Welcome to OpenText Cybersecurity Community | OpenText Cybersecurity Community

Categories
Recently active
Help others

Secure Cloud

Make security simple with Secure Cloud

MDR

9 topics

Endpoint Protection

1152 topics

Email Threat Protection

0 topics

DNS Protection

36 topics

Security Awareness Training

57 topics

Email Continuity

0 topics

Email Encryption

0 topics

Information Archiving

0 topics

Threat Intel Hub

Experts share their insights on protecting against cyber threats and staying ahead of evolving security risks.

Security Industry News

36393 topics

Security Expert Perspectives

14 topics

Threat Reports

18 topics

Ransomware Spotlight

94 topics

Phish Tank

31 topics

Vulnerability Vault

381 topics

Data Protection

Carbonite product portfolio

Cloud to Cloud Backup

2 topics

Endpoint Backup

0 topics

Migrate

3 topics

Core Business Communication Archive

0 topics

Server Backup

1 topic

Availability

2 topics

Webroot

Comprehensive security at your fingertips.

Got a Question?

581 topics

Webroot® SecureAnywhere™ - Home

10797 topics

Webroot® SecureAnywhere™ - Internet Security Plus

1601 topics

Webroot® SecureAnywhere™ - Complete

2080 topics

Webroot Mobile

1239 topics

Webroot® Unity API

125 topics

Webroot® Legacy Products (2011 and Prior)

33 topics

Welcome

News, Announcements, Tech Discussions

Community 101

2080 topics

News & Announcements

1226 topics

Malware Manifesto

73 topics

Events & Conferences

289 topics

Tech Talk

4984 topics

Water Cooler

970 topics

Trivia

49 topics

API

All Things API

Unity API Forum

0 topics

Carbonite Replication API

0 topics

Product Releases

Patch Notes & Software Updates

Business Product Releases

235 topics

Consumer Product Releases

262 topics

What's New

48 topics

Integrations

Webroot Integration Discussions

Nable

1 topic

ConnectWise Automate Integration

13 topics

ConnectWise Manage Integration

1 topic

Kaseya VSA Integrations

16 topics

Crypto Corner

A place to discuss all things cryptocurrency

News

9 topics

Wallet Security

3 topics

Common Scams

3 topics

TripleHelixModerator

Water Cooler

Goodnight Thread - 2

The old thread (10 years) has run it’s course as you can’t post in there anymore so I started a new one! Thanks @Ssherjj

5009990

2 hours ago

Jasper_The_RasperModerator

Vulnerability Vault

CISA tags Citrix Bleed 2 as exploited, gives agencies a day to patch

2 hours ago

TripleHelixModerator

Vulnerability Vault

Microsoft security update summary's for July 2025

July 2025 Security UpdatesThis release consists of the following 130 Microsoft CVEs:Tag CVE Base Score CVSS Vector Exploitability FAQs? Workarounds? Mitigations?Service Fabric CVE-2025-21195Windows Kernel CVE-2025-26636Remote Desktop Client CVE-2025-33054Windows Visual Basic Scripting CVE-2025-47159Microsoft Intune CVE-2025-47178Virtual Hard Disk (VHDX) CVE-2025-47971Microsoft Input Method Editor (IME) CVE-2025-47972Virtual Hard Disk (VHDX) CVE-2025-47973Windows SSDP Service CVE-2025-47975Windows SSDP Service CVE-2025-47976Windows Kerberos CVE-2025-47978Windows Imaging Component CVE-2025-47980Windows SPNEGO Extended Negotiation CVE-2025-47981Windows Storage VSP Driver CVE-2025-47982Windows GDI CVE-2025-47984Windows Event Tracing CVE-2025-47985Universal Print Management Service CVE-2025-47986Windows Cred SSProvider Protocol CVE-2025-47987Azure Monitor Agent CVE-2025-47988Microsoft Input Method Editor (IME) CVE-2025-47991Microsoft PC Manager CVE-2025-47993Microsoft Office CVE-2025-47994W

334

2 hours ago

ConnorMThreat Research Analyst

Security Industry News

CyberNews Rundown: SafePay ransomware targets Ingram MicroNews

Over the weekend, staff at the IT service provider Ingram Micro were scrambling to take several systems offline to slow the spread of a ransomware attack that was targeting their internal network. In the following days, the investigation revealed that the SafePay ransomware group was responsible for this incident, though the threat actors behind this group haven’t confirmed their involvement. It is still unclear if any employee or customer data was extracted during this attack, but staff have fortunately been able to restore some affected systems to normal operation.Check our our rundown of this attack HERECanadian energy provider impacted by ransomware attackFor more than 2 months, officials for Nova Scotia Power, an energy provider in Canada has been unable to correctly determine the amount of power being used by customers due to a ransomware attack that is affecting communications. After the initial attack in March, staff have been investigating this incident and are working to rest

