Welcome to OpenText Cybersecurity Community | OpenText Cybersecurity Community

Categories
Recently active
Help others

Secure Cloud

Make security simple with Secure Cloud

MDR

9 topics

Endpoint Protection

1152 topics

Email Threat Protection

0 topics

DNS Protection

36 topics

Security Awareness Training

57 topics

Email Continuity

0 topics

Email Encryption

0 topics

Information Archiving

0 topics

Threat Intel Hub

Experts share their insights on protecting against cyber threats and staying ahead of evolving security risks.

Security Industry News

36297 topics

Security Expert Perspectives

14 topics

Threat Reports

18 topics

Ransomware Spotlight

85 topics

Phish Tank

31 topics

Vulnerability Vault

341 topics

Data Protection

Carbonite product portfolio

Cloud to Cloud Backup

2 topics

Endpoint Backup

0 topics

Migrate

3 topics

Core Business Communication Archive

0 topics

Server Backup

1 topic

Availability

2 topics

Webroot

Comprehensive security at your fingertips.

Got a Question?

581 topics

Webroot® SecureAnywhere™ - Home

10796 topics

Webroot® SecureAnywhere™ - Internet Security Plus

1601 topics

Webroot® SecureAnywhere™ - Complete

2080 topics

Webroot Mobile

1239 topics

Webroot® Unity API

124 topics

Webroot® Legacy Products (2011 and Prior)

33 topics

Welcome

News, Announcements, Tech Discussions

Community 101

2080 topics

News & Announcements

1225 topics

Malware Manifesto

73 topics

Events & Conferences

289 topics

Tech Talk

4969 topics

Water Cooler

969 topics

Trivia

49 topics

API

All Things API

Unity API Forum

0 topics

Carbonite Replication API

0 topics

Product Releases

Patch Notes & Software Updates

Business Product Releases

234 topics

Consumer Product Releases

262 topics

What's New

48 topics

Integrations

Webroot Integration Discussions

Nable

1 topic

ConnectWise Automate Integration

13 topics

ConnectWise Manage Integration

1 topic

Kaseya VSA Integrations

16 topics

Crypto Corner

A place to discuss all things cryptocurrency

News

9 topics

Wallet Security

3 topics

Common Scams

3 topics

Jasper_The_RasperModerator

Water Cooler

Good Morning Thread - 2

For the original Good Morning Thread, please see here - Good Morning Thread Good morning/afternoon/evening Webrooters. It is finally cooling down here again now but there are no storms forecast tonight a shame really.

98882116

2 hours ago

TripleHelixModerator

Water Cooler

Goodnight Thread - 2

The old thread (10 years) has run it’s course as you can’t post in there anymore so I started a new one! Thanks @Ssherjj

4681924

12 hours ago

Jasper_The_RasperModerator

Security Industry News

Russian Hackers Bypass Gmail MFA With App-Specific Password Ruse

Russian hackers posed as US State Department staff and convinced targets to generate and give up Google app-specific passwords. June 19, 2025 By Ryan Naraine A professional hacking team linked to the Russian government has been caught wielding a new, low-and-slow phishing trick that beats two-factor authentication by exploiting Google’s little-known “app-specific password” feature. According to documentation from Google’s Threat Intelligence Group, the operation ran from April into early June and impersonated US State Department officials in email threads with flawless English and copied to four bogus @state.gov colleagues.Google tracks the threat actor as UNC6293 and believes it is linked to APT29, the Russian intelligence unit blamed for the 2016 Democratic National Committee breach. Investigators estimate the group spent weeks cultivating each target before pushing detailed instructions on the ASP (application-specific password) feature. >>Full Article<<

17 hours ago

Jasper_The_RasperModerator

Ransomware Spotlight

Qilin Ransomware Emerges as World’s Top Threat, Demands $50 Million Ransom

June 19, 2025 By Kaaviya Qilin ransomware has rapidly ascended to become the world’s most prevalent ransomware threat, accumulating over $50 million in ransom payments throughout 2024 alone. Originally developed as ‘Agent’ in 2022 and later recorded in the Rust programming language, this sophisticated malware has evolved into a formidable weapon targeting critical infrastructure across more than 25 countries.Qilin Ransomware EmergenceQilin gained significant traction by late 2023 through targeted attacks on VMware ESXi infrastructure, establishing itself as a dominant force in the cybercriminal ecosystem. Named after the mythical Chinese creature symbolizing power and prosperity, the ransomware has been linked to threat actors, including Scattered Spiders and entities associated with North Korea. >>Full Article<<

