# \#security **URL:** https://the.fmsoup.org/tag/security/57.md [Latest](https://the.fmsoup.org/latest.md) · [Categories](https://the.fmsoup.org/categories.md) · [Tags](https://the.fmsoup.org/tags.md) --- ## [Security Alert: A Coordinated Malware Campaign Is Targeting FileMaker Developers](https://the.fmsoup.org/t/security-alert-a-coordinated-malware-campaign-is-targeting-filemaker-developers/5613)
**Author:** [@Axelar](https://the.fmsoup.org/u/Axelar)\ **Replies:** 4\ **Last updated:** [August 4, 2026, 9:09pm UTC](https://the.fmsoup.org/t/security-alert-a-coordinated-malware-campaign-is-targeting-filemaker-developers/5613 "2026-08-04T21:09:54Z")
Over the past several months, a network of GitHub accounts has been publishing repositories designed specifically to attract FileMaker developers. These were not generic malware links randomly mentioning FileMaker. The … --- ## [FMScriptBridge 0.9.25 released](https://the.fmsoup.org/t/fmscriptbridge-0-9-25-released/5766)
**Author:** [@FMScriptBridge](https://the.fmsoup.org/u/FMScriptBridge)\ **Replies:** 0\ **Last updated:** [September 15, 2026, 11:56am UTC](https://the.fmsoup.org/t/fmscriptbridge-0-9-25-released/5766 "2026-09-15T11:56:02Z")
Dear All, The 0.9.25 version of FMScriptBridge is out. Remember the curly quotes caveat from last time? That is fixed. Curly quotes in script, layout, menu set and table names now convert as written. The secret scan on… --- ## [🚨 Security Alert: YouTube Campaign Targeting FileMaker Beginners](https://the.fmsoup.org/t/security-alert-youtube-campaign-targeting-filemaker-beginners/5689)
**Author:** [@Axelar](https://the.fmsoup.org/u/Axelar)\ **Replies:** 3\ **Last updated:** [August 26, 2026, 7:03am UTC](https://the.fmsoup.org/t/security-alert-youtube-campaign-targeting-filemaker-beginners/5689 "2026-08-26T07:03:27Z")
I found a new threat vector targeting FileMaker users — this time through YouTube. A search for “FileMaker Pro Crack” now returns dozens of recently created playlists following the same pattern: legitimate FileMak… --- ## [How to Verify the Code Signature of the MBS Plugin on macOS](https://the.fmsoup.org/t/how-to-verify-the-code-signature-of-the-mbs-plugin-on-macos/5688)
**Author:** [@MonkeybreadSoftware](https://the.fmsoup.org/u/MonkeybreadSoftware)\ **Replies:** 0\ **Last updated:** [August 25, 2026, 7:22am UTC](https://the.fmsoup.org/t/how-to-verify-the-code-signature-of-the-mbs-plugin-on-macos/5688 "2026-08-25T07:22:38Z")
When installing an MBS FileMaker Plugin on macOS, especially in a production or security-sensitive environment, it can be useful to verify that the plugin has a valid Apple code signature and that its contents have not b… --- ## [Secure Password Storage with Keychain Functions in MBS FileMaker Plugin 16.3](https://the.fmsoup.org/t/secure-password-storage-with-keychain-functions-in-mbs-filemaker-plugin-16-3/5522)
**Author:** [@MonkeybreadSoftware](https://the.fmsoup.org/u/MonkeybreadSoftware)\ **Replies:** 0\ **Last updated:** [June 26, 2026, 7:56am UTC](https://the.fmsoup.org/t/secure-password-storage-with-keychain-functions-in-mbs-filemaker-plugin-16-3/5522 "2026-06-26T07:56:58Z")
The upcoming version 16.3 of the MBS FileMaker Plugin introduces a powerful set of Keychain functions for storing and managing passwords on macOS and iOS. These functions allow FileMaker solutions to securely store crede… --- ## [Security tidbits for FileMaker](https://the.fmsoup.org/t/security-tidbits-for-filemaker/4358)
