{
  "id": 17124367,
  "title": "Five ways to keep online transactions safe in the wake of AI hacking",
  "url": "https://urgent.news/2026/10/29/five-ways-to-keep-online-transactions-safe-in-the-wake-of-ai-hacking",
  "topic": "ai",
  "section": "AI",
  "published": "2026-10-29T21:00:00.000Z",
  "source": {
    "name": "Straits Times Business",
    "slug": "straits-times-business",
    "url": "https://www.straitstimes.com/business/invest/five-ways-to-keep-online-transactions-safe-in-the-wake-of-ai-hacking"
  },
  "original_language": "en",
  "account": "The recent discovery of a hackable vulnerability in PHP, a coding language used by roughly 70% of websites worldwide, has left businesses and governments scrambling to address the issue. However, even individuals can take steps to protect themselves online. Multi-factor authentication, which requires two forms of verification, such as a password plus a text-based code or security key, is recommended by cybersecurity experts as an added layer of security. Using unique passwords for individual websites, and monitoring transactions, are also advised.\n\nNevertheless, users may have limited control over their safety in the face of advanced hacking techniques. These vulnerabilities, made easier to exploit due to powerful large language models, could lead to data theft, service disruption, or unauthorized network access. Emily Austin, a principal security researcher at Censys, emphasizes that there's little an end user can do beyond hoping the services they rely on are actively patching the issues.\n\nSoftware providers and organizations ultimately bear the responsibility of addressing such vulnerabilities. Companies should promptly install security updates when they become available, as this limits the window of opportunity for malicious actors. However, consumers remain at risk when using services that may not have adequate protection in place. Dan Guido, CEO of Trail of Bits, suggests turning on automatic updates for phones, computers, and home routers to minimize exposure to known vulnerabilities.\n\nIn the age of AI, attackers have a significant advantage, making it crucial for organizations to manage the gap between finding vulnerabilities and fixing them. Consumers should also remain vigilant and wary of unsolicited links, especially during times of heightened cybersecurity threats. Banks, in particular, have been proactive in preparing for such moments, but in the new normal of cyber threats, consumers must be aware, especially when engaging with less secure websites. Adopting passkeys, which are unique digital keys for specific websites, is also recommended as a phishing-resistant alternative to traditional passwords.",
  "summary": "Users can take steps to prevent their data from being compromised by hackers.",
  "key_points": [
    "PHP vulnerability affects 70% of websites, posing online risks",
    "Multi-factor authentication recommended for added security",
    "Consumers must rely on services' patching efforts for safety"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}