November 14, 2016 By Douglas Bonderud 2 min read

No longer considered Black Friday’s little brother, Cyber Monday is now a commercial force in its own right. As noted by CBS News, the e-commerce event has garnered more “editor’s choice” deals on high-profile sites than its older sibling. However, Help Net Security points out that online shopping security is also making an impact: A Computop survey found that 62 percent of shoppers plan to avoid shopping this Cyber Monday. So what’s behind this purchasing pause?

The Digital Divide

According to the survey, 76 percent of shoppers plan to order from online sites this holiday season, yet almost the same amount are sidestepping Cyber Monday shopping. This digital divide stems in part from increasing consumer savvy: 71 percent of consumers now check to see if sites have eTrust or secure sockets layer (SSL) certificates, while 64 percent are more careful about how and where they provide credit card information. Additionally, 61 percent have looked into the liability policy associated with their primary method of payment.

What’s more, 74 percent of respondents said they were “concerned” about disclosing credit card info online. This sets up an interesting dynamic; consumers see the benefits of web-based purchasing but are increasingly worried about online shopping security.

Case of the Mondays?

So why does Cyber Monday get singled out as the day to avoid? The simplest answer is high traffic volumes. Do a quick search for “Cyber Monday safety” and a variety of guides pop up, all aimed at helping consumers avoid scams during the shopping extravaganza.

Lifewire, for example, suggested looking for Monday deals using a store’s official website rather than a search engine to avoid phishing scams and fake apps and warned users to avoid email and pop-up coupons that offer deals that look too good to be true.

Since so many shoppers are eager to track down great bargains, the sheer volume of credit-ready web traffic to major retailers makes Cyber Monday an ideal attack vector for cybercriminals. Other events, such as Alibaba’s Singles’ Day, take in even more money than the post-Black Friday bonanza. As noted by Fortune, the online event registered more than $1 million worth of sales in just five minutes this year, making it another high-profile target for fraudsters.

Online Shopping Security Challenges

While secure e-commerce portals can help cultivate an entirely new group of consumers, even minor online shopping security problems may encourage users to visit physical stores or prioritize online shopping outside the confines of traffic-heavy Cyber Monday.

Expect this issue to get worse before it gets better. With consumers more tech-savvy than ever and other shopping events doing significantly more business than their stateside counterparts, keeping credit details close to the chest may be the best interim option until retail sites offer better authentication and guaranteed safe transactions.

More from

Mobile device security: Why protection is critical in the hybrid workforce

4 min read - In our mobile-first/mobile-last world, many employees’ work days both start and end on a mobile device. Mobile devices are now essential tools for productivity and communication. As many organizations transition to hybrid work environments, mobile devices offer a rich target for malicious actors because they are often the least protected corporate devices and offer platforms from which to launch social engineering attacks.Unlike traditional computers, which are generally well-defended with antivirus software and cybersecurity protocols, mobile devices are frequently left vulnerable…

Abusing MLOps platforms to compromise ML models and enterprise data lakes

15 min read - For full details on this research, see the X-Force Red whitepaper “Disrupting the Model: Abusing MLOps Platforms to Compromise ML Models and Enterprise Data Lakes”.Machine learning operations (MLOps) platforms are used by enterprises of all sizes to develop, train, deploy and monitor large language models (LLMs) and other foundation models (FMs), as well as the generative AI (gen AI) applications built on top of these models. The rush to leverage AI throughout enterprises has meant that security has been often…

Router reality check: 86% of default passwords have never been changed

4 min read - Misconfigurations remain a popular compromise point — and routers are leading the way.According to recent survey data, 86% of respondents have never changed their router admin password, and 52% have never adjusted any factory settings. This puts attackers in the perfect position to compromise enterprise networks. Why put the time and effort into creating phishing emails and stealing staff data when supposedly secure devices can be accessed using "admin" and "password" as credentials?It's time for a router reality check.Rising router risksRouters…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today