**Author:** [@MonkeybreadSoftware](https://the.fmsoup.org/u/MonkeybreadSoftware)\ **Replies:** 3\ **Last updated:** [March 26, 2026, 8:35pm UTC](https://the.fmsoup.org/t/security-tidbits-for-filemaker/4358 "2026-03-26T20:35:24Z")
We talked about various things at the FileMaker conference in Rome and security is a concern for everyone. Especially as scripted attacks got frequently. Rename Admin Have you ever put a FileMaker Server on the internet… --- ## [FileMaker Server 22.0.5 and 21.1.7 Updates Available](https://the.fmsoup.org/t/filemaker-server-22-0-5-and-21-1-7-updates-available/5285)
**Author:** [@xochi](https://the.fmsoup.org/u/xochi)\ **Replies:** 6\ **Last updated:** [February 19, 2026, 2:46pm UTC](https://the.fmsoup.org/t/filemaker-server-22-0-5-and-21-1-7-updates-available/5285 "2026-02-19T14:46:24Z")
Includes some bug fixes as well as some important security updates. See Claris FileMaker Server Release Notes --- ## [NVD - CVE-2025-24813 (Apache Tomcat vulnerability)](https://the.fmsoup.org/t/nvd-cve-2025-24813-apache-tomcat-vulnerability/4783)
**Author:** [@xochi](https://the.fmsoup.org/u/xochi)\ **Replies:** 12\ **Last updated:** [May 1, 2025, 11:11am UTC](https://the.fmsoup.org/t/nvd-cve-2025-24813-apache-tomcat-vulnerability/4783 "2025-05-01T11:11:48Z")
Regarding this very serious Apache Tomcat vulnerability: There is a proof-of-concept exploit here, written in Python. This script will test your server and show if it is vulnerable. I'm a mac user, but since modern … --- ## [Transaction SNAFU](https://the.fmsoup.org/t/transaction-snafu/4627)
**Author:** [@bdbd](https://the.fmsoup.org/u/bdbd)\ **Replies:** 5\ **Last updated:** [January 25, 2025, 11:25pm UTC](https://the.fmsoup.org/t/transaction-snafu/4627 "2025-01-25T23:25:31Z")
I have a multi-file solution where data manipulation is done in one file and all else is done in others. I find transactions a challenge when changes to security settings are involved. The security settings in this solu… --- ## [Saving a password](https://the.fmsoup.org/t/saving-a-password/4624)
**Author:** [@EdwinS](https://the.fmsoup.org/u/EdwinS)\ **Replies:** 3\ **Last updated:** [January 21, 2025, 3:12pm UTC](https://the.fmsoup.org/t/saving-a-password/4624 "2025-01-21T15:12:16Z")
Does anyone have an idea how the contents of a (password-)field can be saved in a keychain and being fetched back? MBS has a "Keychain" component, but only allows to store passwords, not to fetch them back. Just brewin… --- ## [Let's Encrypt Certificates Lifetime to be limited to 6 days](https://the.fmsoup.org/t/lets-encrypt-certificates-lifetime-to-be-limited-to-6-days/4570)
**Author:** [@Malcolm](https://the.fmsoup.org/u/Malcolm)\ **Replies:** 2\ **Last updated:** [December 19, 2024, 10:42pm UTC](https://the.fmsoup.org/t/lets-encrypt-certificates-lifetime-to-be-limited-to-6-days/4570 "2024-12-19T22:42:21Z")
Any thoughts on the ramifications of the proposal to change the lifetime of SSL Certificates from 90 days to 6 days? Will it affect workflows? What security adjustments are going to be needed? Does it require changes to… --- ## [Simplify FileMaker Server Connectivity Testing with FileMakerPortScanner](https://the.fmsoup.org/t/simplify-filemaker-server-connectivity-testing-with-filemakerportscanner/4555)
