Heartland (HPY) Implements E2EE System
From Heartland Payment Systems
“Monday’s successful test involved Zones 1, 2, 3 and 4,” detailed Steven M. Elefant, Heartland’s executive director of end-to-end encryption. “We believe that protecting data in these zones alone will significantly impact the protection of cardholder data.
ISR News: Google’s Top 10 Malware Sites
Excerpts From IT Pro
Google identifies the ten domains responsible for compromising the most number of sites on the internet. In response to a recent surge in websites being infected with malware, Google has revealed the top ten most popular malware sites in the last couple of months.
ISR News: CardSystems Breach Spurs Suit
Excerpts From Digital Transactions
Four years later, the fallout from the notorious CardSystems Solutions Inc. data breach—at the time the biggest hacking of payment card data ever—surfaced last week and looks like it could go on for months or even years. Merchant acquirer Merrick Bank Corp. is suing Savvis Inc., the company that inspected CardSystems before the breach, for alleged negligence because Savvis had concluded that the processor’s security systems met Visa Inc.’s standards.
ISR News: Credit Card Fraud Explodes
Excerpts From PC World
In 2008, 39 percent of victims saw such charges, more than twice the 15 percent from 2007, according to the study. Opening a new credit account in the victim’s name is still the most common use of a victim’s identity, involving about two-thirds of all ID theft cases. The data is based on the experiences of ID theft victims who contact the ITRC.
ISR News: Twitter Gets Phished Hard
Excerpts From CIO
Both Twitter and Facebook have been hit with phishing attacks in recent days. “The social networking attacks are becoming increasingly common,” said Jamie De Guerre, chief technology officer with antispam vendor Cloudmark. “Spammers are really moving to attack social networks because of the popularity of the social networks and also because they’re not as well defended as most e-mail platforms.”
ISR News: MasterCard’s New P2P Platform
Excerpts From Finextra
Senders initiate transfers to any domestic mobile phone number via SMS message, mobile Web browser or a downloadable MoneySend application. Upon initiation of the transfer, the sender approves the request by entering the MoneySend mobile PIN which only the accountholder knows. Pre-registered recipients then receive a text message confirmation of the transfer. Non registered users get an SMS informing them the payment is pending.
ISR News: Twitter Security Exploit Active
Excerpts From PC World
The “Twitter porn names” game, currently Twitter’s top-trending topic (things that are twittered the most), may be a fun distraction that gives you and your friends something to tweet about. But it also has a security hole — one that is no technical snafu. It could be simple human error, but it’s also possible that this security hole is an example of truly sneaky social engineering.
ISR News: Heartland Fights MasterCard Fine
Excerpts From Finextra
“Heartland therefore considers the MasterCard fine to be in direct violation of both the MasterCard rules and applicable law and it intends and is prepared to vigorously contest and it has recommended to its sponsor banks that they vigorously contest, through all means available including litigation if necessary any liability that may be asserted or imposed upon Heartland or its sponsor banks by reason of this fine,” says Carr.
Heartland Regains PCI Compliant Status
By Anthony M. Freed, Information-Security-Resources.com Financial Editor
Heartland’s removal from the list of compliant payment processors had followed revelations that the company had suffered what may have been the largest data breach of payment card information to date, although details of the incident and similar events at RBS WorldPay (RBS) have not been made available due to ongoing investigations.
ISR News: Cybercrime Targets Consumers
Excerpts From Broadband Finder
One expert has advised consumers and web users to be extra vigilant as tough economic times could lead to some people committing acts of cyber crime. A spokesman for Unisys, an international company which specialises in a host of information technology solutions, said even people who you may think are not capable of such deeds could be tempted as the recession continues.
