $82k to charity[/H2]By [url=http://www.theregister.co.uk/Author/2578]John Leyden[/url], 13 Mar 2014 [b]Pwn2Own[/b] Google trowelled plaster over seven security cracks in Chrome on Tuesday, a day before the browser became one of the targets at the annual Pwn2Own hacking competition.   The latest cross platform [url=http://googlechromereleases.blogspot.ca/2014/03/stable-channel-update_11.html]security update[/url] for Chrome fixed four "high" severity flaws and three lesser bugs.  Three of the four high profile bugs were discovered by independent researchers, who earned $8,000 for their efforts, while the final vulnerability was discovered internally by Google. Use-after-free flaws were a common factor in three of the four vulnerabilities, none of which were bad enough to earn the dreaded rating of "critical".   The Pwn2Own hacking competition kicked off on Wednesday during the first day of the CanSecWe

0
Baldrick
Gold VIP
10 years ago
Baldrick
Gold VIP
BaldrickGold VIP
posted in Security Industry News

New fear: Worm that ransacked US military PCs was blueprint for spies' super-malware

[H2]Secret stealer spawned spooks' snoop stooge, it seems[/H2]By [url=http://www.theregister.co.uk/Author/2578]John Leyden[/url], 12 Mar 2014 A mystery worm that burrowed into US military computers to steal secrets six years ago may have inspired the development of subsequent government-grade malware[url=http://www.theregister.co.uk/2013/01/14/red_october_cyber_espionage/]Red October[/url], [url=http://www.theregister.co.uk/2014/03/04/uroburos_spyware]Turla[/url], [url=http://www.theregister.co.uk/2012/09/17/flame_analysis/]Flame and Gauss[/url].   Researchers at Kaspersky Lab reached this conclusion after finding similarities between Agent.btz – the worm that attacked in 2008 – and Turla, a powerful computer espionage tool that was only discovered last month.  Agent.btz infected the network of the US Central Command in the Middle East. Military officials at the time described it as the "worst breach of US military computers in history." The worm spre

2
Baldrick
Gold VIP
10 years ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News

DDoS criminals plot massive NTP amplification attacks as next wave, vendors warns

Last month’s huge Network Time Protocol (NTP) DDoS amplification [url=http://www.arbornetworks.com/asert/2014/03/ntp-attacks-continue-a-quick-look-at-traffic-over-the-past-few-months/]attack on CloudFlare[/url] was part of a larger and sudden spike in such attacks, remediation vendors have warned. According to Akamai’s Prolexic division, between January and February of this year, [url=http://www.prolexic.com/knowledge-center-ddos-threat-advisory-ntp-amplification.html]NTP-based attacks rose 371 percent[/url], with a more than 800 percent increase in the average peak attack volume deployed. These figures back up an [url=http://www.arbornetworks.com/asert/2014/03/ntp-attacks-continue-a-quick-look-at-traffic-over-the-past-few-months/]Arbor Networks Atlas analysis[/url] published last week which showed NTP/UDP DDoS at 400Gbps on most days in February, a level of traffic that had only waned slightly to around 300Gbps since then. On one day, 4 March, the firm recorded a peak of 800Gbps. Fo

0
Jasper_The_Rasper
Moderator
10 years ago
Baldrick
Gold VIP
BaldrickGold VIP
posted in Security Industry News

Joomla issues upgrade to patch critical SQL vuln

[H2]Joomla issues upgrade to patch critical SQL vuln[/H2]By [url=http://www.theregister.co.uk/Author/2242]Richard Chirgwin[/url], 13 Mar 2014 Joomla's developers have moved to fix a critical SQL injection vulnerability – but are coming under fire for taking a month to address the issue.   The version 3.2.3 update, available since late last week, is described by Joomla as fixing a high priority core SQL injection bug (along with two medium priority XSS bugs and an unauthorised login bug).  However, [url=http://threatpost.com/joomla-fixes-critical-sql-injection-vulnerability/104717]according[/url] to [i]ThreatPost[/i], researchers at Sucuri have associated the SQL fix with a month-old vulnerability that was [url=http://www.exploit-db.com/exploits/31459/]described[/url] at exploit-db.com.   The Scip vulnerability database [url=http://www.scip.ch/en/?vuldb.12308]provides[/url] this description: “Affected by this issue is an u

