 |
|||
 What's New
|
 Featured |
||
|
2021: Greater security for online payments with PSD2 The new security requirements for online payments will come into effect in the European Economic Area (EEA) in January 2021 as a result of the PSD2 directive. From this date, all online card payments will have an additional layer of security involving strong customer authentication (SCA). Customers will be asked to confirm payments by entering a secret number received by SMS or a code generated by a smartphone app or with a biometric identifier such as a fingerprint or facial recognition. Dates published for 2021 for the PCI SSC training programs via eLearning The PCI SSC makes public the calendar of dates to receive the training and take the corresponding online exam for each of them for the year 2021. Among these trainings are the 3DS, QSA, ISA, CPSA, P2PE, SSF, PCIP, and QPA programs. More information on the official (ISC)² website: Update of the implementation dates of requirement 18-3 of the PCI P2PE standard The PCI SSC has issued a statement whereby, immediately, the change of dates for requirement 18-3 of the PCI P2PE standard becomes effective, which aims to have symmetric encryption keys managed in Key blocks structures. Specifically, this requirement is defined in 3 implementation phases, the first phase reached its deadline in 2019, so it is not affected by this change and for the remaining two phases, the implementation period has been extended by another 2 years, starting from its predefined deadline in the standard. Only 1 in 4 global organizations complies with PCI DSS Global organizations continue to put the data of their customers' cardholders at risk due to the lack of a long-term payment security strategy and execution, according to the Verizon Business 2020 payment security report. |
Risks of rooting our Android device In this article, Héctor Berrocal presents us with an analysis of the risks associated with rooting our Android device, a technique that has been very fashionable in recent years, but which has inherent security implications that should be known. |
||
|
Protection mechanisms against the main email threats Daniel Fuertes tells us, in this article divided into two parts, about the main protection measures and mechanisms that we have today to deal with the threats present in relation to email, that great tool that all organizations use for their internal and external communications. The importance of encryption suites in communications in PCI DSS Diego de la Horra presents us with an article related to the importance of encryption suites in communications through public or untrusted networks, within the PCI DSS payment card data protection standard. Anonymization and Pseudonymization of Personal Data In this article, Sergio Moreno analyzes one of the topics that presents the most controversy and doubts to different organizations when they face the problem of anonymization or pseudonymization of personal data. |
|||
 Incident Analysis
|
|||
|
FireEye
The cybersecurity company FireEye reported that it was hacked by a state intelligence agency. This is the largest theft of cybersecurity tools since the attack on the US National Security Agency in 2016 by a group that has not yet been identified, although the first indications point to Russia. |
|||
|
Montana Hospital Group
Montana Hospital Group suffered a data breach due to a phishing scheme in which hackers used emails to trick employees so that they would provide their login credentials. |
|||
|
WattPad
In June 2020, the user-generated story website Wattpad suffered a huge data breach that exposed almost 268,745,495 million records. |
|||
|
AIS
The researcher and head of Security at Cloudflare, Justin Paine, discovered an open ElasticSearch database when browsing BinaryEdge and Shodan on May 7, 2020. According to Paine's incident summary, the database appeared to be controlled by a subsidiary of a major mobile device based in Thailand. A network operator called Advanced Info Service (AIS). AIS is a major GSM mobile phone operator with 39.87 million customers. |
 Trends
|
|||||
|
IoT payments in cities, cars, and retailers The Internet of Things (IoT) revolution is changing the world as we know it. The point of sale is no longer a destination; it is wherever and whenever the customer wants it to be. Visa is helping to drive this transformation by providing platform-level technologies that enable partners to create and innovate. These new ideas will ultimately shape the future of payments and help people live frictionless lives. A Cashless World VISA has conducted a study and published a report on the innovations underway for a future cashless world. The study explores trends, needs, behavioral patterns, and growth opportunities surrounding payments and highlights five key trends in this regard: friction removal, control, convenience, multi-use, and experiences. |
|||||
| Internet Security Auditors C. Santander, 101. Edificio A, 2º. 08030 Barcelona (Spain) | Tel.: +34 93 305 13 18 C. Arequipa, 1. 28043 Madrid (Spain) | Tel.: +34 91 763 40 47 Calle 90 # 12-28. 110221 Bogotá D.C. (Colombia) | Tel.: +57 (1) 638 68 88 |
|||||
|
This message has been sent pursuant to your authorization to receive commercial communications from Internet Security Auditors. You can view our Data Privacy Policy here. You may exercise your rights of access, rectification, erasure, restriction of processing, objection, and portability as provided for in the "Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC" by sending a letter addressed to Internet Security Auditors, Calle Santander, 101. Edificio A-2 08030 Barcelona (Spain), or by email to the following address: legal@isecauditors.com. If you only wish to unsubscribe from these communications, click the following link and send that email from the email address where you received our communication: marketing@isecauditors.com |