The Breach News

New ComRAT Malware Leverages Gmail for Command Reception and Data Exfiltration

Recent cybersecurity investigations have revealed an upgraded variant of the ComRAT backdoor, a sophisticated tool initially deployed by the Turla Advanced Persistent Threat (APT) group. This latest iteration utilizes Gmail’s web interface to clandestinely receive commands and exfiltrate sensitive information. Cybersecurity firm ESET reported that ComRAT version 4, first identified…

Read MoreNew ComRAT Malware Leverages Gmail for Command Reception and Data Exfiltration

Justice Department Unveils Additional Epstein Files, Lacking Key Documents Desired by Survivors

The Justice Department has released three additional data sets related to Jeffrey Epstein, following a substantial prior disclosure of nearly 4,000 documents. This release coincided with the deadline imposed by the Epstein Files Transparency Act, which mandates greater public access to information regarding Epstein and his associates. The newly released…

Read MoreJustice Department Unveils Additional Epstein Files, Lacking Key Documents Desired by Survivors

Nissan Finance Canada Experiences Data Breach, Alerts 1.13 Million Customers

Nissan Canada Reports Data Breach Affecting Customers’ Personal Information As the year draws to a close, Nissan Canada is grappling with the fallout from a potential data breach impacting customers who financed their vehicles through Nissan Canada Finance and INFINITI Financial Services Canada. The company disclosed on December 11 that…

Read MoreNissan Finance Canada Experiences Data Breach, Alerts 1.13 Million Customers

WatchGuard Addresses Actively Exploited Firewall Zero-Day Vulnerability

Network Firewalls, Network Access Control, Security Operations 117,000 Unpatched Firewalls Vulnerable to Exploitation Mathew J. Schwartz (euroinfosec) • December 22, 2025 Image: Shutterstock In a concerning development, a zero-day vulnerability affecting WatchGuard Firebox firewalls is under active exploitation by cybercriminals aiming to execute remote code. A patch has been released…

Read MoreWatchGuard Addresses Actively Exploited Firewall Zero-Day Vulnerability

Manipulating the Human Mind: Uncovering Weaknesses in the ‘First Line of Cyber Defense’

Human beings are intricate entities characterized by consciousness and emotion, capable of thought-driven actions. In the dynamic field of cybersecurity, humans remain a primary target for malicious actors. Over time, attackers have honed their abilities to exploit various aspects of human psychology, manipulating emotional triggers and biases to influence behaviors…

Read MoreManipulating the Human Mind: Uncovering Weaknesses in the ‘First Line of Cyber Defense’

Forever 21 Confirms Security Breach Exposing Customer Credit Card Information

Data Breach at Forever 21 Affects Customer Credit Card Information In November 2017, Forever 21, the prominent retail clothing chain, reported a significant data breach that has now been confirmed to have compromised customer credit card information across multiple store locations in the United States for several months during the…

Read MoreForever 21 Confirms Security Breach Exposing Customer Credit Card Information

Taking Control: A CISO’s Guide to Career Empowerment

CISO Trainings, Governance & Risk Management, Leadership & Executive Communication Documenting Risks: The Essential Duty for Security Leaders to Combat Retroactive Accountability Brandy Harris • December 17, 2025 Image: Shutterstock A recent post on LinkedIn has sparked conversations within cybersecurity communities, presenting what appears to be a CISO’s resignation letter…

Read MoreTaking Control: A CISO’s Guide to Career Empowerment