Stay secure with the latest e-commerce cybersecurity trends, news, and tips to protect your online business from cyber threats.
Search across headline titles and summaries.
Background for this topic.
E-commerce is the online sale of goods or services through storefronts, marketplaces, mobile apps, and supporting payment and fulfilment systems. Its important assets include customer identities and addresses, payment data or payment tokens, order records, pricing, and account credentials. Availability and transaction integrity matter alongside confidentiality: customers must be able to place orders, and prices, inventory, and delivery details must not be altered improperly.
Security concerns span public websites and APIs, account takeover and payment fraud, vulnerable third-party components, and integrations with payment, logistics, and marketing providers. TLS protects communications, while strong authentication, secure session handling, input validation, patching, and monitoring help protect accounts and transactions. Payment-card environments may fall under PCI DSS; privacy obligations also govern personal data. E-commerce operators need tested controls for detecting fraud, limiting access, preserving audit records, and responding when systems or transaction data are compromised.
Weekly headline count for the current query.
UK government Minister confirms that breached health records of UK Biobank volunteers were up for sale on Chinese ecommerce platforms before being removed
The South Korean police are tracking the suspect behind a cyber-attack targeting e-commerce giant Coupang
Department store Harrods has notified e-commerce customers of a major data breach
Cybercriminals are ramping up scams via darknet marketplaces, selling phishing kits for $100-$1000
The “Eriakos” info-stealing campaign is using hundreds of fake web shops to defraud victims
Researchers discover 75,000+ domains hosting fraudulent e-commerce sites, in a campaign dubbed BogusBazaar
Researchers warn that millions of consumers’ PII could be at risk due to exploitable vulnerabilities and a lack of basic security protocols in e-commerce web apps
Online merchants plan to increase budgets and new hires
E-commerce giant looks to improve customer trust in its marketplace
An increased focus on security allows furnishings retailer to boost its e-commerce operations
Discovered by CloudSEK, the malicious campaign relies on open source Android malware
Zero-day was linked to malicious Pinduoduo apps
Malicious e-commerce campaign ongoing since December 2021
Persistent fraud threatens trust in e-commerce
Commission orders e-commerce platform to compensate small businesses and improve security
From today, UK shoppers will have to provide a combination of two forms of identification at checkout when making an online purchase