Welcome to OpenText Cybersecurity Community | OpenText Cybersecurity Community

Categories
Recently active
Help others

Secure Cloud

Make security simple with Secure Cloud

MDR

9 topics

Endpoint Protection

1150 topics

Email Threat Protection

0 topics

DNS Protection

36 topics

Security Awareness Training

57 topics

Email Continuity

0 topics

Email Encryption

0 topics

Information Archiving

0 topics

Threat Intel Hub

Experts share their insights on protecting against cyber threats and staying ahead of evolving security risks.

Security Industry News

36037 topics

Security Expert Perspectives

14 topics

Threat Reports

16 topics

Ransomware Spotlight

58 topics

Phish Tank

28 topics

Vulnerability Vault

235 topics

Data Protection

Carbonite product portfolio

Cloud to Cloud Backup

1 topic

Endpoint Backup

0 topics

Migrate

3 topics

Core Business Communication Archive

0 topics

Server Backup

1 topic

Availability

2 topics

Webroot

Comprehensive security at your fingertips.

Got a Question?

577 topics

Webroot® SecureAnywhere™ - Home

10792 topics

Webroot® SecureAnywhere™ - Internet Security Plus

1598 topics

Webroot® SecureAnywhere™ - Complete

2078 topics

Webroot Mobile

1237 topics

Webroot® Unity API

124 topics

Webroot® Legacy Products (2011 and Prior)

33 topics

Welcome

News, Announcements, Tech Discussions

Community 101

2080 topics

News & Announcements

1225 topics

Malware Manifesto

73 topics

Events & Conferences

289 topics

Tech Talk

4944 topics

Water Cooler

965 topics

Trivia

49 topics

API

All Things API

Unity API Forum

0 topics

Carbonite Replication API

0 topics

Product Releases

Patch Notes & Software Updates

Business Product Releases

234 topics

Consumer Product Releases

260 topics

What's New

46 topics

Integrations

Webroot Integration Discussions

Nable

1 topic

ConnectWise Automate Integration

13 topics

ConnectWise Manage Integration

1 topic

Kaseya VSA Integrations

16 topics

Crypto Corner

A place to discuss all things cryptocurrency

News

9 topics

Wallet Security

3 topics

Common Scams

3 topics

Jasper_The_RasperModerator

Vulnerability Vault

Cisco Confirms Some Products Impacted by Critical Erlang/OTP Flaw

Cisco is investigating the impact of the Erlang/OTP remote code execution vulnerability CVE-2025-32433 on its products. April 24, 2025 By Eduard Kovacs Cisco is investigating the impact of a recently disclosed Erlang/OTP vulnerability and it has confirmed that several of its products are affected by the critical remote code execution flaw. It came to light last week that a critical vulnerability allowing device takeover was discovered in the SSH implementation of Erlang/OTP, a collection of libraries, middleware and other tools designed for creating soft real-time systems that require high availability, such as banking, e-commerce, and communications applications.The flaw, discovered by a team of researchers from Ruhr University Bochum in Germany, is tracked as CVE-2025-32433, and it has been described as an SSH protocol message handling issue that can allow an unauthenticated attacker to gain access to affected systems and execute arbitrary code. >>Full Article<<

10 minutes ago

Jasper_The_RasperModerator

Security Industry News

Crooks exploit the death of Pope Francis

April 24, 2025 By Pierluigi Paganini Crooks exploit the death of Pope Francis, using public curiosity and emotion to launch scams and spread malware, an old tactic during global events.After Pope Francis’ death, cybercriminals launched scams and malware attacks, exploiting public curiosity, grief, and confusion.Cybercriminals are ready to exploit any event of global interest, it has already happened in the past during events like Queen Elizabeth II’s death or the COVID-19 pandemic. Check Point Research calls this trend “cyber threat opportunism,” noting similar spikes during COVID-19, when Google saw 18M+ daily virus-related scam emails.These emotionally charged moments are fertile ground for digital exploitation. The emotional vulnerability of users makes them prime targets for attackers seeking clicks, personal data, or financial information. >>Full Article<<

