Weak security opens door to credit card hacks