Alicia Hope

1 week ago | cpomagazine.com | Alicia Hope

Car-sharing giant Zoomcar has disclosed a data breach that impacted approximately 8.4 million people after a threat actor contacted the company claiming to have accessed its data. India-based Zoomcar operates in approximately 100 cities across India, Egypt, Indonesia, and Vietnam, and other Asian countries, and has over 10 million users. In 2023, it was registered in the United States after merging with an American-based IOAC.

1 week ago | cpomagazine.com | Alicia Hope

Amazon’s Whole Foods distributor, United Natural Foods Inc. (UNFI), suffered a cyber attack that forced the company to shut down some IT systems, disrupting operations, including ordering and distribution. Rhode Island-based UNFI distributes fresh and frozen food items to over 30,000 locations across the United States and Canada from its 53 major distribution centers. It boasts of being the largest full-service grocery partner, serving numerous high-profile clients, including Amazon’s Whole Foods.

2 weeks ago | cpomagazine.com | Alicia Hope

Google is warning about large-scale, financially motivated vishing attacks targeting Salesforce customers, with the goal of subsequent data exfiltration and cyber extortion. For months, Google’s Threat Intelligence Group (GTIG) has tracked a prolific campaign dubbed UNC6040 attributed to a minor league threat group known as “The Com.” The threat actor gains access to an organization’s network by impersonating IT support staff via phone-based phishing attacks (vishing).

2 weeks ago | cpomagazine.com | Alicia Hope

Google will stop trusting digital certificates issued by two certificate authorities (CA) due to concerning compliance issues. “These patterns represent a loss of integrity and fall short of expectations, eroding trust in these CA Owners as publicly-trusted certificate issuers trusted by default in Chrome” the company said. These changes will be reflected in the next release of its popular web browser, Chrome 139, scheduled for release in August 2025.

2 weeks ago | cpomagazine.com | Alicia Hope

Lingerie giant Victoria’s Secret was forced to pull down its website and some in-store services as a safety precaution after experiencing a prolonged security incident. Ohio-based Victoria’s Secret operates about 1,350 retail stores across 70 countries and reported over $6 billion in revenue in 2024. Problems with the underwear colossus started as early as May 26, when some customers reported experiencing difficulties placing orders.