Online stores for governments and multinationals hacked via new security flaw