17 hours ago

Jasper_The_RasperModerator

Security Industry News

Microsoft unveils new security defaults for Windows 365 Cloud PCs

June 19, 2025 By Sergiu Gatlan Microsoft has announced new Windows 365 security defaults starting in the second half of 2025 and affecting newly provisioned and reprovisioned Cloud PCs.The company said these changes include disabling the clipboard, drive, USB, and printer redirections by default to block users from copying files between Cloud PCs and physical devices through clipboard functions to reduce risks of data theft and block malware attacks.However, while USB redirections will be disabled by default, they only target low-level device access, which means that USB mice, keyboards, and webcams will not be affected since they're managed through high-level redirection. These new security defaults will also be applied to newly created host pools for Azure Virtual Desktop. >>Full Article<<

17 hours ago

Jasper_The_RasperModerator

Security Industry News

Israel-tied Predatory Sparrow hackers are waging cyberwar on Iran’s financial system

The hacker group has destroyed more than $90 million held at an Iranian crypto exchange.Andy Greenberg, WIRED.com – 19 Jun 2025 The Israel-linked hacker group known as Predatory Sparrow has carried out some of the most disruptive and destructive cyberattacks in history, twice disabling thousands of gas station payment systems across Iran and once even setting a steel mill in the country on fire. Now, in the midst of a new war unfolding between the two countries, they appear to be bent on burning Iran's financial system.Predatory Sparrow, which often goes by its Farsi name, Gonjeshke Darande, in an effort to appear as a homegrown hacktivist organization, announced in a post on on its X account Wednesday that it had targeted the Iranian crypto exchange Nobitex, accusing the exchange of enabling sanctions violations and terrorist financing on behalf of the Iranian regime. According to cryptocurrency tracing firm Elliptic, the hackers destroyed more than $90 million in Nobitex holdings, a

101

17 hours ago

Jasper_The_RasperModerator

Ransomware Spotlight

Krispy Kreme Confirms Data Breach After Ransomware Attack

Krispy Kreme is sending notifications to thousands of people impacted by the data breach that came to light at the end of 2024. June 19, 2025 By Eduard Kovacs Donut and coffee retail chain Krispy Kreme has confirmed that the ransomware attack that came to light in late 2024 resulted in a data breach.Krispy Kreme revealed being hit by a cyberattack on December 11, saying that the incident had led to operational disruptions. Roughly one week later, the Play ransomware group took credit for the attack, claiming to have stolen personal information, client documents, financial information, as well as other files related to accounting, contracts, payroll, and budget. The cybercriminals claimed to have stolen 184 Gb worth of data, which they made public on their Tor-based leak website in December 2024, after Krispy Kreme likely refused to pay a ransom. Krispy Kreme is now sending out data breach notification letters to individuals whose information was stolen as a result of the attack. >

18 hours ago

Jasper_The_RasperModerator

Security Industry News

New Android Malware Surge Hits Devices via Overlays, Virtualization Fraud and NFC Theft

June 19, 2025 By Ravie Lakshmanan Cybersecurity researchers have exposed the inner workings of an Android malware called AntiDot that has compromised over 3,775 devices as part of 273 unique campaigns."Operated by the financially motivated threat actor LARVA-398, AntiDot is actively sold as a Malware-as-a-Service (MaaS) on underground forums and has been linked to a wide range of mobile campaigns," PRODAFT said in a report shared with The Hacker News.AntiDot is advertised as a "three-in-one" solution with capabilities to record the device screen by abusing Android's accessibility services, intercept SMS messages, and extract sensitive data from third-party applications.The Android botnet is suspected to be delivered via malicious advertising networks or through highly tailored phishing campaigns based on activity that indicates selective targeting of victims based on language and geographic location. >>Full Article<<

18 hours ago

Jasper_The_RasperModerator

Security Industry News

Telecom giant Viasat breached by China's Salt Typhoon hackers

June 19, 2025 By Sergiu Gatlan Satellite communications company Viasat is the latest victim of China's Salt Typhoon cyber-espionage group, which has previously hacked into the networks of multiple other telecom providers in the United States and worldwide.Viasat provides satellite broadband services to governments worldwide and aviation, military, energy, maritime, and enterprise customers. Last month, the telecom giant told shareholders that it had approximately 189,000 broadband subscribers in the United States.The company discovered the Salt Typhoon breach earlier this year and has been working with federal authorities to investigate the attack, as Bloomberg first reported."Viasat and its independent third-party cybersecurity partner investigated a report of unauthorized access through a compromised device. Upon completing a thorough investigation, no evidence was found to suggest any impact to customers," Viasat told BleepingComputer. >>Full Article<<

