Welcome to OpenText Cybersecurity Community | OpenText Cybersecurity Community

Categories
Recently active
Help others

Secure Cloud

Make security simple with Secure Cloud

MDR

9 topics

Endpoint Protection

1152 topics

Email Threat Protection

0 topics

DNS Protection

36 topics

Security Awareness Training

57 topics

Email Continuity

0 topics

Email Encryption

0 topics

Information Archiving

0 topics

Threat Intel Hub

Experts share their insights on protecting against cyber threats and staying ahead of evolving security risks.

Security Industry News

36305 topics

Security Expert Perspectives

14 topics

Threat Reports

18 topics

Ransomware Spotlight

86 topics

Phish Tank

31 topics

Vulnerability Vault

342 topics

Data Protection

Carbonite product portfolio

Cloud to Cloud Backup

2 topics

Endpoint Backup

0 topics

Migrate

3 topics

Core Business Communication Archive

0 topics

Server Backup

1 topic

Availability

2 topics

Webroot

Comprehensive security at your fingertips.

Got a Question?

581 topics

Webroot® SecureAnywhere™ - Home

10796 topics

Webroot® SecureAnywhere™ - Internet Security Plus

1601 topics

Webroot® SecureAnywhere™ - Complete

2080 topics

Webroot Mobile

1239 topics

Webroot® Unity API

124 topics

Webroot® Legacy Products (2011 and Prior)

33 topics

Welcome

News, Announcements, Tech Discussions

Community 101

2080 topics

News & Announcements

1225 topics

Malware Manifesto

73 topics

Events & Conferences

289 topics

Tech Talk

4969 topics

Water Cooler

969 topics

Trivia

49 topics

API

All Things API

Unity API Forum

0 topics

Carbonite Replication API

0 topics

Product Releases

Patch Notes & Software Updates

Business Product Releases

234 topics

Consumer Product Releases

262 topics

What's New

48 topics

Integrations

Webroot Integration Discussions

Nable

1 topic

ConnectWise Automate Integration

13 topics

ConnectWise Manage Integration

1 topic

Kaseya VSA Integrations

16 topics

Crypto Corner

A place to discuss all things cryptocurrency

News

9 topics

Wallet Security

3 topics

Common Scams

3 topics

TylerMSr. Security Analyst & Community Manager

Community 101

Beta TestersBETA

Welcome Beta Testers! Thank you for your interest in trying Webroot release candidates! Webroot release candidates are fully tested Webroot builds that Webroot will be releasing to its entire customer population in the near future. This program enables qualified testers an opportunity to preview these builds before they are generally available.If you are not already a Webroot Community member, please see how to set up a free account here.To gain access to these groups, please message an admin (like me) and we will get back to you shortly. Once approved you will gain access to all things beta. Those of you who are already enrolled in Beta testing will find that you can access this area. >>Beta Forums<<

161345

1 hour ago

Jasper_The_RasperModerator

Water Cooler

Good Morning Thread - 2

For the original Good Morning Thread, please see here - Good Morning Thread Good morning/afternoon/evening Webrooters. It is finally cooling down here again now but there are no storms forecast tonight a shame really.

TripleHelixModerator

The old thread (10 years) has run it’s course as you can’t post in there anymore so I started a new one! Thanks @Ssherjj

4699927

12 hours ago

TylerMSr. Security Analyst & Community Manager

Security Industry News

Friday Threat Pulse - June 20thNews

🚨 Snowflake Credentials Used in Ongoing AttacksThis week, Mandiant-backed reports confirmed that stolen Snowflake customer credentials continue being exploited in attacks. These credentials date back to infostealer campaigns from 2020, enabling unauthorized access to dashboards across at least 165 organizations. Snowflake emphasizes no platform compromise occurred—this is credential reuse risk in action.🔗 Source: DarkReading 💥 Multiple Critical Vulnerabilities Patched in GitLabOn June 13, GitLab released key patches—18.0.2, 17.11.4, and 17.10.8—including fixes for high-severity issues like account takeover (CVE‑2025‑4278), CI/CD code injection (CVE‑2025‑5121), and an HTML injection vulnerability. These threats could allow attackers to hijack user sessions or inject malicious pipelines. Admins urged to update immediately.🔗 Sources: GitLab release blog 🧬 Qakbot Architect Indicted & Botnet Disruption HighlightedThis week, U.S. authorities unsealed an indictment against Rustam Ra

