Featured Blog

On February 26, 2014

Verizon 2014 PCI Compliance Report – Major revelations and suggestions

The 2014 Verizon report indicates that 9 out of 10 failed their PCI DSS baseline assessment. Here are some excerpts from the report:

• “Organizations that are breached tend to be less compliant with PCI DSS than the average of organizations in our resear ...
  Read More

On February 13, 2014

PCI DSS 3.0: New and updated requirements

This was listed in one of the articles about updates on PCI DSS 3.0.  There is too much going on in the retail world with constantly increasing breaches, both high and low profile ones.  Hence all the fuss about data security and compliance.  Coincidentally, this is the year for transitioning to ...

On January 2, 2014

‘Man in the browser attack’ has latched on to Twitter

The last post explained what 'man in the browser attack means.  This is a follow-up detailing how the attack has targeted 'Twitter' accounts to make it easy to spread to enterprise networks. Here is how the malware has been working on 'Twitter' JavaScript code gets into a Twitter ...

On December 30, 2013

‘Man in the browser attack’, a new Malware that invades the security of financial transactions

'Man in the browser attack' at this point is limited to financial frauds, but could spread to other areas.  The attack is now being targeted only at Firefox and Internet Explorer browsers on Windows because the method used to create the attack is quite expensive. Here's how it happens... Read More