18 hours ago

Jasper_The_RasperModerator

Security Industry News

North Korean hackers deepfake execs in Zoom call to spread Mac malware

June 18, 2025 By Bill Toulas The North Korean BlueNoroff hacking group is deepfaking company executives during Zoom calls to trick employees into installing custom malware on their macOS devices.BlueNoroff (aka Sapphire Sleet or TA444) is a North Korean advanced persistent threat (APT) group known for conducting cryptocurrency theft attacks using Windows and Mac malware.Huntress researchers uncovered a new BlueNoroff attack on June 11, 2025, when they were called to investigate a potential intrusion on a partner's network.Like previous attacks, the primary goal was most likely cryptocurrency theft, which aligns with other recent reports about the threat actors from SentinelLabs, Microsoft, Jamf, and Kaspersky. >>Full Article<<

1 day ago

hungphamPopular Voice

Endpoint Protection

Cannot finish the installation on a new Mac

A new Macbook Air, M3 CPU. Sequoia 15.5.I downloaded the Endpoint Protection Agent from Management Console. Run installation. Finished with information: Next Steps:The Webroot SecureAnywhere® application will launch automatically after you close this window. You will be guided through a few additional steps to finish activating your product. But Webroot is never coming up. Even I tried to run it manually, no success. Don’t have any warning, for example, that I need to allow an downloading app either. Any idea why? And how to continue the installation steps?Thanks.

140

2 days ago

mborgeaudNew Voice

Webroot® SecureAnywhere™ - Home

Internet restarting

Webroot appears to be causing my internet connection to continually restart or reset at least a dozen times a day. Sometimes it does it once and I have connection back after 20 seconds and other times I have waited for up to 15 minutes before I can use the internet again.The only way I can get continual and uninterrupted internet connection is to disable Webroot entirely. I have changed my DNS setup from “auto” to manual and am using Google’s DNS servers.I have also removed WR and reinstalled - same result.Has anyone else experienced this - I cannot seem to find it in the various threads posted here.

17615

17 days ago

dm661New Member

Endpoint Protection

How to edit keycode on all domain PCs?

Is there a supported method for mass updating the keycode on many PCs on a domain via GPO or otherwise?

300

3 months ago

MajorHavocBronze VIP

Webroot® SecureAnywhere™ - Home

WSA holding onto volumes from DMG or USB when trying to eject.

Anyone else see this issue and hopefully have a work around:When I mount a DMG disk image, or plug in a USB drive to my MacBookPro, I cannot eject it because I am told one or more programs may be using it. This even happens if NO programs are shown as running. I have noted that if I quit WSA (shut it down) I can then eject these drives But WSA scanning the drives it seems leaves some process open that still has an active pin to the drives. I do not want to force eject an HD, or even a DMG as it can damage the image or drive. Suggestions anyone? (FYI: Webroot Customer Service suggested I shut down WSA, eject the drive, and then turn it back on. WORST SOLUTION EVER.)

21818

4 months ago

chrisroseNew Voice

Webroot® Unity API

DNS ProtectionPolicy mapping via UnityAPI

Good day,I am working on enabling DNS Protection and setting some of its options using Unity API. I can successfully enable and disable the module using Unity API and I can set the site policy to one that includes DNS Protection on our endpoints, and the network wide DNS Protection Policy for a Static IP. However, I cannot see a way to set the Agent/Endpoint DNS Protection Policy. It does not even seem this is possible with the current set of commands.Am I missing something? Or is this not possible? Might it be an option that will be enabled in the future?Thanks,Chris

714

7 months ago

Events Calendar

User leaderboard

Show full leaderboard

Join the Conversation

Tweets by OpenTextSec

Consumer Common KB Articles

Business Common KB Articles

Check out this year's Threat Report

Featured Topics

Recent Articles

Upcoming Events

Events Calendar

User leaderboard

Join the Conversation

Sign up

Login to the community

Scanning file for viruses.

This file cannot be downloaded