CPO Magazine

1 week ago | cpomagazine.com | Scott Ikeda

Researchers with AI security firm HiddenLayer have developed a single prompt injection attack that works across all of the major AI models currently in use. The attack breaks the safety guardrails of essentially any model it’s thrown at, convincing it to reveal its system prompt as well as engage in all manner of potentially harmful exchanges.

1 week ago | cpomagazine.com | Alicia Hope

The Interlock ransomware gang has taken credit for the dialysis company DaVita ransomware attack and leaked the allegedly stolen data as proof. With an annual revenue of over $12.8 billion, the Fortune 500 company operates over 2,600 dialysis centers across the United States and more than 3,000 worldwide and employs over 75,000 workers. The company serves over 200,000 patients at its outpatient and home care clinics across the United States.

1 week ago | cpomagazine.com | Alicia Hope

SK Telecom warns that a malware attack on its systems compromised sensitive customer USIM data, which could be used for targeted surveillance, tracking, and SIM-swap attacks. With a user base of more than 34 million subscribers corresponding to a 48.4% market share, SK Telecom is South Korea’s largest mobile network operator. According to a Korean-language data breach notification posted on the company’s website, the telecom giant detected the cyber attack at 11 PM on Saturday, April 19, 2025.

2 weeks ago | cpomagazine.com | Scott Ikeda

A new report from Google’s Threat Intelligence Group (GTIG) finds that 75 zero-days were exploited in the wild last year, with a little over half involving spyware. The spyware comes from a mix of foreign espionage groups, particularly those based in China and North Korea, and international commercial providers such as Paragon Solutions and NSO Group. Some of 2024’s most notable zero-days hit Cisco, Palo Alto Networks and Ivanti.

2 weeks ago | cpomagazine.com | Alicia Hope

Marks & Spencer (M&S) says a cyber incident was behind the disruption of its contactless payment and the click and collect delays. The high street retailer operates over 1,000 stores across the United Kingdom, stocking clothing, homeware, and produce items. The retail giant has assured its customers that it was working relentlessly to resolve the cybersecurity issue, and they need not take any action.