At least according to the ICO’s recent online survey, results published last week (www.ico.gov.uk). Taking a stroll down the local shopping mall a while back, it appears most retailers don’t understand wireless security settings, either. A whopping 98% of visible devices in a 3-400 unit shopping mall appear to use WEP. Fortunately, leading broadband providers
40% of home Wi-Fi users don’t understand security settings Read More »
As you might of heard in the press, ISSA-UK have released a new security standard that is primarily aimed at small / medium sized businesses. The intent of the standard is to ensure free, open and practical advice is available to business owners globally. What sets this apart from other standards is that it is
ISSA 5173 – The Security Standard for SMEs Read More »
Blackfoot have arranged a half-day educational event around PCI DSS in London on Wednesday March 9th from 13:30 to 19:30, where the following speakers will be presenting their views on the topic. The Standard – Jeremy King – PCI SSC The Acquirer – Eamonn Skyrme – RBS Worldpay The Card Scheme – Andrew Mulvenna –
Find out why QSAs are running scared… Read More »
At the Information Security Leaders conference yesterday, aside from the gang war outside, an interesting debate arose around consumerisation in the workplace. Both Bring-Your-Own and Social Media concepts were wrapped together and addressed by an expert panel. Taking a few steps back, company owners, directors or management have pretty much insisted that employees get free
Anti Social Media Read More »
It saddened me to leave the Information Security Leaders conference today, not because of the range of content, speakers and education available, but for a group of about 20-30 youths chasing a smaller group down Northumberland Avenue – about 4pm in full day light. Once the crowds had dispersed, a young man was lying in
Visa Europe have recently announced that retailers that are using chip and PIN at a store level only have to complete milestones 1 and 2 in order to validate their compliance. Furthermore, if the retailer extends compliance to cover milestones 3 and 4, they would be exempt from any penalties in the event of data
Store Compliance and Visa’s new TIP Read More »
Another bit of news landed in my Inbox this morning, where a retailer claims to be subject to a security breach and as such has completely retired their website. The retailer is well known and has a shop on every high street. A spectacular piece of PR appears on their website now, saying they’ve taken
Lush Cosmetics breach Read More »
Oh I do love this. Apple have come out with another screw to help deter hardware hackers from getting inside MacBooks and iPhone 4s. It’s called a pentalobe, which looks like a Torx screw on first looks, but actually has rounded edges. So what you might say. Well, Apple have been kind enough to uses
Screwed over by Apple? Read More »
I’m still coming across a number of brick and mortar merchants whom have been advised by their QSA to put their store environments into scope of PCI DSS and spend millions of pounds implementing end-point security and network monitoring solutions. Exactly what benefit does this give? Not even high street banks go to this level
Stores still in scope? Read More »
