BSI warns of security vulnerabilities in online stores

Are you a busy online shopper? Then the German Federal Office for Information Security (BSI) thinks you should be more careful in the future when choosing the right online store. The authority has now officially issued a warning against insecure websites. Even personal data could fall into the hands of criminals.

Hackers go on a data hunt in online shops

The BSI has issued a serious warning to German consumers. According to the agency, many websites are said to be based on software that suffers from sensitive security vulnerabilities. These security problems are apparently to take advantage of cybercriminals. Hackers are thus likely to go on extensive data captures, often gaining access even to sensitive customer data. According to the BSI, a comprehensive study was conducted that revealed various gaps. Criminals are said to be able to access entire databases of websites. The BSI study revealed that a total of 78 security leaks are said to be involved, through which hackers can gain access.

• Also interesting: Security hole in HP computers

Main problem with password security

In particular, users who like to use the same password for multiple websites should exercise caution. Finally, the BSI found in the study that the current directive on passwords was poorly implemented. Many resourceful hackers should have no problem picking up e-mail addresses, usernames and passwords even here. On top of that, seven out of ten software solutions for websites rely on JavaScript-based libraries, which are said to have sensitive vulnerabilities. The BSI also found that 50 percent of the web store software examined no longer receives the latest security updates. The problem behind this is that the software is simply outdated.

• See this? Continental won’t pay ransom to ransomware group

BSI now calls for improvements

The consequence of the study now consists of extensive demands on the part of the BSI. Thus, the authority has demanded from the affected companies that the vulnerabilities in the software must be fixed. But the web store operators should also take action. The BSI called on them to install appropriate security updates to ensure greater security. As part of its study, the BSI apparently did not just theorize. A survey of customers of online stores had revealed that almost 25 percent of all consumers had already been affected by a data leak. Since the trend is increasingly toward buying online, players should now react as quickly as possible.