20 minutes ago

Jasper_The_RasperModerator

Security Industry News

Frederick Health data breach impacts nearly 1 million patients

April 24, 2025 By Sergiu Gatlan A ransomware attack in January at Frederick Health Medical Group, a major healthcare provider in Maryland, has led to a data breach affecting nearly one million patients.With almost 4,000 employees and over 25 locations, Frederick Health is one of Frederick County's largest employers.As the health system revealed in a late March notification to patients, the ransomware attack was detected on January 27, which prompted Frederick Health to notify law enforcement and hire a third-party forensic firm to investigate the incident's impact."On January 27, 2025, we experienced a ransomware event affecting our IT systems," the health system said. "The investigation determined that an unauthorized person gained access to our network and, on January 27, 2025, copied certain files from a file share server.""We are mailing letters to individuals whose information may have been involved and for whom we have sufficient contact information," it added. >>Full Arti

41 minutes ago

Jasper_The_RasperModerator

Water Cooler

Good Morning Thread - 2

For the original Good Morning Thread, please see here - Good Morning Thread Good morning/afternoon/evening Webrooters. It is finally cooling down here again now but there are no storms forecast tonight a shame really.

87491886

50 minutes ago

Jasper_The_RasperModerator

Security Industry News

Blue Shield of California leaked health data of 4.7 million members to Google

April 23, 2025 By Bill Toulas Blue Shield of California disclosed it suffered a data breach after exposing protected health information of 4.7 million members to Google's analytics and advertisement platforms.The nonprofit health plan, which serves nearly 6 million members across California, published a data breach notification on its website stating that member data was exposed between April 2021 and January 2024.Today, the United States Department of Health and Human Services breach portal was updated to state that the leak exposed 4.7 million members' protected health data.Source: ocrportal.hhs.govAccording to the notice, the exposure was caused by a misconfiguration of Google Analytics on certain Blue Shield sites. This resulted in the sensitive data potentially being shared with Google advertising platforms and advertisers. >>Full Article<<

1 hour ago

TripleHelixModerator

Water Cooler

Goodnight Thread - 2

The old thread (10 years) has run it’s course as you can’t post in there anymore so I started a new one! Thanks @Ssherjj

3875766

18 hours ago

Jasper_The_RasperModerator

Security Industry News

Data Breach at Onsite Mammography Impacts 350,000

Massachusetts medical firm Onsite Mammography discloses data breach impacting the personal information of 350,000 patients. April 23, 2025 By Ionut Arghire Massachusetts medical services provider Onsite Mammography is notifying over 350,000 people that their personal and health information was compromised in a data breach.The incident was discovered in October 2024 and involved unauthorized access to an employee’s email account, the firm reveals in a notification letter mailed to the impacted individuals.Some of the emails in the compromised account’s inbox, Onsite says, exposed both personally identifiable information (PII) and protected health information (PHI).A review of the exposed information that was concluded in February 2025 determined that names, Social Security numbers, dates of birth, driver’s license numbers, credit card numbers, and medical information such as mental and physical health or condition, and received care information was compromised. >>Full Article<&

22 hours ago

Jasper_The_RasperModerator

Security Industry News

Ripple NPM supply chain attack hunts for private keys

A mystery thief and a critical CVE involved in crypto cash grab April 23, 2025 By Connor Jones Many versions of the Ripple ledger (XRPL) official NPM package are compromised with malware injected to steal cryptocurrency.The NPM package, xrpl, is a JavaScript/TypeScript library that devs use to interact with and build apps using the cryptocurrency ledger's features. This includes wallet and key management, payment channels, decentralized exchange, escrow, and so on.Xrpl receives a great deal of interest from developers; weekly downloads hit a high of more than 186,000 in April, which offers an indication of how many people may be affected by the recent compromise in the absence of a confirmed number. >>Full Article<<

