CPO Magazine

1 week ago | cpomagazine.com | Alicia Hope

Google is warning about large-scale, financially motivated vishing attacks targeting Salesforce customers, with the goal of subsequent data exfiltration and cyber extortion. For months, Google’s Threat Intelligence Group (GTIG) has tracked a prolific campaign dubbed UNC6040 attributed to a minor league threat group known as “The Com.” The threat actor gains access to an organization’s network by impersonating IT support staff via phone-based phishing attacks (vishing).

1 week ago | cpomagazine.com | Alicia Hope

Google will stop trusting digital certificates issued by two certificate authorities (CA) due to concerning compliance issues. “These patterns represent a loss of integrity and fall short of expectations, eroding trust in these CA Owners as publicly-trusted certificate issuers trusted by default in Chrome” the company said. These changes will be reflected in the next release of its popular web browser, Chrome 139, scheduled for release in August 2025.

1 week ago | cpomagazine.com | Alicia Hope

Lingerie giant Victoria’s Secret was forced to pull down its website and some in-store services as a safety precaution after experiencing a prolonged security incident. Ohio-based Victoria’s Secret operates about 1,350 retail stores across 70 countries and reported over $6 billion in revenue in 2024. Problems with the underwear colossus started as early as May 26, when some customers reported experiencing difficulties placing orders.

1 week ago | cpomagazine.com | Scott Ikeda

A photo ID, and possibly even a biometric selfie, may be required to use the Google and Apple app stores in Texas next year. The Texas App Store Accountability Act, recently signed into law by Gov. Greg Abbott, gives the big tech players the remainder of 2025 to figure out how they will implement age verification to prevent children from accessing potentially harmful content. The app store law is the second of its type in the US, behind a similar regulation passed in Utah in March.

2 weeks ago | cpomagazine.com | Alicia Hope

Data broker LexisNexis Risk Solutions (LNRS) has confirmed a data breach that compromised the personal information of over 364,000 people. LexisNexis operates in 40 countries, has customers worldwide, and employs over 11,500 people. The subsidiary of the British data analytics conglomerate RELX works with 91% of Fortune 100 companies and 85% of Fortune 500 companies, making the breach more significant.