0
Baldrick
Gold VIP
10 years ago
Petrovic
Gold VIP
PetrovicGold VIP
posted in Security Industry News

Fake “Statement Account” Emails Apparently from Sky.com Carry Malware

[img]https://d1qy7qyune0vt1.cloudfront.net/webroot-en/attachment/8854i701D7A097B1DE74F.jpg[/img]   In case you stumble upon what appears to be an account statement in your inbox, act with caution. It could be an email sent out by cybercriminals to distribute a piece of malware.[b] [/b] Both [url=http://threattrack.tumblr.com/post/79461174073/sky-com-statement-of-account-spam]ThreatTrack Security[/url] and [url=http://blog.dynamoo.com/2014/03/skycom-statement-of-account-spam.html]Dynamoo’s Blog[/url] have analyzed the spam run. The email address of the sender is spoofed to make it look like the message is coming from statement@sky.com. The notifications, which have nothing to do with Sky, read something like this: “Afternoon,  Please find attached the statement of account. We look forward to receiving payment for the December invoice as this is now due for payment. Regards, Dale”  The variant analyzed by Dynamoo’s Blog is pretty much the same, but

0
Petrovic
Gold VIP
10 years ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News

Security Concerns with BT’s UK Email Service Trigger ICO Investigation

The United Kingdom’s [url=http://ico.org.uk/]Information Commissioner’s Office[/url] is investigating a potentially serious data security blunder with BT Mail, which is an Internet email service delivered by Openwave Messaging (formerly Critical Path), after a whistle-blower warned that the service “exposed user credentials en masse“. Readers might recall that BT ditched their old Yahoo! based email / webmail platform, which had been suffering from a variety of security problems, in the middle of last year in favour of an alternative solution from Openwave Messaging / Critical Path ([url=http://www.ispreview.co.uk/index.php/2013/05/bt-switch-millions-of-its-uk-customer-email-accounts-to-new-btmail-service.html]here[/url]). So it’s perhaps not without some irony that the new service seems to have been hit by a security snag of its own, which [url=http://www.theregister.co.uk/2014/03/13/bt_likely_to_have_breached_data_protection_act_after_email_accounts_were_allegedly_compromised_over_

0
Jasper_The_Rasper
Moderator
10 years ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News

Critical crypto flaw in Facebook’s WhatsApp for Android exposes chats

The Android version of WhatsApp, the cross-platform [url=http://arstechnica.com/business/2014/02/facebook-buys-whatsapp-for-16-billion/]instant messaging app purchased by Facebook for $16 billion[/url], has a loophole that leaves chat histories wide open to other apps installed on the same smartphone, a security consultant says. Consultant, system administrator, and entrepreneur Bas Bosschert documented the vulnerability in a [url=http://bas.bosschert.nl/steal-whatsapp-database/]blog post published Tuesday[/url]. It includes proof-of-concept code a rogue app requires to stealthily upload the chat history to an attacker-controlled server and, when working with newer versions of WhatsApp, to decrypt the file. The exploit is premised on the victim installing a malicious app that contains a game or some other useful feature and in the background accessing the database WhatsApp stores on the secure digital (SD) card of an Android device. "The WhatsApp database is saved on the SD card whic