**Author:** [@Axelar](https://the.fmsoup.org/u/Axelar)\ **Replies:** 0\ **Last updated:** [December 12, 2024, 3:02pm UTC](https://the.fmsoup.org/t/simplify-filemaker-server-connectivity-testing-with-filemakerportscanner/4555 "2024-12-12T15:02:49Z")
FileMakerPortScanner is a versatile open source and cross-platform PowerShell script designed to validate the connectivity of essential FileMaker Server ports. Whether you’re using Windows, macOS, or Linux (including WSL… --- ## [Inform clients about security fixes in newer FileMaker?](https://the.fmsoup.org/t/inform-clients-about-security-fixes-in-newer-filemaker/4456)
**Author:** [@MonkeybreadSoftware](https://the.fmsoup.org/u/MonkeybreadSoftware)\ **Replies:** 10\ **Last updated:** [December 12, 2024, 8:18am UTC](https://the.fmsoup.org/t/inform-clients-about-security-fixes-in-newer-filemaker/4456 "2024-12-12T08:18:31Z")
How do you guys handle that? In recent times we learnt about a couple of security problems fixed this year. Should we inform them actively and ask them to upgrade, if we know what server version they use? like if you … --- ## [Deprecation of TLS 1.0 and 1.1](https://the.fmsoup.org/t/deprecation-of-tls-1-0-and-1-1/4284)
**Author:** [@MonkeybreadSoftware](https://the.fmsoup.org/u/MonkeybreadSoftware)\ **Replies:** 0\ **Last updated:** [September 16, 2024, 5:34am UTC](https://the.fmsoup.org/t/deprecation-of-tls-1-0-and-1-1/4284 "2024-09-16T05:34:31Z")
Anyone still needs TLS 1.0 and 1.1 when working with MBS Plugins? OpenSSL plans to disable them by default. We should do the same. Everyone moved to TLS 1.2 and 1.3 as far as we know, so nobody should need the older on… --- ## [Print script step admin permissiosn](https://the.fmsoup.org/t/print-script-step-admin-permissiosn/4205)
**Author:** [@Harry](https://the.fmsoup.org/u/Harry)\ **Replies:** 2\ **Last updated:** [July 26, 2024, 9:26am UTC](https://the.fmsoup.org/t/print-script-step-admin-permissiosn/4205 "2024-07-26T09:26:59Z")
Hello Board! FMS 20 + FMP. I have a script that creates records in a table then prints a layout of that record. The printer is an A4 networked printer that is setup and operating. As Admin, with Full Access, i can run… --- ## [Find Matching Records - How to disable?](https://the.fmsoup.org/t/find-matching-records-how-to-disable/3680)
**Author:** [@AndyHibbs](https://the.fmsoup.org/u/AndyHibbs)\ **Replies:** 9\ **Last updated:** [September 7, 2023, 5:29pm UTC](https://the.fmsoup.org/t/find-matching-records-how-to-disable/3680 "2023-09-07T17:29:10Z")
Never one to be surprised to find something new after 35-years of FileMaker development, I hope someone can help with this one. A contextual menu item I've never really taken notice of before, when in a field in Browse … --- ## [SSL Issue: Can't Connect to FQDN (LAN), and Name Match Issue](https://the.fmsoup.org/t/ssl-issue-cant-connect-to-fqdn-lan-and-name-match-issue/2702)
**Author:** [@daleallyn](https://the.fmsoup.org/u/daleallyn)\ **Replies:** 26\ **Last updated:** [August 27, 2023, 1:14pm UTC](https://the.fmsoup.org/t/ssl-issue-cant-connect-to-fqdn-lan-and-name-match-issue/2702 "2023-08-27T13:14:07Z")
I'm having an SSL issue that I've not experienced before and hoping the community can help. I've searched and found LOTS of posts across the FM communities, but so far I've not found the fix. FileMaker Server 18.04.xx o… --- ## [Deploying FileMaker Server on Ubuntu Linux with Let's Encrypt SSL](https://the.fmsoup.org/t/deploying-filemaker-server-on-ubuntu-linux-with-lets-encrypt-ssl/3397)
