Online retailers could be forced to take websites offline amid global cyber security threat

Online retailers could be forced to take websites offline amid global cyber security threat

Online retailers could be forced to take their websites offline after critical security flaws were discovered in a programming language used by online shops, prompting urgent warnings from cyber security agencies worldwide.

The UK’s National Cyber Security Centre has urged businesses to immediately address vulnerabilities in PHP, which underpins a significant proportion of the world’s websites, including ecommerce platforms and websites built using WordPress.

The flaws, which reportedly went undetected for at least a decade, could allow hackers to access sensitive customer information, disrupt services and infiltrate businesses’ wider IT systems.

The NCSC has warned that organisations unable to implement the necessary security fixes should consider taking their websites offline until the vulnerabilities can be addressed.

The UK government said it was working to identify potential exposure across its own online services and urged businesses of all sizes to follow official cyber security guidance.

Amazon revealed that hackers had attempted to exploit the vulnerabilities in its systems, including an attack on one of its cyber security decoy systems on 17 October.

Further attempts were detected on 21 October, with Amazon security chief CJ Moses warning that artificial intelligence was accelerating the speed at which cyber criminals could exploit newly discovered weaknesses.

The vulnerabilities were initially identified using AI, but details emerged on social media before the PHP Foundation could release its planned security update.

The incident has already prompted widespread disruption, with government websites and other online services temporarily taken offline in several countries as a precaution.

The US National Security Agency warned that the vulnerabilities could provide attackers with direct access to website servers and databases, potentially enabling them to steal sensitive data or disrupt services.

Cyber security firm Wiz estimated that around 70 per cent of the internet could be affected, although the figure has not been independently verified.

Businesses have been urged to implement security patches as soon as they become available, with the NCSC advising organisations to temporarily suspend vulnerable systems where immediate fixes are not possible.

Online retailers could be forced to take websites offline amid global cyber security threat

Online retailers could be forced to take their websites offline after critical security flaws were discovered in a programming language used by online shops, prompting urgent warnings from cyber security agencies worldwide.

The UK’s National Cyber Security Centre has urged businesses to immediately address vulnerabilities in PHP, which underpins a significant proportion of the world’s websites, including ecommerce platforms and websites built using WordPress.

The flaws, which reportedly went undetected for at least a decade, could allow hackers to access sensitive customer information, disrupt services and infiltrate businesses’ wider IT systems.

The NCSC has warned that organisations unable to implement the necessary security fixes should consider taking their websites offline until the vulnerabilities can be addressed.

The UK government said it was working to identify potential exposure across its own online services and urged businesses of all sizes to follow official cyber security guidance.

Amazon revealed that hackers had attempted to exploit the vulnerabilities in its systems, including an attack on one of its cyber security decoy systems on 17 October.

Further attempts were detected on 21 October, with Amazon security chief CJ Moses warning that artificial intelligence was accelerating the speed at which cyber criminals could exploit newly discovered weaknesses.

The vulnerabilities were initially identified using AI, but details emerged on social media before the PHP Foundation could release its planned security update.

The incident has already prompted widespread disruption, with government websites and other online services temporarily taken offline in several countries as a precaution.

The US National Security Agency warned that the vulnerabilities could provide attackers with direct access to website servers and databases, potentially enabling them to steal sensitive data or disrupt services.

Cyber security firm Wiz estimated that around 70 per cent of the internet could be affected, although the figure has not been independently verified.

Businesses have been urged to implement security patches as soon as they become available, with the NCSC advising organisations to temporarily suspend vulnerable systems where immediate fixes are not possible.