Payment Security: Understanding the Four Corner Model

Introduction Online shopping digital payment transactions may seem quite simple, but in reality, just one single transaction sets off multiple, long-chain reactions. The Payment Card Industry comprises debit cards, credit cards, prepaid, e-purse/e-wall… Continue reading Payment Security: Understanding the Four Corner Model

Achieving PCI DSS Compliant Firewalls within a Small Business

The most important and integral part of any data security begins with having firewalls installed in the environment. Not just that, installing firewalls is an essential requirement of the Payment Card Industry Data Security Standard (PCI DSS). However… Continue reading Achieving PCI DSS Compliant Firewalls within a Small Business

How Much is Your Data Worth on the Dark Web?

You may not know much about the dark web, but it may know things about you.
What is the Dark Web?The dark web is a part of the internet that is not visible to search engines. What makes the dark web, dark? it allows users to anonymise their identity by… Continue reading How Much is Your Data Worth on the Dark Web?

British Airways Hack Update: Caused by Injected Script & PCI DSS Non-Compliance is Suspected

On Friday (7th September 2018), British Airways disclosed between 21st August 2018 and 5th September 2018, 380,000 BA customer’s payment card transactions were compromised by a third party through its website and mobile app. This data include… Continue reading British Airways Hack Update: Caused by Injected Script & PCI DSS Non-Compliance is Suspected

British Airways Customer Data Stolen in Website and Mobile App Hack

In a statement, British Airways stated: “From 22:58 BST August 21 2018 until 21:45 BST September 5 2018 inclusive, the personal and financial details of customers making bookings on ba.com and the airline’s app were compromised.” The airline said… Continue reading British Airways Customer Data Stolen in Website and Mobile App Hack

Cyber Security Roundup for April 2018

The fallout from the Facebook privacy scandal rumbled on throughout April and culminated with the closure of the company at the centre of the scandal, Cambridge Analytica.

Overview of Facebook and Cambridge Analytica
Facebook’s Zuckerberg faces formal… Continue reading Cyber Security Roundup for April 2018

Cyber Security Roundup for March 2018

In the wake of the global political fallout over the Salisbury nerve agent attack, there are reports of a growing threat of Russian state or Russian state-affiliated hacking groups conducting cyber attack reprisals against UK organisations, g… Continue reading Cyber Security Roundup for March 2018

Cyber Security Roundup for January 2018

2018 started with a big security alert bang after Google Security Researchers disclosed serious security vulnerabilities in just about every computer processor in use on the planet. Named ‘Meltdown’ and ‘Spectre’, when exploited by a ha… Continue reading Cyber Security Roundup for January 2018

Distributed Guessing Attack Reels in Payment Card Data

A research paper describes vulnerabilities enabling distributed guessing attacks which allow an attacker to collect payment card data across a number of sites without triggering alerts. Continue reading Distributed Guessing Attack Reels in Payment Card Data