254

19 hours ago

ConnorMThreat Research Analyst

Security Industry News

Cyber News Rundown: Swedish vehicle manufacturer suffers data breachNews

Late last week, officials for the Swedish vehicle manufacturer, Scania revealed that their internal systems had been breached by hackers using compromised credentials, which led to a leak of financial and insurance documents. It was confirmed that the initial system breach occurred at the end of May and that the threat actors had published the stolen data to a known hacker forum/marketplace. In the following days, the hackers began contacting Scania employees to use the stolen data as leverage for extortion.Episource breach exposes health records for 5.4 million individualsStaff for the healthcare services provider, Episource, have recently finalized the investigation into a data breach that occurred for over a week, from the end of January to early February. It was revealed that sensitive personal and medical information was exposed for nearly 5.4 million individual patients and may have also led to a breach for some of their service customers, including Sharp Healthcare, who is now

204

20 hours ago

TripleHelixModerator

Security Industry News

Release notes for Microsoft Edge Security Updates June 20, 2025

Version 137.0.3296.93: June 20, 2025Fixed various bugs and performance issues for Stable Channel.Stable channel security updates are listed here. https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnote-stable-channel#version-1370329693-june-20-2025 Make sure to re-add back in the Privacy Protection area after every update. Click on GIF to see full size!

1 day ago

Jasper_The_RasperModerator

Vulnerability Vault

Motors Theme Vulnerability Exploited to Hack WordPress Websites

Threat actors are exploiting a critical-severity vulnerability in Motors theme for WordPress to change arbitrary user passwords. June 20, 2025 By Ionut Arghire Mass exploitation of a critical-severity vulnerability in the Motors theme for WordPress started several weeks after public disclosure, WordPress security firm Defiant warns.The Motors theme is aimed at automotive dealership businesses, including car, motorcycle, boat, and car rental dealers, offering pre-built websites and templates, and support for listing, user and dealer management.The exploited vulnerability, tracked as CVE-2025-4322 (CVSS score of 9.8), is described as a privilege escalation issue via account takeover.The bug exists because the theme fails to properly validate user identities prior to updating account passwords, which allows attackers to change the password of any user account. >>Full Article<<

1 day ago

Jasper_The_RasperModerator

Security Industry News

Prometei Botnet Attacking Linux Servers to Mine Cryptocurrency

June 20, 2025 By Tushar Subhra Dutta Cybersecurity researchers have uncovered a significant resurgence of the Prometei botnet, a sophisticated malware operation targeting Linux servers for cryptocurrency mining and credential theft.This latest campaign, observed since March 2025, demonstrates the evolving nature of cryptomining malware and its persistent threat to enterprise infrastructure worldwide.The Prometei botnet represents a dual-threat malware family encompassing both Linux and Windows variants, designed primarily to hijack computational resources for Monero cryptocurrency mining while simultaneously stealing credentials from compromised systems. >>Full Article<<

1 day ago

Jasper_The_RasperModerator

Security Industry News

BitoPro exchange links Lazarus hackers to $11 million crypto heist

June 20, 2025 By Bill Toulas The Taiwanese cryptocurrency exchange BitoPro claims the North Korean hacking group Lazarus is behind a cyberattack that led to the theft of $11,000,000 worth of cryptocurrency on May 8, 2025.The company has attributed the attack to Lazarus based on the evidence recovered from its internal investigations. It notes that the attack patterns and methodology closely resemble those used in past cyberattacks."The attack methodology bears resemblance to patterns observed in multiple past international major incidents, including illicit transfers from global bank SWIFT systems and asset theft incidents from major international cryptocurrency exchanges," reads the announcement."These attacks are attributed to the North Korean hacking organization Lazarus Group." >>Full Article<<

