How Will Strong Customer Authentication Impact the Security of Electronic Payments?

Reading Time: 3 minutes The EU’s updated Payment Services Directive, PSD2, will introduce a new technical standard that regulates strong customer authentication (SCA).

The post How Will Strong Customer Authentication Impact the Security of Electronic Payments? appeared first on Security Intelligence.

Continue reading How Will Strong Customer Authentication Impact the Security of Electronic Payments?

More_eggs, Anyone? Threat Actor ITG08 Strikes Again

Reading Time: 14 minutes X-Force IRIS observed ITG08, which has historically targeted POS machines in the retail and hospitality sectors, injecting malicious code into online checkout pages to steal payment card data.

The post More_eggs, Anyone? Threat Actor ITG08 Strikes Again appeared first on Security Intelligence.

Continue reading More_eggs, Anyone? Threat Actor ITG08 Strikes Again

Poshmark users urged to change password as clothing retailer probes breach

Clothing re-seller Poshmark announced in a note to customers it has experienced a data breach that resulted in outsiders making off with some of their personal information. The company sent an email to customers Friday alerting them to a security incident in which an “unauthorized third party” accessed customers’ usernames, first and last names, gender and city. Hackers also stole email addresses, user ID, size information and, most notably, encrypted passwords. Poshmark advised users to update their password as a precaution. “The data acquired does not include any financial or physical address information, and we do not believe your password was compromised,” the company said in the email, echoing a data breach notification posted Thursday on its website. Poshmark did not say how many of its roughly 40 million users are affected. The company has retained security consultancy Kroll to investigate the breach, according to TechCrunch. Poshmark, founded in 2011, […]

The post Poshmark users urged to change password as clothing retailer probes breach appeared first on CyberScoop.

Continue reading Poshmark users urged to change password as clothing retailer probes breach

UK’s Largest Mobile Carrier Relies on AWS and Imperva FlexProtect for Web Delivery and 360-Degree Application Protection

In today’s highly-competitive telecommunications market, the website is integral to successful and fast customer service. Downtime due to intrusion, data breach, or DDoS attack is intolerable. It’s why ten of the largest global telecommunic… Continue reading UK’s Largest Mobile Carrier Relies on AWS and Imperva FlexProtect for Web Delivery and 360-Degree Application Protection

Colombian point-of-sale lender ADDI nabs $12.5 million from Andreessen Horowitz

Andreessen Horowitz <3 Latin American startups.
Latin America is the only region outside of the U.S. where the venture firm is routinely investing capital, and it just made another commitment, doubling down on its early-stage support for the point-o… Continue reading Colombian point-of-sale lender ADDI nabs $12.5 million from Andreessen Horowitz

IDC: Asia-Pacific spending on AI systems will reach $5.5 billion this year, up 80 percent from 2018

Spending on artificial intelligence systems in the Asia-Pacific region is expected to reach $5.5 billion this year, an almost 80 percent increase over 2018, driven by businesses in China and the retail industry, according to IDC. In a new report, the research firm also said it expects AI spending to climb at a compound annual […] Continue reading IDC: Asia-Pacific spending on AI systems will reach $5.5 billion this year, up 80 percent from 2018

Payment scammers hit 201 campus checkouts with Magecart-inspired tactics

A gang of payment-card scammers has targeted 201 college and university campus stores, trying to steal students’ financial data in a Magecart-style attack, according to new research. The new cybercrime group, labeled Mirrorthief, injected malicious code on payment checkout pages at hundreds of U.S. and Canadian stores, according to TrendMicro research published Friday. By compromising PrismWeb, an e-commerce platform designed for college stores, the attackers could collect payment card details, names, addresses and phone numbers, researchers said. PrismWeb is made by PrismRBS, a subsidiary of the Nebraska Book Company. TendMicro’s report comes as security researchers continue to grapple with an expansion of payment-card thievery along with an apparent surge in demand for stolen financial information. Success by one group inspires imitators in another. The most prominent, Magecart, is a collection of perhaps 12 hacking campaigns that steal payment information by secretly collecting data from online checkout pages. TrendMicro researchers noted that Mirrorthief is […]

The post Payment scammers hit 201 campus checkouts with Magecart-inspired tactics appeared first on CyberScoop.

Continue reading Payment scammers hit 201 campus checkouts with Magecart-inspired tactics

Google Cloud takes aim at verticals starting with new set of tools for retailers

Google might not be Adobe or Salesforce, but it has a particular set of skills, which fit nicely with retailer requirements and can over time help improve the customer experience, even if that means just simply making sure the website or app is running, even on peak demand. Today, at Google Cloud Next, the company […] Continue reading Google Cloud takes aim at verticals starting with new set of tools for retailers