**Author:** [@mhtawfiq](https://the.fmsoup.org/u/mhtawfiq)\ **Replies:** 7\ **Last updated:** [February 22, 2023, 6:05am UTC](https://the.fmsoup.org/t/deploying-filemaker-server-on-ubuntu-linux-with-lets-encrypt-ssl/3397 "2023-02-22T06:05:54Z")
Hi everyone, I have published an article “Deploying FileMaker Server on Ubuntu Linux with Let's Encrypt SSL” In which I discuss how to set up FileMaker Server on an Ubuntu Linux server, secure it behind a firewall and u… --- ## [Running a test environment on a separate VLAN](https://the.fmsoup.org/t/running-a-test-environment-on-a-separate-vlan/3116)
**Author:** [@Code-J](https://the.fmsoup.org/u/Code-J)\ **Replies:** 1\ **Last updated:** [October 3, 2022, 1:59am UTC](https://the.fmsoup.org/t/running-a-test-environment-on-a-separate-vlan/3116 "2022-10-03T01:59:23Z")
Intro One of my customers in a Mac based environment wanted to have a test/dev set of files running in parallel with the live version of their system, but did not want to have any risk of of near identical files becomin… --- ## [FileMaker Server Web Config File - Security Risk](https://the.fmsoup.org/t/filemaker-server-web-config-file-security-risk/3081)
**Author:** [@AndyHibbs](https://the.fmsoup.org/u/AndyHibbs)\ **Replies:** 5\ **Last updated:** [September 10, 2022, 8:30pm UTC](https://the.fmsoup.org/t/filemaker-server-web-config-file-security-risk/3081 "2022-09-10T20:30:50Z")
Anyone managing FileMaker 19 Servers should read this post I’ve just added to Claris’s ‘Report a Problem’ discussions: https://community.claris.com/en/s/question/0D53w00005s79ZCCAY/critical-windows-filemaker-server-1953… --- ## [OT: Apple's malware protection system - overview and latest developments](https://the.fmsoup.org/t/ot-apples-malware-protection-system-overview-and-latest-developments/3068)
**Author:** [@Torsten](https://the.fmsoup.org/u/Torsten)\ **Replies:** 1\ **Last updated:** [September 1, 2022, 1:21pm UTC](https://the.fmsoup.org/t/ot-apples-malware-protection-system-overview-and-latest-developments/3068 "2022-09-01T13:21:00Z")
Ars Technica has a good overview article about Apple's malware protection system built into the various flavours of the OS. --- ## [Disable Copy Record](https://the.fmsoup.org/t/disable-copy-record/3053)
**Author:** [@AndyHibbs](https://the.fmsoup.org/u/AndyHibbs)\ **Replies:** 7\ **Last updated:** [August 25, 2022, 12:26pm UTC](https://the.fmsoup.org/t/disable-copy-record/3053 "2022-08-25T12:26:09Z")
The ‘Copy Record’ contextual menu is the equivalent of using the Edit-\>Copy menu when the record is in the committed state. The Copy menu does not change name when copying an object or text or the whole record field valu… --- ## [Why don't companies use EAR by default?](https://the.fmsoup.org/t/why-dont-companies-use-ear-by-default/2423)
**Author:** [@OliverBarrett](https://the.fmsoup.org/u/OliverBarrett)\ **Replies:** 6\ **Last updated:** [August 4, 2022, 12:29pm UTC](https://the.fmsoup.org/t/why-dont-companies-use-ear-by-default/2423 "2022-08-04T12:29:28Z")
You'd think with over a billion records hacked and exposed and more everyday (like the T-Mobile hack last week) that companies would be using EAR now. I'm wondering what I'm missing as to why companies don't encrypt the… --- ## [Windows FM Server virus/malware scanning software recommendations](https://the.fmsoup.org/t/windows-fm-server-virus-malware-scanning-software-recommendations/3023)
