CyberQP incident
FALSE POSITIVE - Agent update 5.3.6.0 detected as malware by Webroot - FALSE POSITIVE
Resolved after 7 hours 19 minutes, affecting Agent and Agent, on January 10, 2025.
Webroot support indicates that they have whitelisted the Agent update for 5.3.6.0 - we are hopeful their support team will be willing to work with us for future Agent updates so that this doesn't happen again. Agent updates, that failed, may require the Agent to be reinstalled. You can simply install over top of the existing installation via your RMM, scripting process, or manually via the GUI.
Affected components
Update timeline
- investigating Jan 10, 2025, 03:26 PM UTC
We are aware that Agent version 5.3.6.0 update is being flagged as potentially malicious by Webroot. PLEASE NOTE: We can confirm this is a FALSE POSITIVE. If you are impacted, kindly submit this to Webroot as a FALSE POSITIVE. Our security and development teams are actively investigating the issue and working to address why this update was flagged. We’ll share updates as soon as more information becomes available.
- monitoring Jan 10, 2025, 07:34 PM UTC
A fix has been implemented and we are monitoring the results.
- investigating Jan 10, 2025, 07:35 PM UTC
We are aware that Agent version 5.3.6.0 update is being flagged as potentially malicious by Webroot. PLEASE NOTE: We can confirm this is a FALSE POSITIVE. If you are impacted, kindly submit this to Webroot as a FALSE POSITIVE. Our security and development teams are actively investigating the issue and working to address why this update was flagged. We’ll share updates as soon as more information becomes available.
- resolved Jan 10, 2025, 10:45 PM UTC
Webroot support indicates that they have whitelisted the Agent update for 5.3.6.0 - we are hopeful their support team will be willing to work with us for future Agent updates so that this doesn't happen again. Agent updates, that failed, may require the Agent to be reinstalled. You can simply install over top of the existing installation via your RMM, scripting process, or manually via the GUI.
Your product runs on more than CyberQP
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.