204

6 hours ago

Jasper_The_RasperModerator

Vulnerability Vault

Exploits for pre-auth Fortinet FortiWeb RCE flaw released, patch now

July 11, 2025 By Lawrence Abrams Proof-of-concept exploits have been released for a critical SQLi vulnerability in Fortinet FortiWeb that can be used to achieve pre-authenticated remote code execution on vulnerable servers.FortiWeb is a web application firewall (WAF), which is used to protect web applications from malicious HTTP traffic and threats.The FortiWeb vulnerability has a 9.8/10 severity score and is tracked as CVE-2025-25257. Fortinet fixed it last week in FortiWeb 7.6.4, 7.4.8, 7.2.11, and 7.0.11 and later versions."An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] in FortiWeb may allow an unauthenticated attacker to execute unauthorized SQL code or commands via crafted HTTP or HTTPs requests," reads Fortinet's advisory.The flaw was discovered by Kentaro Kawane from GMO Cybersecurity, who also disclosed a static hardcoded password vulnerability in Cisco ISE last month. >>Full Article<<

7 hours ago

Jasper_The_RasperModerator

Security Industry News

Rowhammer Attack Demonstrated Against Nvidia GPU

July 11, 2025 By Eduard Kovacs A team of researchers from the University of Toronto has demonstrated that Rohammer attacks against GPUs are possible and practical.The attack method, dubbed GPUHammer, has been proven to work against a GPU from Nvidia, with the researchers using it to degrade the accuracy of machine learning models.The Rowhammer attack method has been known for more than a decade. It involves repeatedly accessing — or hammering — a DRAM memory row, which can cause electrical interference that leads to bit flips in adjacent regions.Researchers have demonstrated over the years that Rowhammer attacks can lead to privilege escalation, unauthorized access to data, data corruption, and breaking memory isolation (in virtualized environments). However, until now, Rowhammer attacks have focused on CPUs and CPU-based memories. The University of Toronto researchers wanted to see if such attacks can be conducted against GPUs, particularly in light of their increasing use for artific

7 hours ago

Jasper_The_RasperModerator

Vulnerability Vault

Critical Wing FTP Server vulnerability exploited in the wild (CVE-2025-47812)

July 11, 2025 By Zeljka Zorz Threat actors are actively exploiting a recently fixed remote code execution vulnerability (CVE-2025-47812) in Wing FTP Server, security researchers have warned.Wing FTP Server and CVE-2025-47812Wing FTP Server is a commercial file transfer server solution used by businesses, MSPs and hosting providers.The software can be installed on 64-bit operating systems: Windows, Windows Server, Linux, and macOS. Administration is done via a web-based interface. Users likewise upload/download files securely via browser.CVE-2025-47812 is caused by Wing FTP Server’s user and admin web interfaces mishandle “\0” (i.e., “null”) bytes, which allows attackers to inject arbitrary Lua code into user session files.“[The vulnerability] can be used to execute arbitrary system commands with the privileges of the FTP service (root or SYSTEM by default). This is thus a remote code execution vulnerability that guarantees a total server compromise. This is also exploitable via anonymo

8 hours ago

Jasper_The_RasperModerator

Security Industry News

WordPress Gravity Forms developer hacked to push backdoored plugins

July 11, 2025 By Bill Toulas The popular WordPress plugin Gravity Forms has been compromised in what seems a supply-chain attack where manual installers from the official website were infected with a backdoor.Gravity Forms is a premium plugin for creating contact, payment, and other online forms. Based on statistic data from the vendor, the product is isntalled on around one million websites, some belonging to well-known organizations like Airbnb, Nike, ESPN, Unicef, Google, and Yale.Remote code execution on the serverWordPress security firm PatchStack says it received a report earlier today about suspicious requests generated by plugins downloaded from the Gravity Forms website.After examining the plugin, PatchStack confirmed that it received a malicious file (gravityforms/common.php) downloaded from the vendor's website. Closer examination revealed that the file initiated a POST request to a suspicious domain at “gravityapi.org/sites.”Upon further analysis, the researchers found that

8 hours ago

ProTruckDriverModerator

Tech Talk

How to Fix Wi-Fi Dropping in MacOS Sequoia & Tahoe

by: Paul Horowitz Some Mac users who are running the latest versions of MacOS Sequoia and/or MacOS Tahoe beta have discovered an annoying issue where wi-fi spontaneously drops and the Macs internet connection is no longer available. The wi-fi dropping problem seems completely random, and there is rarely a cause or specific reason for the wireless internet connection to disconnect, but it seems to do so anyway for Mac users who are impacted by this. Sure you can reconnect to the wi-fi router easily through the menubar, but chances are high that anywhere from minutes to hours to days away, the wi-fi connection will drop again. >> Full Article <<

8 hours ago

TripleHelixModerator

Security Industry News

Release notes for Microsoft Edge Security Updates July 10, 2025

Version 138.0.3351.83: July 10, 2025Fixed various bugs and performance issues for Stable Channel.Improved reliabilityFixed a browser crash that occurred when the BrowsingDataLifetime policy was enabled. https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnote-stable-channel#version-1380335183-july-10-2025 Make sure to re-add back in the Privacy Protection area after every update. Click on GIF to see full size!

