Welcome to OpenText Cybersecurity Community | OpenText Cybersecurity Community

Categories
Recently active
Help others

Secure Cloud

Make security simple with Secure Cloud

MDR

9 topics

Endpoint Protection

1150 topics

Email Threat Protection

0 topics

DNS Protection

36 topics

Security Awareness Training

57 topics

Email Continuity

0 topics

Email Encryption

0 topics

Information Archiving

0 topics

Threat Intel Hub

Experts share their insights on protecting against cyber threats and staying ahead of evolving security risks.

Security Industry News

36041 topics

Security Expert Perspectives

14 topics

Threat Reports

16 topics

Ransomware Spotlight

58 topics

Phish Tank

28 topics

Vulnerability Vault

235 topics

Data Protection

Carbonite product portfolio

Cloud to Cloud Backup

1 topic

Endpoint Backup

0 topics

Migrate

3 topics

Core Business Communication Archive

0 topics

Server Backup

1 topic

Availability

2 topics

Webroot

Comprehensive security at your fingertips.

Got a Question?

577 topics

Webroot® SecureAnywhere™ - Home

10792 topics

Webroot® SecureAnywhere™ - Internet Security Plus

1598 topics

Webroot® SecureAnywhere™ - Complete

2078 topics

Webroot Mobile

1237 topics

Webroot® Unity API

124 topics

Webroot® Legacy Products (2011 and Prior)

33 topics

Welcome

News, Announcements, Tech Discussions

Community 101

2080 topics

News & Announcements

1225 topics

Malware Manifesto

73 topics

Events & Conferences

289 topics

Tech Talk

4944 topics

Water Cooler

965 topics

Trivia

49 topics

API

All Things API

Unity API Forum

0 topics

Carbonite Replication API

0 topics

Product Releases

Patch Notes & Software Updates

Business Product Releases

234 topics

Consumer Product Releases

260 topics

What's New

46 topics

Integrations

Webroot Integration Discussions

Nable

1 topic

ConnectWise Automate Integration

13 topics

ConnectWise Manage Integration

1 topic

Kaseya VSA Integrations

16 topics

Crypto Corner

A place to discuss all things cryptocurrency

News

9 topics

Wallet Security

3 topics

Common Scams

3 topics

Jasper_The_RasperModerator

Security Industry News

Microsoft mystery folder fix might need a fix of its own

This one weird trick can stop Windows updates dead in their tracks April 24, 2025 By Richard Speed Turns out Microsoft's latest patch job might need a patch of its own, again. This time, the culprit is a mysterious inetpub folder quietly deployed by Redmond, now hijacked by a security researcher to break Windows updates.The folder, typically c:\inetpub, reappeared on Windows systems in April as part of Microsoft's mitigation for CVE-2025-21204, an exploitable elevation-of-privileges flaw within Windows Process Activation. Rather than patching code directly, Redmond simply pre-created the folder to block a symlink attack path. For many administrators, the reappearance of this old IIS haunt raised eyebrows, especially since the mitigation did little beyond ensuring the folder existed. >>Full Article<<

2 minutes ago

Jasper_The_RasperModerator

Security Industry News

Hackers claim to hack TikTok, 927,000 passwords might hit the internet

April 24, 2025 By Paulina Okunytė A hacking crew claims it warned TikTok, got ghosted, and is now unleashing nearly a million users' passwords.A group calling itself R00TK1T ISC CYBER TEAM just lobbed a grenade, claiming to have snatched 972,000 TikTok users' passwords. As the attackers claimed, no one at TikTok answered their DMs, so they’re making good on their threat to leak a massive sample set.“We warned Bytedance and TikTok, but their silence speaks volumes. Despite our clear message, they have ignored the cries of users locked out, suspended, or erased from the platform,” the group posted in their communication channel.“Today we’re dropping a sample of 927K TikTok users into the wild,” they add. If the leak proves to be legit, it could mean mass account takeovers, phishing sprees, or even identity theft at scale. >>Full Article<<

