The group, which goes by the name Lovely, said it reached out to Condé Nast months ago to warn them about six vulnerabilities it had discovered.