 |
|||
 What's New
|
 Featured |
||
|
PCI SSC Launches an Online Certification Option “eLearning with Remote Exam Certification” The PCI SSC has enabled a new option for taking courses and completing certification exams online to address the contingency situation caused by COVID-19. PCI SSC Publishes a Guide for Conducting Remote Assessments Due to ongoing travel and meeting restrictions resulting from COVID-19, the PCI SSC has published an additional guide for assessors on the topic of remote assessments. On this website, we can see all the particularities and details to consider to successfully conduct a remote assessment.
PCI SSC Publishes a Guide for Maintaining the Security and Cleanliness of POS Devices Merchants are working harder than ever to protect their customers by frequently cleaning common touchpoints in their stores. One of these common surfaces is point-of-sale (POS) payment terminals, where customers swipe or insert their payment cards and potentially enter a PIN to confirm their purchase. The PCI SSC provides some considerations to avoid damaging POS devices while keeping them clean. |
In this article, Sergio Moreno analyzes one of the topics that most troubles various organizations when they face the issue of storing personal data. |
||
|
In this article, Pablo Gonzalo talks to us about the attack known as Lucky 13, which is a cryptographic attack against TLS protocol implementations, exploiting a design flaw and allowing plaintext to be obtained from encrypted text. |
|||
|
PCI SSC Develops a Temporary Process to Obtain a Valid Second Industry Certification for Recertification as a QSA Due to the widespread closure of testing centers in many countries, the PCI SSC recognizes that QSAs that must recertify before June 30, 2020, may not be able to complete the exams associated with industry certifications before their recertification date. The PCI SSC has developed a temporary process for existing QSAs who, for reasons related to COVID-19, cannot meet the requirement of holding two industry certifications. |
Sergio Moreno presents an article related to the importance of encrypting personal data and the types of encryption available on the market. |
||
 Incident Analysis
|
|||
|
EasyJet
This low-cost airline has revealed that it suffered a “highly sophisticated” cyberattack and that the personal information of 9 million customers was accessed. The company suspects that the attack was probably motivated by card data theft, although thanks to the established security systems, the attackers only had access to a limited set of data. |
|||
|
Diebold Nixdorf
Diebold Nixdorf, one of the leading providers of ATMs and payment technology for banks and retailers, recently suffered a ransomware attack that disrupted some operations. |
 Trends
|
|||||
|
CaixaBank Introduces Facial Recognition at Spanish ATMs CaixaBank has begun a nationwide rollout of facial recognition ATMs. The rollout is the first launched by a financial institution globally that allows users to withdraw money simply by being recognized from the image captured by the terminal's camera, meaning they do not have to manually enter their PIN. JCB Enables Cross-Border QR Code Payments JCB is driving the adoption of QR payments among consumers as part of its quest to be the preferred card brand. The platform can be customized on a variety of devices and payment types. With this new payment method integrated into the platform, partner banks can quickly and easily enable JCB QR code payment for their customer base. |
|||||
| Internet Security Auditors C. Santander, 101. Edificio A, 2º. 08030 Barcelona (Spain) | Tel.: +34 93 305 13 18 C. Arequipa, 1. 28043 Madrid (Spain) | Tel.: +34 91 763 40 47 Calle 90 # 12-28. 110221 Bogotá D.C. (Colombia) | Tel.: +57 (1) 638 68 88 |
|||||
|
This message has been sent pursuant to your authorization to receive commercial communications from Internet Security Auditors. You can view our Data Privacy Policy here. You have the right at all times to exercise the rights of access, rectification, erasure, restriction of processing, objection, and portability provided for in the "Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC" by sending a letter addressed to Internet Security Auditors, Calle Santander, 101. Edificio A-2. 08030 Barcelona (Spain), or by email at the following address: legal@isecauditors.com. If you only wish to unsubscribe from these communications, click on the following link and send that email from the email address where you received our communication: marketing@isecauditors.com |