6 minutes ago

Jasper_The_RasperModerator

Security Industry News

Lazarus hackers breach six companies in watering hole attacks

April 24, 2025 By Bill Toulas In a recent espionage campaign, the infamous North Korean threat group Lazarus targeted multiple organizations in the software, IT, finance, and telecommunications sectors in South Korea.The threat actor combined a watering hole attack strategy with an exploit for a vulnerability in a file transfer client that is required in South Korea to complete certain financial and administrative tasks.Researchers at Kasperky named the campaign 'Operation SyncHole' and say that the activity compromised at least half a dozen organizations between November 2024 and February 2025.“We identified at least six software, IT, financial, semiconductor manufacturing and telecommunication organizations in South Korea that fell victim to “Operation SyncHole,” Kasperky notes in a report.Operation SyncHole activity timelineSource: Kaspersky“However, we are confident that there are many more affected organizations across a broader range of industries, given the popularity of the sof

19 minutes ago

Jasper_The_RasperModerator

Security Industry News

North Korean Hackers Use Russian IP Infrastructure

Void Dokkaebi Campaigns Using Russia for Cryptocurrency Theft April 24, 2025 By Prajeet Nair The Korea–Russia Friendship Bridge spanning the Tumen river in a photo dated Aug. 10, 2017. (Image: Stefan Bruder / Shutterstock)North Korean hackers look north toward Russia for the internet infrastructure behind the many online scams that Pyongyang has built to funnel stolen cash into the rouge nation.Trend Micro in a Wednesday report traced cybercrime activities aligned with North Korea to IP addresses assigned to an organization in the Russian city of Khabarovsk, which has cultivated ties with North Korea since the demise of the Soviet Union. It also traced activity to Khasan, a hamlet just across the Russian border from the Hermit Kingdom that's the site of the "Korea–Russia Friendship Bridge." A major Russian telecommunications firm laid a fiber-optic cable across the bridge in 2017. >>Full Article<<

27 minutes ago

Jasper_The_RasperModerator

Vulnerability Vault

Cisco Confirms Some Products Impacted by Critical Erlang/OTP Flaw

Cisco is investigating the impact of the Erlang/OTP remote code execution vulnerability CVE-2025-32433 on its products. April 24, 2025 By Eduard Kovacs Cisco is investigating the impact of a recently disclosed Erlang/OTP vulnerability and it has confirmed that several of its products are affected by the critical remote code execution flaw. It came to light last week that a critical vulnerability allowing device takeover was discovered in the SSH implementation of Erlang/OTP, a collection of libraries, middleware and other tools designed for creating soft real-time systems that require high availability, such as banking, e-commerce, and communications applications.The flaw, discovered by a team of researchers from Ruhr University Bochum in Germany, is tracked as CVE-2025-32433, and it has been described as an SSH protocol message handling issue that can allow an unauthenticated attacker to gain access to affected systems and execute arbitrary code. >>Full Article<<

44 minutes ago

Jasper_The_RasperModerator

Security Industry News

Crooks exploit the death of Pope Francis

April 24, 2025 By Pierluigi Paganini Crooks exploit the death of Pope Francis, using public curiosity and emotion to launch scams and spread malware, an old tactic during global events.After Pope Francis’ death, cybercriminals launched scams and malware attacks, exploiting public curiosity, grief, and confusion.Cybercriminals are ready to exploit any event of global interest, it has already happened in the past during events like Queen Elizabeth II’s death or the COVID-19 pandemic. Check Point Research calls this trend “cyber threat opportunism,” noting similar spikes during COVID-19, when Google saw 18M+ daily virus-related scam emails.These emotionally charged moments are fertile ground for digital exploitation. The emotional vulnerability of users makes them prime targets for attackers seeking clicks, personal data, or financial information. >>Full Article<<

