NewsofDay: On CMS systems review from this post: http://securityintelligence.com/cms-hacking-2014-by-the-numbers/ Also for TipofDay: PCI compliance the new page created at Oversitesentry (My blog) http://oversitesentry.com/pci-compliance/
Threatpost blog post: http://threatpost.com/microsoft-recalls-patch-tuesday-exchange-update/109844 about the exchange server patch rollback (uninstall). The TipofDay is about PCI compliance – security policy must be created. some parts of the PCI DSS3.0 standard is not very specific (since… Fixvirus Show – PCI Compliance Discussion, Patch Rollback
What is the reason one hires an independent CPA to check your financial books? Unfortunately even where employees are trustworthy and capable, it makes sense to periodically review their work. Even the PCI Security Standards… Independent review of your IT Security
DARKReading has the highlights of the changes of v3.0 compared with v2.0 SearchSecurity also has a synopsis – with the 5 most important changes: 1. Pentesting (Penetration testing) 2. inventory system components 3. Vendor relationships 4. Antimalware… New PCI DSS v3.0 released Nov 2013
Have you checked wifi signals as to their effectiveness? Is your wifi router/ access point using good encryption technology? Wardriving: Peter Shipley coined the term “wardriving” the practice of deliberately searching a local area looking for… Wardriving: when a hacker checks wifi signals
PCISecurityStandards.org has a website and it’s response to the Target Data breach: “As part of this security effort, the Council maintains that adherence to and maintenance of the Payment Card Industry Data Security Standard (PCI DSS) is… PCI compliance – what does it entail?
Dark Reading has an interesting article about how Target was compliant with PCI(Payment Card Industry) standards and it was not enough. The Point of Sale terminals were infected with malware specific to Point Of Sale terminals,… Develop new & better security postures – PCI compliance is not enough