0
Jasper_The_Rasper
Moderator
10 years ago
ams963
Bronze VIP
ams963Bronze VIP
posted in Tech Talk

Bulletproof men's suit blends Bruce Wayne style, Batman-worthy tech

[quote][b]Michael Franco[/b] wrote:   [img]https://d1qy7qyune0vt1.cloudfront.net/webroot-en/attachment/8846iC0B1E6798EB2A9FF.png[/img] According to the manufacturers, the Diamond Armor suit is the world's most expensive men's dress suit. But it doesn't get really dirty, so there's that.   Sartorially, Bruce Wayne certainly had the life. When he wasn't on the job, he got to wear million-dollar suits, thousand-dollar watches, and ties that cost more than a few hundred bucks. When he switched into Batman mode, he got to flaunt a slick cape, body armor that made him look ripped, and one hell of a belt. (By the way, I'm talking here of the movie reboots, not so much the Adam West days.)   Now, a Zurich-based company known as [url=http://www.suitart.com/en]Suitart[/url] has developed a men's suit that combines a whole lot of Wayne style with an ample dose of "kapow!" It's called "[url=http://diamondarmor.suitart.com/]Diamond Armor[/url]," and for good reason: the suit fabric

0
ams963
Bronze VIP
10 years ago
ams963
Bronze VIP
ams963Bronze VIP
posted in Security Industry News

WhatsApp pooh-poohs report of security flaw

[quote][b] Lance Whitney[/b] wrote:[/quote][quote]The people behind WhatsApp are refuting a report contending that the app is vulnerable because your chats can be stored on an Android phone's SD card. Earlier this week, DoubleThink chief technology officer Bas Bosschert posted a blog alleging that hackers could use a [url=http://bas.bosschert.nl/steal-whatsapp-database/]malicious app to tap into your WhatsApp conversations[/url] by uploading the database from the SD card to a Web site. To prove his point, Bosschert said he created an app that was able to snag and read the database files. [/quote] Read [url=http://news.cnet.com/8301-1035_3-57620278-94/whatsapp-pooh-poohs-report-of-security-flaw/]here[/url].

0
ams963
Bronze VIP
10 years ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News

Uroburos Malware Defeats Microsoft's PatchGuard

Introduced years ago for 64-bit editions of Windows XP and Windows Server 2003, Microsoft's Kernel Patch Protection, or PatchGuard, is designed to prevent malware attacks that work by modifying essential parts of the Windows kernel. If a rootkit or other malicious program manages to tweak the kernel, PatchGuard deliberately crashes the system. This same feature [url=http://www.pcmag.com/article2/0,2817,2074615,00.asp]made life tough[/url] for antivirus vendors, as many of them relied on benignly patching the kernel to improve security; they've since adapted. However, a new report from G Data states that a threat called Uroburos can bypass PatchGuard. [b]Hooking Windows[/b] Rootkits hide their activities by hooking various Windows internal functions. When a program calls on Windows to report the files present in a folder, or the values stored in a Registry key, the request goes first to the rootkit. It in turn calls the actual Windows function, but strips out all references to its own

8
explanoit
Silver VIP
10 years ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News

Cybercriminals Tell Users They Might Have Cancer to Trick Them into Installing Malware

[img]https://d1qy7qyune0vt1.cloudfront.net/webroot-en/attachment/8836i7F95BFD4C253D3BA.gif[/img]   [b] [/b] [b] [/b] [b] [/b] [b] [/b] [b] [/b] [b] [/b] [b] [/b] [b] [/b] [b] [/b] [b] [/b] [b] [/b] [b] [/b] [b] [/b] [b] [/b] [b] [/b] [b] [/b] [b] [/b] [b] [/b] [b] [/b] [b] [/b] [b] [/b] [b] [/b] [b] [/b] [b]Cybercriminals have hit a new low. They’re telling users they might have cancer just to trick them into installing a piece of malware on their computers.[/b] The emails are being distributed as part of a spam campaign that leverages the reputation of the United Kingdom’s National Institute for Health and Care Excellence (NICE). The malicious notifications carry the subject line “IMPORTANT: blood analysis results” and they purport to come from no_reply@nice.org.uk. The malicious emails read something like this: “We have been sent a sample of your blood analysis f

5
C
Popular Voice
10 years ago
B
BarbWC
posted in Community 101

battery drain issue

We have one mobile phone that has significantly lost battery time since mobile protection was installed. I've tried turning off, pulling the SD card and then restarting the phone - as suggested by the helpdesk for possible SD corruption. That didn't work. I finally removed the device from the admin console. This was supposed to give the user the ability to uninstall but he can't. Any suggestions? Ideally we would like his phone protected but minimally we would like to uninstall it and resolve whatever is causing the battery drain.