12 hours ago

jonshahNew Member

Tech Talk

New to Cybersecurity – Where Should I Begin?

Hi everyone! 👋I’m jonshah, a beginner in the tech world, and I’ve recently become really interested in cybersecurity. The idea of protecting data, understanding threats, and learning how systems stay secure really fascinates me.Right now, I’m just starting to explore the basics — like learning about firewalls, strong passwords, phishing, and ethical hacking. I’d love to hear from others in this community: What’s the best way to start learning cybersecurity as a total beginner? Are there any free or beginner-friendly platforms/courses you recommend? What kind of hands-on projects or practice labs helped you the most? I’m excited to learn from you all and grow in this field. Thanks in advance for your support!jonshah

271

2 days ago

EzraMNew Member

Webroot® Unity API

How to get the entities of all sites that needs attention

In the Management Console, the user can list out all the entities that needs attention by using the filters. I would also like to get all of those entities via the API. I have found this endpoint:/service/api/status/gsm/{keyCode}With the field BasicInfo having the subfield of AttentionRequired: bool This is great, but somehow the data from the API does not match the entities in the web console (Some missing, there’s some entities from the API not present in the web console, etc.) Also I can’t get the entityId, and the marname, these fields are from when I inspected the network request from the web console, the data is in JSON form and it seems to be perfect for what we need.

411

4 days ago

hungphamPopular Voice

Endpoint Protection

Cannot finish the installation on a new Mac

A new Macbook Air, M3 CPU. Sequoia 15.5.I downloaded the Endpoint Protection Agent from Management Console. Run installation. Finished with information: Next Steps:The Webroot SecureAnywhere® application will launch automatically after you close this window. You will be guided through a few additional steps to finish activating your product. But Webroot is never coming up. Even I tried to run it manually, no success. Don’t have any warning, for example, that I need to allow an downloading app either. Any idea why? And how to continue the installation steps?Thanks.

482

17 days ago

mborgeaudNew Voice

Webroot® SecureAnywhere™ - Home

Internet restarting

Webroot appears to be causing my internet connection to continually restart or reset at least a dozen times a day. Sometimes it does it once and I have connection back after 20 seconds and other times I have waited for up to 15 minutes before I can use the internet again.The only way I can get continual and uninterrupted internet connection is to disable Webroot entirely. I have changed my DNS setup from “auto” to manual and am using Google’s DNS servers.I have also removed WR and reinstalled - same result.Has anyone else experienced this - I cannot seem to find it in the various threads posted here.

21415

1 month ago

dm661New Member

Endpoint Protection

How to edit keycode on all domain PCs?

Is there a supported method for mass updating the keycode on many PCs on a domain via GPO or otherwise?

300

4 months ago

MajorHavocBronze VIP

Webroot® SecureAnywhere™ - Home

WSA holding onto volumes from DMG or USB when trying to eject.

Anyone else see this issue and hopefully have a work around:When I mount a DMG disk image, or plug in a USB drive to my MacBookPro, I cannot eject it because I am told one or more programs may be using it. This even happens if NO programs are shown as running. I have noted that if I quit WSA (shut it down) I can then eject these drives But WSA scanning the drives it seems leaves some process open that still has an active pin to the drives. I do not want to force eject an HD, or even a DMG as it can damage the image or drive. Suggestions anyone? (FYI: Webroot Customer Service suggested I shut down WSA, eject the drive, and then turn it back on. WORST SOLUTION EVER.)

21918

5 months ago

chrisroseNew Voice

Webroot® Unity API

DNS ProtectionPolicy mapping via UnityAPI

Good day,I am working on enabling DNS Protection and setting some of its options using Unity API. I can successfully enable and disable the module using Unity API and I can set the site policy to one that includes DNS Protection on our endpoints, and the network wide DNS Protection Policy for a Static IP. However, I cannot see a way to set the Agent/Endpoint DNS Protection Policy. It does not even seem this is possible with the current set of commands.Am I missing something? Or is this not possible? Might it be an option that will be enabled in the future?Thanks,Chris

734

7 months ago

Events Calendar

User leaderboard

Show full leaderboard

Join the Conversation

Tweets by OpenTextSec

Consumer Common KB Articles

Business Common KB Articles

Check out this year's Threat Report

Featured Topics

Recent Articles

Upcoming Events

Events Calendar

User leaderboard

Join the Conversation

Sign up

Login to the community

Scanning file for viruses.

This file cannot be downloaded