Scott Ikeda, Senior Correspondent at CPO Magazine

Researchers Able to Abuse Lenovo’s “People-Pleasing” AI Chatbot

August 21, 2025

Lenovo’s Lena is a fairly standard AI chatbot of the type seen at some company websites, offering to retrieve product information and answer customer service questions for visitors. What is different about this one is the relative ease with which it could be recruited for highly damaging actions.

WhatsApp on mobile phone showing scam accounts

Cyber Security News

WhatsApp Has Taken Out 6.8 Million Scam Accounts in 2025

August 19, 2025

Following closely on the heels of the introduction of new tools designed to provide safety enhancements to WhatsApp users, Meta has announced that it has taken 6.8 million scam accounts off the platform in the first half of 2025.

Cyber Security News

Google Is the Latest Company Hit by Salesforce Hack as ShinyHunters Escalates To Launching Data Breach Site

August 13, 2025

The news of Google’s own Salesforce hack is also accompanied by a warning that there is now more clear evidence that ShinyHunters and Scattered Spider have formally joined forces, and that ShinyHunters is escalating to launching a leak site to put added pressure on its data breach victims.

ChatGPT on phone showing ChatGPT conversations indexed by search engines

Cyber Security News

OpenAI Blocks ChatGPT Conversations From Indexing by Search Engines

August 11, 2025

What OpenAI described as a "short-lived experiment" is now over, as the company will no longer allow Google and other search engines to index certain types of ChatGPT conversations.

Cyber Security News

Google Threat Intelligence Group: Some Scattered Spider Cyber Attacks May Have Actually Been the Work of ShinyHunters

August 5, 2025

The Scattered Spider ransomware gang has been grabbing headlines with a string of bold and high-profile cyber attacks. But researchers with Google's Threat Intelligence Group (GTIG) now believe that some of these attacks may have been misattributed, and that the similarly long-tenured ShinyHunters group may have instead been the culprits.

Glowing digital skull showing prompt injection attack on LLMs

Cyber Security News

“Man in the Prompt”: New Class of Prompt Injection Attacks Pairs With Malicious Browser Extensions to Issue Secret Commands to LLMs

August 4, 2025

A new theoretical attack described by researchers with LayerX lays out how frighteningly simple it would be for a malicious or compromised browser extension to intercept user chats with LLMs and insert prompt injection attacks designed to exfiltrate data without the target being aware.

Planes on tarmac showing Aeroflot cyber attack

Cyber Security News

Aeroflot Airline Cancels Flights After Pro-Ukraine Hacktivist Cyber Attack

August 1, 2025

Aeroflot canceled 54 of its 260 scheduled flights for the day due to the cyber attack, and an undetermined number of others experienced some amount of delay. 22 outbound flights from Moscow were subsequently canceled the following day, along with 31 incoming flights operated by subsidiary Rossiya Airlines.

Tech

Securing Your Enterprise Network: Best Practices for Broadband Security in 2025

July 30, 2025

As the digital world rapidly advances, enterprise networks have become critical to business success. With increasing reliance on cloud platforms, hybrid work environments, and connected devices, safeguarding your enterprise network is more important than ever.

Headset on table showing IT help desk in cyber attack

Cyber Security News

Clorox Sues Cognizant for Alleged IT Help Desk Failures in 2023 Cyber Attack

July 28, 2025

The massive 2023 cyber attack on Clorox can be traced to a negligent help desk employee at longtime contractor Cognizant, according to a new lawsuit filed by the company. Clorox is seeking a total sum of $380 million for breach of contract, lost sales and reputational damage, with $49 million of that in direct remediation.

UK Houses of Parliament showing ban on ransomware payments for critical infrastructure

Cyber Security News

UK Preparing Ban on Ransomware Payments for Public Sector and Critical Infrastructure Orgs

July 28, 2025

Restrictions on ransomware payments have become common for government agencies around the world, but it is still fairly rare to see them extended to the public sector or local levels of government. The new UK rules would additionally require all business types that are not impacted to notify the government.

Researchers Able to Abuse Lenovo’s “People-Pleasing” AI Chatbot

WhatsApp Has Taken Out 6.8 Million Scam Accounts in 2025

Google Is the Latest Company Hit by Salesforce Hack as ShinyHunters Escalates To Launching Data Breach Site

OpenAI Blocks ChatGPT Conversations From Indexing by Search Engines

Google Threat Intelligence Group: Some Scattered Spider Cyber Attacks May Have Actually Been the Work of ShinyHunters

“Man in the Prompt”: New Class of Prompt Injection Attacks Pairs With Malicious Browser Extensions to Issue Secret Commands to LLMs

Aeroflot Airline Cancels Flights After Pro-Ukraine Hacktivist Cyber Attack

Securing Your Enterprise Network: Best Practices for Broadband Security in 2025

UK Preparing Ban on Ransomware Payments for Public Sector and Critical Infrastructure Orgs

ASOS Data Breach Led to Customers Receiving Unauthorized Push Notifications

Wikimedia: Rogue AI Agents Traced Back to OpenAI Made Unauthorized Edits, Attempted to Compromise Etherpad

A Wave of AI-Powered Cyber Attacks Hits Numerous South Korean Banks, Exposing Sensitive PII

Hackers Abuse Custom GPT Instances on chatgpt.com to Distribute ClickFix Malware