| OpenText Cybersecurity Community

Skip to main content

Customer Support Customer Support

Events
Leaderboard
Customer Support

Create topic
Login

OpenText Core Endpoint Backup

Protect endpoint data, anywhere

Datasheets and Infographics

Access detailed datasheets and infographics for insights on product features

Whitepaper

5 Security tips for protecting Endpoint Backup

Videos

Learn how Endpoint Backup is a solution for all your Endpoint Device

Ask a product question

Ask product-related questions and get answers from our community experts

Threat Intel Hub

Stay updated with the latest threat intelligence and cybersecurity insights

Request a demo and learn more

Have our experts explain how Endpoint Backup can work for your business

Latest Articles

Blog

When Does Recovery Really Start

6 days ago

274

News

Cyber News Rundown: DragonForce ransomware publishes 6TB of stolen data

C

6 days ago

254

BEC Attacks Pose Threat to Spring Buyers

8 days ago

314

Threat Reports

REPORT

Nastiest Malware 2024

4 months ago

12427

REPORT

2024 threat hunter perspectives: Key insights from OpenText’s latest report

4 months ago

1084

Report

Key Insights from the OpenText 2024 Threat Perspective

10 months ago

11953

Nastiest Malware

Nastiest Malware 2023

1 year ago

473116

Recently active

TripleHelixModerator

posted in Water Cooler

Goodnight Thread - 2

The old thread (10 years) has run it’s course as you can’t post in there anymore so I started a new one! Thanks @Ssherjj

3119625

10 hours ago

Y

ybTSomebodyNew Member

asked in Got a Question?

Webroot blocking Roblox despite it being in the allow files section

For some reason for the past day whenever my brother tried to play roblox on my laptop it didn’t work. I know webroot is blocking roblox because when I open task manager and try to open roblox, its ram usage goes up for a second or two then goes back down to normal. It only works when I turn off all the protection settings, but I don’t want to do that. Is there any way to get it to work? This happened once in the past but it went away on its own without me doing anything for some reason. This time it hasn’t gone away even after I restarted my laptop. How can I also prevent this from happening again in the future?

141

10 hours ago

Jasper_The_RasperModerator

posted in Vulnerability Vault

Grafana Flaws Likely Targeted in Broad SSRF Exploitation Campaign

Threat actors are likely targeting Grafana path traversal bugs for reconnaissance in a SSRF exploitation campaign targeting popular platforms. March 13, 2025 By Ionut Arghire Grafana path traversal vulnerabilities have been exploited prior to a broad campaign targeting server-side request forgery (SSRF) bugs in multiple popular platforms, threat intelligence firm GreyNoise reports. As part of the coordinated exploitation of SSRF flaws, which spiked over the weekend, more than 400 IPs were observed targeting Zimbra, GitLab, DotNetNuke, VMware, ColumbiaSoft, Ivanti, BerriAI, and OpenBMCS products. According to GreyNoise, many of the IPs used to launch the attacks have been targeting multiple SSRF vulnerabilities at the same time, suggesting the use of automation and a potential focus on pre-compromise intelligence gathering. Most of the attacks have been targeting entities in the US, Germany, India, Japan, and Singapore, but last week GreyNoise observed a focus on Israel and the Netherla

30

14 hours ago

Jasper_The_RasperModerator

posted in Ransomware Spotlight

New SuperBlack ransomware exploits Fortinet auth bypass flaws

March 13, 2025 By Bill Toulas A new ransomware operator named 'Mora_001' is exploiting two Fortinet vulnerabilities to gain unauthorized access to firewall appliances and deploy a custom ransomware strain dubbed SuperBlack. The two vulnerabilities, both authentication bypasses, are CVE-2024-55591 and CVE-2025-24472, which Fortinet disclosed in January and February, respectively. When Fortinet first disclosed CVE-2024-55591 on January 14, they confirmed it had been exploited as a zero-day, with Arctic Wolf stating it had been used in attacks since November 2024 to breach FortiGate firewalls. Confusingly, on February 11, Fortinet added CVE-2025-2447 to their January advisory, which led many to believe it was a newly exploited flaw. However, Fortinet told BleepingComputer that this bug was also fixed in January 2024 and was not exploited. "We are not aware of CVE-2025-24472 ever being exploited," Fortinet told BleepingComputer at the time. However, a new report by Forescout researchers, s

80

15 hours ago

Jasper_The_RasperModerator

posted in Security Industry News

Don't Fall for This Master Password Reset Email

March 13, 2025 By Gavin Phillips 1Password users, beware: Attackers are attempting to steal your master password using a sneaky phishing email designed to trick you. If you follow the links in this email, your account details will be stolen—along with every other password connected to that account. 1Password Users Receive Fake Master Password Reset Emails As first spotted by Tech Issues Today, via the 1Password subreddit, 1Password users are steadily receiving requests to reset their master password. The phishing email requests that the user immediately act upon a security breach supposedly detected on 1Password's systems and that resetting the master password is the only way to secure the account. Reddit user DirectorBusiness5512 detailed the 1Password scam, explaining where the phishing email came from and its contents. >>Full Article<<