1 day ago

Jasper_The_RasperModerator

Ransomware Spotlight

Sarcoma Ransomware Unveiled: Anatomy of a Double Extortion Gang

June 20, 2025 By Pierluigi Paganini Cybersecurity Observatory of the Unipegaso’s malware lab published a detailed analysis of the Sarcoma ransomware.It is with great pleasure and honor that I present the first report produced by the Malware Analysis Lab, led by Luigi Martire. The lab was established within the Cybersecurity Observatory of the Unipegaso University, which I have the privilege of directing.Our mission is to analyze the main malware threats affecting systems worldwide, dissect major malicious codes, and share our findings with the international community.This is an open project, so if you are interested, feel free to contact me and contribute to future analyses.Our first report focuses on a very dangerous threat, the Sarcoma Ransomware. >>Full Article<<

1 day ago

hungphamPopular Voice

Endpoint Protection

Cannot finish the installation on a new Mac

A new Macbook Air, M3 CPU. Sequoia 15.5.I downloaded the Endpoint Protection Agent from Management Console. Run installation. Finished with information: Next Steps:The Webroot SecureAnywhere® application will launch automatically after you close this window. You will be guided through a few additional steps to finish activating your product. But Webroot is never coming up. Even I tried to run it manually, no success. Don’t have any warning, for example, that I need to allow an downloading app either. Any idea why? And how to continue the installation steps?Thanks.

150

4 days ago

mborgeaudNew Voice

Webroot® SecureAnywhere™ - Home

Internet restarting

Webroot appears to be causing my internet connection to continually restart or reset at least a dozen times a day. Sometimes it does it once and I have connection back after 20 seconds and other times I have waited for up to 15 minutes before I can use the internet again.The only way I can get continual and uninterrupted internet connection is to disable Webroot entirely. I have changed my DNS setup from “auto” to manual and am using Google’s DNS servers.I have also removed WR and reinstalled - same result.Has anyone else experienced this - I cannot seem to find it in the various threads posted here.

17815

19 days ago

dm661New Member

Endpoint Protection

How to edit keycode on all domain PCs?

Is there a supported method for mass updating the keycode on many PCs on a domain via GPO or otherwise?

300

3 months ago

MajorHavocBronze VIP

Webroot® SecureAnywhere™ - Home

WSA holding onto volumes from DMG or USB when trying to eject.

Anyone else see this issue and hopefully have a work around:When I mount a DMG disk image, or plug in a USB drive to my MacBookPro, I cannot eject it because I am told one or more programs may be using it. This even happens if NO programs are shown as running. I have noted that if I quit WSA (shut it down) I can then eject these drives But WSA scanning the drives it seems leaves some process open that still has an active pin to the drives. I do not want to force eject an HD, or even a DMG as it can damage the image or drive. Suggestions anyone? (FYI: Webroot Customer Service suggested I shut down WSA, eject the drive, and then turn it back on. WORST SOLUTION EVER.)

21818

4 months ago

chrisroseNew Voice

Webroot® Unity API

DNS ProtectionPolicy mapping via UnityAPI

Good day,I am working on enabling DNS Protection and setting some of its options using Unity API. I can successfully enable and disable the module using Unity API and I can set the site policy to one that includes DNS Protection on our endpoints, and the network wide DNS Protection Policy for a Static IP. However, I cannot see a way to set the Agent/Endpoint DNS Protection Policy. It does not even seem this is possible with the current set of commands.Am I missing something? Or is this not possible? Might it be an option that will be enabled in the future?Thanks,Chris

714

7 months ago

Events Calendar

User leaderboard

Show full leaderboard

Join the Conversation

Tweets by OpenTextSec

Consumer Common KB Articles

Business Common KB Articles

Check out this year's Threat Report

Featured Topics

Recent Articles

Upcoming Events

Events Calendar

User leaderboard

Join the Conversation

Sign up

Login to the community

Scanning file for viruses.

This file cannot be downloaded