Intelligent CISO Issue 80 | Page 29

EDITOR ’ S question s the festive retail frenzy

A approaches , businesses and consumers must prepare for a surge in cyberthreats . The promise of massive discounts attracts not only shoppers but also cybercriminals eager to exploit vulnerabilities in online systems and user behaviour . The adage ‘ hackers do not hack in ; they log in ’ is a stark reminder of the primary tactics used at this time of year – phishing attacks , credential theft and account compromise .

One of the most significant risks during peak shopping seasons is phishing . Cybercriminals create convincing emails or advertisements that mimic trusted retailers , tricking users into visiting malicious websites designed to steal login credentials or payment information . These attacks are increasingly sophisticated , often exploiting urgency – such as ‘ limited stock ’ or ‘ offer ends soon ’ – to pressure victims into acting hastily . Businesses must educate customers to scrutinise website addresses , avoid clicking on suspicious links and verify the authenticity of promotional emails . heightened during Black Friday , as users log in to numerous platforms to secure the best deals . Retailers can mitigate this threat by implementing Multi-Factor Authentication ( MFA ) and monitoring for unusual account activity . Consumers should also create unique , strong passwords for each platform and activate MFA wherever available .
E-commerce businesses should be prepared for an increase in brute-force and bot attacks . Automated tools are used to test stolen credentials on retail platforms , potentially leading to unauthorised transactions and eroding customer trust . Retailers should invest in robust fraud detection systems that can identify and block suspicious login attempts and transactions in real-time .
It is also essential for businesses to secure their backend infrastructure . The increased traffic makes systems vulnerable to Distributed Denial of Service ( DDoS ) attacks , which can disrupt websites and result in significant revenue loss . Web application firewalls ( WAFs ) and scalable server capacities can help protect against these threats .
Businesses must educate customers to scrutinise website addresses , avoid clicking on suspicious links and verify the authenticity of promotional emails .
Account compromise is another major concern . Many users reuse passwords across multiple platforms , enabling cybercriminals to exploit stolen credentials from prior breaches to access online shopping accounts . This risk is particularly
The stakes are high during the festive season , but with proactive security measures , awareness among users and constant vigilance , businesses can ensure that customers log in for great deals – not costly compromises .
DURGAN COOPER , CETSAT CHAIRMAN AND CYBERSECURITY EXPERT WHO ADVISES THE HOUSE OF LORDS
WWW . INTELLIGENTCISO . COM 29