topic Re: False positive? in Endpoint Security https://community.cisco.com/t5/endpoint-security/false-positive/m-p/5292564#M8855 <P><SPAN>We are aware of the issue. The file disposition in Cisco Secure Endpoint, was changed. You should see the effectivity already.</SPAN></P> Wed, 21 May 2025 10:24:12 GMT David Janulik 2025-05-21T10:24:12Z False positive? https://community.cisco.com/t5/endpoint-security/false-positive/m-p/5292520#M8852 <P>Heyo everyone,</P><P>Had a tonne of machines alerting for SHA256:&nbsp;07cd10ab304ae0017dd903b91e2d68952508e5120073a27d6ae1affe5b0af198</P><P>I'm pretty sure this is a false positive but I've had a look and cant find any information anywhere yet cause I think its quite recent, just wanted to check in and see if anyone else has experienced the same?</P><P>Cheers!</P> Wed, 21 May 2025 07:57:03 GMT https://community.cisco.com/t5/endpoint-security/false-positive/m-p/5292520#M8852 ALTF4 2025-05-21T07:57:03Z Re: False positive? https://community.cisco.com/t5/endpoint-security/false-positive/m-p/5292531#M8853 <DIV>We are facing the same challenge of identifying whether this is a false positive or whether it really is something that needs to be looked at more closely.</DIV> <DIV>&nbsp;</DIV> <DIV><SPAN> C:\Users\****\AppData\Roaming\Zoom\6.4.6.64360\Zoom.msi is moved to quarantine.</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV>detected Zoom.msi as W32.07CD10AB30-95.SBX.TG</DIV> Wed, 21 May 2025 08:25:27 GMT https://community.cisco.com/t5/endpoint-security/false-positive/m-p/5292531#M8853 YZ2 2025-05-21T08:25:27Z Re: False positive? https://community.cisco.com/t5/endpoint-security/false-positive/m-p/5292552#M8854 <P>We observe the same behaviour in our environment, too.</P> Wed, 21 May 2025 09:20:42 GMT https://community.cisco.com/t5/endpoint-security/false-positive/m-p/5292552#M8854 Bunged 2025-05-21T09:20:42Z Re: False positive? https://community.cisco.com/t5/endpoint-security/false-positive/m-p/5292564#M8855 <P><SPAN>We are aware of the issue. The file disposition in Cisco Secure Endpoint, was changed. You should see the effectivity already.</SPAN></P> Wed, 21 May 2025 10:24:12 GMT https://community.cisco.com/t5/endpoint-security/false-positive/m-p/5292564#M8855 David Janulik 2025-05-21T10:24:12Z