23 hours ago

Jasper_The_RasperModerator

Security Industry News

ASUS releases fix for AMI bug that lets hackers brick servers

April 23, 2025 By Bill Toulas ASUS has released security updates to address CVE-2024-54085, a maximum severity flaw that could allow attackers to hijack and potentially brick servers.The flaw impacts American Megatrends International's MegaRAC Baseboard Management Controller (BMC) software, used by over a dozen server hardware vendors, including HPE, ASUS, and ASRock.The CVE-2024-54085 flaw is remotely exploitable, potentially leading to malware infections, firmware modifications, and irreversible physical damage through over-volting."A local or remote attacker can exploit the vulnerability by accessing the remote management interfaces (Redfish) or the internal host to the BMC interface (Redfish)," explained Eclypsium in a related report."Exploitation of this vulnerability allows an attacker to remotely control the compromised server, remotely deploy malware, ransomware, firmware tampering, bricking motherboard components (BMC or potentially BIOS/UEFI), potential server physical damage

23 hours ago

Jasper_The_RasperModerator

Security Industry News

Crypto mining campaign targets Docker environments with new evasion technique

April 23, 2025 By Pierluigi Paganini New malware campaign targets Docker environments using unknown methods to secretly mine cryptocurrency, researchers warn.Researchers from Darktrace and Cado Security have spotted a malware campaign that targets Docker environments with a novel technique to mine cryptocurrency.The malware campaign targets Docker environments to deploy a malicious node connected to Teneo, a decentralized infrastructure network. Teneo allows users to earn rewards (Teneo Points) by running Community Nodes that scrape public data from social platforms like Facebook, X, Reddit, and TikTok. These points can be converted to $TENEO tokens. The malware covertly monetizes social media bandwidth via this mechanism.The attack chain begins with a request to launch a container from Docker Hub, specifically the kazutod/tene:ten image. >>Full Article<<

23 hours ago

dm661New Member

Endpoint Protection

How to edit keycode on all domain PCs?

Is there a supported method for mass updating the keycode on many PCs on a domain via GPO or otherwise?

270

1 month ago

MajorHavocBronze VIP

Webroot® SecureAnywhere™ - Home

WSA holding onto volumes from DMG or USB when trying to eject.

Anyone else see this issue and hopefully have a work around:When I mount a DMG disk image, or plug in a USB drive to my MacBookPro, I cannot eject it because I am told one or more programs may be using it. This even happens if NO programs are shown as running. I have noted that if I quit WSA (shut it down) I can then eject these drives But WSA scanning the drives it seems leaves some process open that still has an active pin to the drives. I do not want to force eject an HD, or even a DMG as it can damage the image or drive. Suggestions anyone? (FYI: Webroot Customer Service suggested I shut down WSA, eject the drive, and then turn it back on. WORST SOLUTION EVER.)

21718

3 months ago

chrisroseNew Voice

Webroot® Unity API

DNS ProtectionPolicy mapping via UnityAPI

Good day,I am working on enabling DNS Protection and setting some of its options using Unity API. I can successfully enable and disable the module using Unity API and I can set the site policy to one that includes DNS Protection on our endpoints, and the network wide DNS Protection Policy for a Static IP. However, I cannot see a way to set the Agent/Endpoint DNS Protection Policy. It does not even seem this is possible with the current set of commands.Am I missing something? Or is this not possible? Might it be an option that will be enabled in the future?Thanks,Chris

704

5 months ago

Events Calendar

User leaderboard

Show full leaderboard

Join the Conversation

Tweets by OpenTextSec

Consumer Common KB Articles

Business Common KB Articles

Nastiest Malware 2024

Featured Topics

Recent Articles

Upcoming Events

Events Calendar

User leaderboard

Join the Conversation

Sign up

Login to the community

Scanning file for viruses.

This file cannot be downloaded