Security News

PCI Pal announced a new collaboration with Oracle to offer its contact center customers additional security and compliance options for Cardholder Not Present payments. Bringing together Oracle's market-leading Enterprise Session Border Controller with PCI Pal's proven PCI compliance solutions, Oracle customers can ensure that their voice interactions and sensitive cardholder data are secure.

With many companies struggling to retain qualified CISOs or security managers, the lack of long-term security thinking is severely impacting sustained compliance within the Payment Card Industry Data Security Standard. Additional findings shine a spotlight on security testing where only 51.9 percent of organizations successfully test security systems and processes as well as unmonitored system access and where approximately two-thirds of all businesses track and monitor access to business critical systems adequately.

PCI Pal announced the addition of Speech Recognition capability for both its Agent Assist and IVR Payment solutions. With this new feature, PCI Pal users now have the option of allowing callers to securely speak their sensitive card details while PCI Pal processes the data and prevents it from entering the company's environment.

PCI Pal has announced the formation of the company's first Advisory Committee. Neira Jones is confirmed as the inaugural Advisory Committee member.

The enterprise-trusted, build-to-production container security solution now includes extensive compliance reporting and enforcement for PCI DSS, GDPR, and other industry and government standards, as well as new workflows specifically designed to make it easy for DevOps teams to track critical vulnerabilities and to ensure - and prove - compliance. With a single click, DevOps teams can enable NeuVector's pre-configured compliance templates to identify any potential industry compliance issues and generate audit reports for PCI DSS, GDPR, and other stringent - and often changing - data security regulations.

PCI Pal, the global provider of secure payment solutions, announced that its Agent Assist solution is now compliant with key Avaya Contact Center solutions, enabling enterprises to integrate telephone payment security into their existing telephony systems to help achieve PCI DSS compliance for telephone and digital payments. "Compliance testing our Agent Assist application with Avaya Aura Experience Portal helps give customers looking to incorporate a PCI Compliant payment card security solution into their existing telephony and contact center infrastructure a number of benefits," said Darren Gill, Chief Revenue Officer, PCI Pal.

When Adobe released security updates for Magento last week, it warned that the Magento 1.x branch is reaching end-of-life and support on June 30, 2020, and that those were the final security patches available for Magento Commerce 1.14 and Magento Open Source 1. "If you have a store that continues to run on Magento 1 after June 30, please be aware that from that date forward you have increased responsibility for maintaining your site's security and PCI DSS compliance," Adobe warned.

The PCI Security Standards Council has updated the standard for payment devices to enable stronger protections for cardholder data. The PCI PIN Transaction Security Point-of-Interaction Modular Security Requirements 6.0 enhances security controls to defend against physical tampering and the insertion of malware that can compromise card data during payment transactions.

AIC and Parade Technologies jointly announced the two companies will align on PCI Express Gen 4 retimer technologies to enable the launch of a pioneering PCI Express Gen 4 appliance ideal for composable GPU, AI, HPC workloads. AIC's server hardware, supporting multiple PCI Express Gen 4 slots in a single rackmount chassis, is a flexible and compact extension box accommodating accelerators such as GPUs, NIC, FPGA and NVMe drives.

Organizations are creating the perfect storm by not implementing security basicsEuropean organizations have a false sense of security when it comes to protecting themselves, with only 68% seeing themselves as vulnerable, down from 86% in 2018, according to Thales. Average cost of DNS attacks hovering around $924,00079% of organizations experienced DNS attacks, with the average cost of each attack hovering around $924,000, according to EfficientIP. PoC RCE exploit for SMBGhost Windows flaw releasedA security researcher has published a PoC RCE exploit for SMBGhost, a wormable flaw that affects SMBv3 on Windows 10 and some Windows Server versions.