54 minutes ago

Jasper_The_RasperModerator

Security Industry News

Frederick Health data breach impacts nearly 1 million patients

April 24, 2025 By Sergiu Gatlan A ransomware attack in January at Frederick Health Medical Group, a major healthcare provider in Maryland, has led to a data breach affecting nearly one million patients.With almost 4,000 employees and over 25 locations, Frederick Health is one of Frederick County's largest employers.As the health system revealed in a late March notification to patients, the ransomware attack was detected on January 27, which prompted Frederick Health to notify law enforcement and hire a third-party forensic firm to investigate the incident's impact."On January 27, 2025, we experienced a ransomware event affecting our IT systems," the health system said. "The investigation determined that an unauthorized person gained access to our network and, on January 27, 2025, copied certain files from a file share server.""We are mailing letters to individuals whose information may have been involved and for whom we have sufficient contact information," it added. >>Full Arti

1 hour ago

Jasper_The_RasperModerator

Water Cooler

Good Morning Thread - 2

For the original Good Morning Thread, please see here - Good Morning Thread Good morning/afternoon/evening Webrooters. It is finally cooling down here again now but there are no storms forecast tonight a shame really.

87491886

1 hour ago

Jasper_The_RasperModerator

Security Industry News

Blue Shield of California leaked health data of 4.7 million members to Google

April 23, 2025 By Bill Toulas Blue Shield of California disclosed it suffered a data breach after exposing protected health information of 4.7 million members to Google's analytics and advertisement platforms.The nonprofit health plan, which serves nearly 6 million members across California, published a data breach notification on its website stating that member data was exposed between April 2021 and January 2024.Today, the United States Department of Health and Human Services breach portal was updated to state that the leak exposed 4.7 million members' protected health data.Source: ocrportal.hhs.govAccording to the notice, the exposure was caused by a misconfiguration of Google Analytics on certain Blue Shield sites. This resulted in the sensitive data potentially being shared with Google advertising platforms and advertisers. >>Full Article<<

2 hours ago

TripleHelixModerator

Water Cooler

Goodnight Thread - 2

The old thread (10 years) has run it’s course as you can’t post in there anymore so I started a new one! Thanks @Ssherjj

3875766

18 hours ago

dm661New Member

Endpoint Protection

How to edit keycode on all domain PCs?

Is there a supported method for mass updating the keycode on many PCs on a domain via GPO or otherwise?

270

1 month ago

MajorHavocBronze VIP

Webroot® SecureAnywhere™ - Home

WSA holding onto volumes from DMG or USB when trying to eject.

Anyone else see this issue and hopefully have a work around:When I mount a DMG disk image, or plug in a USB drive to my MacBookPro, I cannot eject it because I am told one or more programs may be using it. This even happens if NO programs are shown as running. I have noted that if I quit WSA (shut it down) I can then eject these drives But WSA scanning the drives it seems leaves some process open that still has an active pin to the drives. I do not want to force eject an HD, or even a DMG as it can damage the image or drive. Suggestions anyone? (FYI: Webroot Customer Service suggested I shut down WSA, eject the drive, and then turn it back on. WORST SOLUTION EVER.)

21718

3 months ago

chrisroseNew Voice

Webroot® Unity API

DNS ProtectionPolicy mapping via UnityAPI

Good day,I am working on enabling DNS Protection and setting some of its options using Unity API. I can successfully enable and disable the module using Unity API and I can set the site policy to one that includes DNS Protection on our endpoints, and the network wide DNS Protection Policy for a Static IP. However, I cannot see a way to set the Agent/Endpoint DNS Protection Policy. It does not even seem this is possible with the current set of commands.Am I missing something? Or is this not possible? Might it be an option that will be enabled in the future?Thanks,Chris

704

5 months ago

Events Calendar

User leaderboard

Show full leaderboard

Join the Conversation

Tweets by OpenTextSec

Consumer Common KB Articles

Business Common KB Articles

Nastiest Malware 2024

Featured Topics

Recent Articles

Upcoming Events

Events Calendar

User leaderboard

Join the Conversation

Sign up

Login to the community

Scanning file for viruses.

This file cannot be downloaded