0
B
10 years ago
ams963
Bronze VIP
ams963Bronze VIP
posted in Security Industry News

Dexter payment card malware strikes South Africa

[quote][b]Leo Kelion[/b] wrote:   [i]South Africa has been hit by one of the biggest cyber-fraud attacks in its history, according to the body that oversees local financial transactions.[/i] [i]The payment card systems of thousands of shops, restaurants and hotels had been compromised, said the Payment Association of South Africa (Pasa).[/i]   [i]It added the attackers had used a new variant of the malware known as Dexter.[/i]   [img]http://news.bbcimg.co.uk/media/images/70508000.jpg/_70508757_dexter2.jpg[/img] The malware may have been named after the US television show Dexter     [i]Ten million rand is worth £626,000 or just over $1m.[/i]   [i]Dexter gets its name from a string of code found in one of its files, which may refer to the US television show that followed the exploits of a serial killer.[/i]   [i]The Dexter code [url=http://www.seculert.com/blog/2012/12/dexter-draining-blood-out-of-point-of-sales.html]was linked[/url] to a series of

1
ams963
Bronze VIP
10 years ago
N
Popular Voice
notpcwisePopular Voice
posted in Community 101

newbie...an oldie newbie

Hi!  I'm gonna need a lot of help here & appreciate so much that this forum exists. I am gonna look around & try to find the correct place to ask my questions....most of which I am sure will be so very basic and/or idiotic .... no, really they are, but I fully accept my limitations & am glad to learn something new.  (I just recently discovered bluetooth speakers and am still in awe!!) Anyway thank you all so very much for this forum & your willingness to help out!!:D

9
ams963
Bronze VIP
10 years ago
Petrovic
Gold VIP
PetrovicGold VIP
posted in Security Industry News

Police Ransomware threat of huge Fine forced Family to Commit Suicide

Till Now we all have heard about the Ransomware Malware that encrypts your files or lock down your computer and ask for a random amount to be paid in a specified duration of time to unlock it, but this cyber threat has forced somebody for the terrible murder and suicide. It’s true! This could be an extent of Ransomware that has marked its history by someone’s blood. Marcel Datcu, a 36 year old man, living in the village of Movila Miresii, who was married in 2013 and living happily with his family, killed his 4 year old baby and then himself committed suicide after his computer got infected with “police ransomware,” a Romanian Newspaper, Braila24 reports. Ransomware is one of the most blatant and obvious criminal's money making schemes out there, from which Cryptolocker threat had touched the peak, and cyber criminals have developed many Cryptolocker versions (prisonlocker, linkup, icepole, cryptobit) by which you have to safeguard your system. According to the sources, it seems that Ma

1
nic
10 years ago
P
ppbjno1
posted in Community 101

New to Webroot

Glad to be here.   I've had super annoying spies to remove - Conduit in particular. I'm pretty sure I've been infected as a result of downloading seemingly innocent free software. Perhaps no more!

6
ams963
Bronze VIP
10 years ago
R
RAM1947
posted in Community 101

Tidy Network

Is Webroot associated with Tidy Network? Webroot sent me a warning page urging me not to proceed to an untrusted web site. In a sentence in the warning window that explained that the site might direct information about me to malicious persons, there were three underlined words--identifying them as links. When I moved the cursor over one of the words--persons--an ad popped up from Tidy Network about a site to seach for arrest records. Isn't this spamming?

2
ams963
Bronze VIP
10 years ago
R
RAM1947
posted in Community 101

I can not find the button to post a message or quesgtion on the community forum.

Please show me how to post. I am writing this under the contribute--iedea exchange. I would like to post on the communithy forum, but there is no post button.