**Author:** [@bowdendata](https://the.fmsoup.org/u/bowdendata)\ **Replies:** 2\ **Last updated:** [July 30, 2022, 3:52pm UTC](https://the.fmsoup.org/t/windows-fm-server-virus-malware-scanning-software-recommendations/3023 "2022-07-30T15:52:47Z")
Setup: FileMaker Server is running on Windows Server 2019. The owner has WebRoot installed for anti-virus/anti-malware. I am not sure what version they have at this moment, but the owner says that it does not have any op… --- ## [Security Notice](https://the.fmsoup.org/t/security-notice/2954)
**Author:** [@Malcolm](https://the.fmsoup.org/u/Malcolm)\ **Replies:** 0\ **Last updated:** [June 16, 2022, 12:30am UTC](https://the.fmsoup.org/t/security-notice/2954 "2022-06-16T00:30:57Z")
The 19.5 version of the Claris FileMaker product line includes security related changes. Users of all FileMaker v19 products SHOULD read the release notes for the new version. For those planning to upgrade immediately:… --- ## [Claris Cloud Database asks for Authentication all the time](https://the.fmsoup.org/t/claris-cloud-database-asks-for-authentication-all-the-time/2924)
**Author:** [@Malcolm](https://the.fmsoup.org/u/Malcolm)\ **Replies:** 3\ **Last updated:** [May 24, 2022, 9:59pm UTC](https://the.fmsoup.org/t/claris-cloud-database-asks-for-authentication-all-the-time/2924 "2022-05-24T21:59:38Z")
I have a client using a Claris FileMaker Cloud service. Whenever they switch back to FileMaker after doing something else, they have to re-authenticate. They have to provide their password to get back into the system. I… --- ## [Local variables defined in layout objects live long and travel widely](https://the.fmsoup.org/t/local-variables-defined-in-layout-objects-live-long-and-travel-widely/2870)
**Author:** [@Malcolm](https://the.fmsoup.org/u/Malcolm)\ **Replies:** 27\ **Last updated:** [May 15, 2022, 12:36am UTC](https://the.fmsoup.org/t/local-variables-defined-in-layout-objects-live-long-and-travel-widely/2870 "2022-05-15T00:36:20Z")
The FileMaker documentation says: When you define a variable, you can specify its scope by adding a prefix before the variable name. Scope Prefix Example Availability function None variableName Only within the… --- ## [FM Server and HTTP Security Headers \[x-post\]](https://the.fmsoup.org/t/fm-server-and-http-security-headers-x-post/2897)
**Author:** [@bowdendata](https://the.fmsoup.org/u/bowdendata)\ **Replies:** 4\ **Last updated:** [May 11, 2022, 2:47am UTC](https://the.fmsoup.org/t/fm-server-and-http-security-headers-x-post/2897 "2022-05-11T02:47:06Z")
Hi all, We have our FM Server setup for WebDirect and as part of a 3rd party vulnerability test, our site got dinged for not having several HTTP Security Headers configured. I am not sure what tools the 3rd party is us… --- ## [Too many Global Variables?](https://the.fmsoup.org/t/too-many-global-variables/2827)
**Author:** [@bowdendata](https://the.fmsoup.org/u/bowdendata)\ **Replies:** 6\ **Last updated:** [April 4, 2022, 5:54pm UTC](https://the.fmsoup.org/t/too-many-global-variables/2827 "2022-04-04T17:54:54Z")
Hi All, I just started working on an existing solution that uses what I consider to be a large number of global variables - approximately 75+ of them. They are mostly all defined during the startup process. They contain… --- ## [Log4j](https://the.fmsoup.org/t/log4j/2643)
**Author:** [@bdbd](https://the.fmsoup.org/u/bdbd)\ **Replies:** 9\ **Last updated:** [December 16, 2021, 3:08pm UTC](https://the.fmsoup.org/t/log4j/2643 "2021-12-16T15:08:51Z")
Anyone know if Log4j is used by FileMaker in any capacity, whether in Pro, Go, Server or Cloud? [Next page](https://the.fmsoup.org/tag/security/57.md?match_all_tags=true&page=1&tags%5B%5D=security)