 |
|||
 What's New
|
 Highlights |
||
|
PCI SSC Delays Publication of PCI DSS v4.0 Until Late 2021 As part of the PCI DSS v4.0 publication process, the PCI SSC has announced that it is seeking additional feedback on the validation documents (ROC, SAQs, and AOC), which will delay the release of the new version until later this year. This delay, however, will not affect the usual coexistence period between versions. PCI SSC Publishes New FAQ Regarding 8-Digit BINs That Will Soon Come Into Use The newly published FAQ #1492 clarifies how this increase in BIN length may affect two specific PCI DSS requirements: Requirement 3.3, which refers to the maximum display of the first six and last four digits of a PAN, and Requirement 3.4, which covers how to make the PAN unreadable while it is stored. More information at the following link: RFC Period Opens for PTS HSM Security Requirements v4.0 In preparation for PTS HSM Security Requirements v4.0 (security for HSM devices), an initial Request for Comments period has been opened to receive feedback from manufacturers and participating organizations. A second RFC will open in the third quarter for organizations and auditors. |
Analysis of the Changes Introduced by PCI SLC v1.1 Alberto Villar reviews the updates in the recently published version 1.1 of the PCI Secure Software Lifecycle Standard. This version clarifies several points and corrects some errors, but above all, expands its scope, also affecting developers of software products for the card payment industry. |
||
|
The Audit team presents the role of a Red Team, what its work and purpose are within an organization, and reflects on how sometimes simple exercises are the ones that yield the greatest benefit. SSL/TLS: A Look at the BREACH Attack In this article, Gonzalo Carrasco explains what BREACH attacks consist of. Starting with some basic explanations to provide context, he instructs us on how these attacks manage to reduce the privacy of communications and how they can be mitigated. |
|||
 Incident Analysis
|
|||
|
Malaysia Airlines Admits Security Incident Compromised Personal Data of Loyalty Program Members
The airline informed its loyalty program members that it had been subject to a security breach for nine months, between June 2019 and March 2020. Personal data such as names, dates of birth, or contact details were reportedly compromised in this incident, but not payment or credit card information. |
|||
|
Personal and Payment Data of Oxfam Australia Members Leaked
The NGO Oxfam Australia suffered a security breach in January 2021, where a database was affected. Up to 1.8 million email accounts, names, phone numbers, mailing addresses, and, in a small number of cases, partial credit card information were extracted. |
|||
|
British Market and Competition Authority Affected by 150 Personal Data Breaches in the Last 2 Years
The CMA, which handles business reports and copies of emails related to business in the United Kingdom, reported 81 cases of unauthorized data disclosure and 40 stolen or lost devices, two of them unencrypted. |
 Trends
|
|||||
|
Mastercard Will Allow Cryptocurrency Transactions on Its Network Following a previous announcement by VISA, Mastercard has announced that it will also allow payment transactions with some cryptocurrencies on its network. In principle, these will only be stablecoins (stablecoin) that link their value to other assets such as the U.S. dollar. VISA Presents Its “Tap to Phone” Solution VISA’s “Tap to Phone” solution allows any mobile device with Android and NFC to become a fully functional point of sale, without the need for additional terminals. Designed especially for small businesses, it is already operating in 15 countries and will also arrive in the United States, United Kingdom, or Italy in 2021, among many others. mPOS Terminal Market: Surpassed $20 Billion in 2019 and Is Projected to Continue Growing 19% Annually Through 2026 The increase in smartphones and improved internet connections in countries such as China, India, and South Africa is driving very high growth in mPOS terminals, ideal for small businesses. What Is Happening with Electronic Payments in Japan Japan is one of the world's leading economies and synonymous with technology and innovation, however, this is not reflected in payment habits, where 75% are still with cash. It Is Estimated That Up to 2.5 Million Biometric Payment Cards Could Be Issued in 2021 According to a study by ABI Research, after many biometric card projects were delayed by the pandemic in 2020, 2021 could lay the groundwork for this type of card to eventually become the main means of payment in the future. |
|||||
| Internet Security Auditors C. Santander, 101. Edificio A, 2º. 08030 Barcelona (Spain) | Tel.: +34 93 305 13 18 C. Arequipa, 1. 28043 Madrid (Spain) | Tel.: +34 91 763 40 47 Calle 90 # 12-28. 110221 Bogotá D.C. (Colombia) | Tel.: +57 (1) 638 68 88 |
|||||
|
This message has been sent pursuant to your authorization for the communication of commercial information from Internet Security Auditors. You can consult our Data Privacy Policy here. You have the possibility to exercise the rights of access, rectification, erasure, restriction, objection and portability provided for in the "Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC" by letter addressed to Internet Security Auditors, Calle Santander, 101. Edificio A-2 08030. Barcelona (Spain), or by email to the following address: legal@isecauditors.com. If you only wish to unsubscribe from these communications, click the following link and send that email from the email address at which you received our communication: marketing@isecauditors.com |