2
nic
10 years ago
M
MikeMRetired Webrooter
posted in News & Announcements

Joint message from AV-Comparatives and Webroot

Webroot has supported independent testing of its consumer, business and mobile products for many years. At Webroot’s request, its products have been included in AV-Comparatives’ test series since 2011. Webroot recognizes AV-Comparatives as a leading and highly respected testing organization. In this year’s tests, Webroot products were tested for performance and effectiveness along with many other vendors.   The AV-Comparatives team and Webroot have together decided not to include the new SecureAnywhere product line in the 2013 public main-test series. AV-Comparatives recognizes that Webroot’s approach to protecting the user (preventing unauthorized data transmission, combined with protocolling changes and reversing them where possible) would require a different test procedure which is not applied by any testing lab so far. Unfortunately, such a test could in some cases take several days for each single test case to be performed, making it almost impossible to perform a statistically va

20
RetiredTripleHelix
Gold VIP
10 years ago
Petrovic
Gold VIP
PetrovicGold VIP
posted in Security Industry News

Prepaid Card Scam: “Send me 25 Cards, and the PIN Numbers…”

Here’s a curious scam – misusing the good name of somebody associated with helping to save people money as a ruse to pull the wool over the eyes of those targeted in a cold call / email fakeout. Melissa Leong, personal finance writer at the National Post, has put out a warning that someone is contacting individuals (while claiming to be her “assistant”) and asking them to sign up to pre-paid credit cards. The scam is as follows: 1) An individual going by multiple names (Michael James, Mike James and Brandon Hill) gives a too-good-to-be-true sales pitch by phone involving articles for credit cards and travel, with the promise of financial compensation waiting for them if they jump through some hoops. The compensation is to the tune of $1,000, which is unfortunately going to be a little too tempting for some to resist. 2) They then follow up by email, asking the victim to sign up to (in one case) no fewer than 25 (!) prepaid credit cards, then activate them while setting the PIN code to

0
Petrovic
Gold VIP
10 years ago
nic
nicRetired Webrooter
posted in News & Announcements

New Passmark report for 2014 - Webroot scores the highest

We just got the Passmark report for Business Endpoint Protection and we rocked it as usual.  We scored 97 with the next highest score coming in at 70.  Check out the full report attached.  We'll have the equivalent report coming out for our gamer and consumer versions soon.

10
explanoit
Silver VIP
10 years ago
Petrovic
Gold VIP
PetrovicGold VIP
posted in Security Industry News

Ethical hacker backer hacked, warns of email ransack

Switches registrars, tightens security after 'upsetting' incident The IT security certification body that runs the Certified Ethical Hacker programme has itself been hacked. The EC-Council said the same hackers who ran the DNS poisoning attack that resulted in the defacement of its website in late February had also managed to access the control panel for its website after breaking into the systems of a third-party registrar. This compromised access allowed the miscreants to circumvent security controls and get into the security organisation's email system, as a breach notice from the EC-Council to its members explains.   EC-Council uses a cloud service provider for enterprise email. Once the domain privilege was attained, the hacker then issued a password reset request to the email service provider. This circumvented EC-Council's best practices of using complex passwords and 2-factor authentication. We have informed the service provider of this password reset policy vulnerability

0
Petrovic
Gold VIP
10 years ago

Badges

  • Product Help: Had 50 answers marked as "solved"!
    TylerMhas earned the badge Product Help: Had 50 answers marked as "solved"!
  • Beta To The Max
    JR565has earned the badge Beta To The Max
  • Posted 50 comments!
    Sean Bolashas earned the badge Posted 50 comments!
  • News: Posted 10 comments!
    FasteasyPhilhas earned the badge News: Posted 10 comments!
  • Posted 50 comments!
    AsadPhas earned the badge Posted 50 comments!
Show all badges

Join the Conversation

Terms & Conditions

© 2004 - Webroot Inc.

We have recently updated our Privacy Policies. We encourage you to read the full terms here.