If you read the above headline and know your company has an online shop, but you are unsure what platform your website managers are using, or even who has the responsibility for the cyber security of that website, then you have an even bigger problem. If your customer’s personal information leaks (is stolen) from your site, then ignorance will not be a defence. You had better start asking questions – fast.
Back to the zero-day attack…
A vulnerability in the PrestaShop ecommerce platform went undetected and is being exploited by threat actors (that is a quick real-world definition of a zero-day attack)..
Hackers exploited PrestaShop zero-day to breach online stores (bleepingcomputer.com)
My advice: Either you or your IT support need to check whether these issues impact your systems. You need to have a master document that details your systems, hardware, software, online, networks, back-ups, suppliers etc – so when cyber security (or operational) issues arise you and your support teams can quickly check if you are affected. From there you can take fast, effective action.
Clive Catton MSc (Cyber Security) – by-line and other articles
