10/10/2007: We organize one meeting on 7th november in Madrid about PCI DSS

Since the first publication of the standard PCI DSS from VISA and Mastercard a lot of time have passed, but just a few seems have been the changes produced in the market due this norm of abligated fullfilment.

In this unique meeting about Security in Payment Methods all doubts presents since nowadays will be solved from the own and main creators of this standards and the most interested in their fullfilment.

This is the preliminar program:

8:30 Registration
9:00 Daniel Fernández, Internet Security Auditors
9:15 Bruce Mac Nab, SafeNet/Zane Ryan, Dot Force
10:00 Miguel Ángel Domínguez, Internet Security Auditors
10:45 Coffee break
11:15 Pedro Sánchez, Asociación Técnica de Cajas de Ahorros (ATCA)
12:00 Paul Baker, Mastercard
12:45 Lara Fiorani, VISA
13:30 Questions
14:00 Lunch

Where: Hotel NH Eurobuilding.
Date: Novembre 7th 2007

FREE ENTRY. LIMITED PLACES.

Read the schedule here.

07/01/2007: Two members of our technical team in the final of the CTF in the DEFCON USA 2007

The weekend when the classification tests for the final of the contest of the Capture the Flag that will be done during the DEFCON 2007 in Las Vegas this year, more than 200 teams participated and only seven were classified. One of them will have two members of our team in their lines.

The final of the contest will cellebrate in Las Vegas, during the first days of audust, during one of the most veterans and recognized congress of security in the world. One meeting point of the best experts in security, where must be spanish representation with a team formed with experts from Spain that goes there with the serious intention of win the contest, something that won't be easy at all.

We must expect the best luck to that team of technician that, again, shows that the best minds in security is not necessary to be always searched out of our frontiers.

More information in DEFCON USA 2007.

06/01/2007: First company in Spain to be certified as QSA and ASV by the PCI SSC

A new compromise in the specialization of our company and our will of offering the services that our customers require with the corresponding recognition that the achivement of the QSA (Qualified Security Assessor) and the ASV (Approved Scanning Vendor) certifications granted by the PCI SSC (Payment Card Industries Security Standards Council).

This organization, created by the join of efforts of MasterCard Worldwide, Visa International, American Express, Discover Financial Services and JCB vigils for the fulfillment and normalization of the security standards that must follow all the companies that use, transmit or store creditcard holder data.

Within their responsibilities, the PCI SSC, is responsible of the certification, with common criterias of all the "trademarks" of credit cards, of hemologation and certification to those companies that, fulfilling the needed requirements and passing the technical tests, are able of offer the técnical and administrative warranties to be consultants and auditors in the fulfillment of this standard, helping to the companies that must accomplish the requirements in their way of the correct implantation of the rules defined in the norm.

So, Internet Security Auditors becomes the first service provider from Spain, recognized by the 5 most important manufacturers of credit cards in the world upon the PCI SSC, able of offering the needed advisor about the norm PCI DSS (Payment Card Industries Data Security Standard).

Now you can see the PCI DSS Implantation Services that we are offering to help you the accomplishment with this standard, wherever your level is and the requirements of fullfilment and audit you require.

01/01/2007: We begin the year having been the spanish company that have publish most security advisories in 2006

Resulting of the top level of our audit team and our efforts in R&D, we have closed the year 2006 being the spanish company that most vulnerabilities have discobered, communicated and published, all them readables in our advisories section (where already more vulnerabilitaties will be included as we receive confirmation from manufacturers and development teams according they have published updates or patches to solve them).

Without any kind of doubt, all software/hardware manufacturers and all those development teams appreciate our collaboration that allows make their products more secure with the publication of those vulnerabilities to be corrected, knowing that all information regarding them will be published following the "full-disclosure" philosofy that we have adopted.