-
Out-of-Scope Wishful Thinking
Posted on November 17th, 2009 No commentsIsn’t it wonderful how many security vendors are so altruistic that they leap to the microphone to point out the failings of their industry?
Read more:
Out-of-Scope Wishful Thinking -
PCI: Is Your Institution Compliant?
Posted on November 11th, 2009 No commentsRecent Assessments Find Flawed Security PracticesSince the Heartland data breach was announced in January, there’s been no shortage of discussion about the Payment Card Industry Data Security Standard(PCI DSS) and its requirements of merchants and payments processors. But what about financial institutions? Banks and credit unions store large amounts of cardholder data, but often show little awareness of PCI requirements, say security experts, including the Qualified Security Assessors (QSA) who test for PCI compliance.
Read more:
PCI: Is Your Institution Compliant? -
Editor’s Note: Very Sad News
Posted on October 29th, 2009 No commentsWe’re heartbroken to have to report to our readers that our esteemed PCI Columnist, David Taylor, passed away on Tuesday from a sudden heart attack.
Read the original post:
Editor’s Note: Very Sad News -
UNC Latest College to Unveil Data Breach
Posted on October 5th, 2009 No commentsThe University of North Carolina at Chapel Hill this week began notifying the participants in a federally funded mammography study that their personal information may have been breached.
Go here to read the rest:
UNC Latest College to Unveil Data Breach -
Lawsuit: Heartland Knew Data Security Standard was ‘Insufficient’
Posted on October 5th, 2009 No commentsComplaint Says CEO Described PCI as ‘Lowest Common Denominator’ of ProtectionMonths before announcing the Heartland Payment Systems (HPY) data breach, company CEO Robert Carr told industry analysts that the Payment Card Industry Data Security Standard (PCI DSS) was an insufficient protective measure. This is the contention of a new master complaint filed in the class action suit against Heartland, which in January announced a data breach that is now estimated to be the largest known hack, involving 130 million credit and debt card accounts.
Originally posted here:
Lawsuit: Heartland Knew Data Security Standard was ‘Insufficient’ -
Defending PCI: ‘Don’t Blame the Qsa’s’
Posted on September 30th, 2009 No commentsInterview with Bob Russo, GM of PCI Security Standards CouncilSince the announcement of the Heartland data breach in January, the merits of the Payment Card Industry Data Security Standard (PCI DSS) have been questioned, and Bob Russo has led the defense. Russo is general manager of the PCI Security Standards Council, the group responsible for the development, management, education and awareness of the PCI Security Standards. In an exclusive interview conducted at the council’s recent community meeting in Las Vegas, Russo discusses: Why end-to-end encryption is no security panacea; The merits of tokenization, Chip and PIN and other solutions; His response to breached entities that say they were PCI compliant.
See the original post:
Defending PCI: ‘Don’t Blame the Qsa’s’ -
Network Solutions Breach Revives PCI Debate
Posted on August 10th, 2009 No commentsIf Firms are PCI Compliant, Why are They Getting Breached?The recent data breach at Internet domain administrator and host Network Solutions compromised more than 573,000 credit and debit cardholders and begs the question: What more can be done to secure such systems? The incident also raises new questions about the Payment Card Industry Data Security Standard (PCI).
Original post:
Network Solutions Breach Revives PCI Debate -
Microsoft Releases Security Advisory 972890
Posted on July 6th, 2009 No comments(added July 6, 2009) A full-content feed is available at http://www.us-cert.gov/current/index.atom
Read the original:
Microsoft Releases Security Advisory 972890 -
Heartland Tests End-to-End Encryption; Gets Good Reviews
Posted on July 6th, 2009 No commentsAnalysts: Industry Standard is Real Key to Thwarting ThreatsIn the first step of its move toward end-to-end encryption, Heartland Payment Systems (HPY) last week completed the first phase of its pilot project. Heartland, the sixth biggest payments processor, earlier this year announced that it was hit with a data breach, wherein credit card numbers and debit card information were taken by hackers who broke into the payment processor’s internal network. Since the breach was announced, the company has been working toward introducing advanced encryption standard (AES)-encrypted card transactions from merchants to Heartland’s processing platform.
See the original post:
Heartland Tests End-to-End Encryption; Gets Good Reviews -
FCKeditor Releases Version 2.6.4.1
Posted on July 6th, 2009 No comments(added July 6, 2009) A full-content feed is available at http://www.us-cert.gov/current/index.atom
Follow this link:
FCKeditor Releases Version 2.6.4.1