10

15 hours ago

Jasper_The_RasperModerator

posted in Security Industry News

Microsoft Warns of Hospitality Sector Attacks Involving ClickFix

A cybercrime group named Storm-1865 has targeted hospitality organizations via fake Booking.com emails and the use of social engineering. March 13, 2025 By Eduard Kovacs A cybercrime group has been targeting organizations in the hospitality sector in attacks involving fake Booking.com emails and the use of a social engineering technique named ClickFix, Microsoft warned on Thursday. The threat actor behind these attacks is tracked by Microsoft as Storm-1865. It has been seen targeting hospitality organizations in North America, Europe, Oceania, and South and Southeast Asia in a campaign that is likely ongoing. The hackers’ goal is to deliver information-stealing malware that enables them to conduct financial fraud and theft. The attack starts with a fake email purporting to come from Booking.com. These messages inform the recipient — people and organizations in the hospitality sector — about negative guest reviews, account verification, online promotion opportunities, and requests from

20

15 hours ago

Jasper_The_RasperModerator

posted in Security Industry News

North Korea-linked APT group ScarCruft spotted using new Android spyware KoSpy

March 13, 2025 By Pierluigi Paganini North Korea-linked APT group ScarCruft used a new Android spyware dubbed KoSpy to target Korean and English-speaking users. North Korea-linked threat actor ScarCruft (aka APT37, Reaper, and Group123) is behind a previously undetected Android surveillance tool named KoSpy that was used to target Korean and English-speaking users. ScarCruft has been active since at least 2012, it made the headlines in early February 2018 when researchers revealed that the APT group leveraged a zero-day vulnerability in Adobe Flash Player to deliver malware to South Korean users. Kaspersky first documented the operations of the group in 2016. Cyber attacks conducted by the APT37 group mainly targeted government, defense, military, and media organizations in South Korea. >>Full Article<<

10

15 hours ago

TripleHelixModerator

posted in Vulnerability Vault

Alert CISA Adds Two Known Exploited Vulnerabilities to Catalog Release Date March 13, 2025

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-24201 Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability CVE-2025-21590 Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the Known Exploited Vulnerabilities Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information. Although BOD 22-01 only applies to FCEB agencies

20

15 hours ago

Jasper_The_RasperModerator

posted in Vulnerability Vault

GitLab patches critical authentication bypass vulnerabilities

March 13, 2025 By Bill Toulas GitLab released security updates for Community Edition (CE) and Enterprise Edition (EE), fixing nine vulnerabilities, among which two critical severity ruby-saml library authentication bypass flaws. All flaws were addressed in GitLab CE/EE versions 17.7.7, 17.8.5, and 17.9.2, while all versions before those are vulnerable. GitLab.com is already patched, and GitLab Dedicated customers will be updated automatically, but users who maintain self-managed installations on their own infrastructure will need to apply the updates manually. "We strongly recommend that all installations running a version affected by the issues described below are upgraded to the latest version as soon as possible," warns the bulletin. The two critical flaws GitLab addressed this time are CVE-2025-25291 and CVE-2025-25292, both in the ruby-saml library, which is used for SAML Single Sign-On (SSO) authentication at the instance or group level. >>Full Article<<

30

15 hours ago

TripleHelixModerator

posted in Vulnerability Vault

Alert CISA Releases Thirteen Industrial Control Systems Advisories Release Date March 13, 2025

CISA released thirteen Industrial Control Systems (ICS) advisories on March 13, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-072-01 Siemens Teamcenter Visualization and Tecnomatrix Plant Simulation ICSA-25-072-02 Siemens SINEMA Remote Connect Server ICSA-25-072-03 Siemens SIMATIC S7-1500 TM MFP ICSA-25-072-04 Siemens SiPass integrated AC5102/ACC-G2 and ACC-AP ICSA-25-072-05 Siemens SINAMICS S200 ICSA-25-072-06 Siemens SCALANCE LPE9403 ICSA-25-072-07 Siemens SCALANCE M-800 and SC-600 Families ICSA-25-072-08 Siemens Tecnomatix Plant Simulation ICSA-25-072-09 Siemens OPC UA ICSA-25-072-10 Siemens SINEMA Remote Connect Client ICSA-25-072-11 Siemens SIMATIC IPC Family, ITP1000, and Field PGs ICSA-25-072-12 Sungrow iSolarCloud Android App and WiNet Firmware ICSMA-25-072-01 Philips Intellispace Cardiovascular (ISCV) CISA encourages users and administrators to review newly released ICS advisories for tec

10

15 hours ago

Events calendar

Mar

31

Webinar

The evolution of data backup: Why it still matters

Mar

31

Webinar

The evolution of data backup: Why it still matters

Leaderboard

1

TripleHelix

920 points

2

Jasper_The_Rasper

772 points

3

Ssherjj

309 points

4

ProTruckDriver

298 points

5

TylerM

39 points

Show full leaderboard

1

Jasper_The_Rasper

193346 points

2

TripleHelix

137150 points

3

ProTruckDriver

66448 points

4

Ssherjj

30046 points

5

TylerM

24961 points

Show full leaderboard

Join the Conversation

Tweets by OpenTextSec

Powered by Gainsight

Terms & Conditions

Cybersecurity Solutions OpenText Cybersecurity 2024 Threat Report Cyber Resilience Program

Privacy Policy Cookie Policy Cookies Preferences

LinkedIn Twitter YouTube

Sign up

Already have an account? Login

Username *

E-mail address *

Password *

I accept the terms & conditions

loginBox.register.email_repeat

Login to the community

No account yet? Create an account

Username or Email

Password

Remember me

Forgot password?

Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.

Enter your e-mail address

Back to overview

Scanning file for viruses.

Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.

OK

This file cannot be downloaded

Sorry, our virus scanner detected that this file isn't safe to download.

OK