Top 10 Security Breaches of 2008

221622 Resource 202618 202768 202768 1230077120205 1230095055648 Controlled PCI Compliance Does Not Equal Security

Growing number of firms report hacker attacks after adhering to PCI Compliance regulations

An article about the <a title="Top 10 Security Breaches of 2008" href="http://www.bankinfosecurity.com/articles.php?art_id=1120&opg=1" target="_blank">top 10 security breaches of 2008</a>, cited that 2 out of the 10 breaches were done to companies who were in compliance with PCI regulations.  Both Maine-based Hannaford Brothers grocery store chain and ski resort Okemo were hit by hackers that installed malicious software on their Websites to capture credit card data.  And at the time of both attacks, the companies were PCI compliant.  These firms now share company with the likes of Forever 21 – a retail clothing company – that was <a href="http://linuxinsider.com/story/security/64926.html">victim to a similar attack</a> back in October. I liked how the author summarized PCI compliance:  <blockquote dir="ltr" style="MARGIN-RIGHT: 0px">Lesson Learned:  PCI compliance is like a driver's license -- it may mean that a retailer has passed the test for compliance, but doesn't necessarily mean it is in compliance. </blockquote>At the risk of sounding redundant, we will stress again, that companies must do more that just attain PCI compliance.  They must constantly test and re-test their Websites for the latest vulnerability threats, as 400 new ones emerge every month.by Erin Swanson <a href="mailto:Eswanson@cenzic.com">Eswanson@cenzic.com</a> 9 application/xml false pci compliance Top 10 Security Breaches of 2008 Ghost of Christmas Past (TJX) Still Casts Specter on Present and Future http://www.bankinfosecurity.com/articles.php?art_id=1120&opg=1 Why Do Bad Things Happen to PCI-Compliant Companies? PCI DSS compliance does not equal security http://linuxinsider.com/story/security/64926.html PCI compliance is like a driver's license - it may mean that a retailer has passed the test for compliance, but doesn't necessarily mean it's in compliance. Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727) 127.0.0.1 127.0.0.1 eswanson 64.60.123.45 false true false false true 204329 false false true false false false true 202618 blog blogsite/Cenzic/web