Blog

We’ve officially launched our 2018 Guide to Payment Card Industry Data Security Standard (PCI DSS) Compliance.

The PCI SSC recently announced the release of a “Payment Data Essentials."

A stored and reflected cross-site scripting vulnerability, CVE-2019-17114, was identified on WiKID Systems 2FA Enterprise Server version 4.2.0-b2047 and earlier.

SecurityMetrics Workforce Security and Compliance Training FAQs.

SecurityMetrics Summit is a virtual data security and compliance conference designed to help businesses close compliance gaps and prevent data breaches.

A reflected Cross Scripting vulnerability, CVE-2019-9955, was identified on several Zyxel devices, specifically on pages that use the mp_idx parameter.

Your corporate network has many attack surfaces, and when you add in extended network offices, branches, and other remote locations, security begins to depend heavily on visibility.

The COVID-19 crisis has presented a variety of challenges to merchants and service providers around the world. We’ve received many questions about the impact of COVID-19 on PCI DSS audits, as well as PCI compliance in general.

Hosted payment processors take on the complexity of compliance and merchants can tend to their business.

‍

At SecurityMetrics, our mission is to help businesses close security and compliance gaps and prevent data breaches.

Compliance with any mandate takes time and planning. But, thousands of customers and readers use PCI Compliance Guide to make the PCI compliance process faster and simpler, as well as better maintain compliance.

A SQL Injection vulnerability, CVE-2019-16917, was identified on WiKID Systems 2FA Enterprise Server through version 4.2.0-b2047.

Multiple Cross-Site Request Forgery issues, CVE-2019-17118, were identified on WiKID Systems 2FA Enterprise Server through version 4.2.0-b2053.

A business continuity plan (BCP) provides a way for organizations to deal with the business impact of any disruptive event and carry on with business.

Network security consists of the policies, procedures, programs, hardware, software, and people you use to protect your corporate network.

Payment card data can easily leak due to poor processes or misconfigured software.

PCI compliance isn’t an event. It’s an ongoing process!

These service guarantees exist to address the financial hardships your business might endure in the aftermath of a compromise.

This blog covers the important changes from PCI DSS version 2.0 and 3.0.

If businesses are determined to provide mobile solutions, it is their responsibility to educate themselves, ensure the security of the solution, and know the risk they’re taking upon themselves.

Shellshock, also known as the Bash Bug, is a software vulnerability that could make your systems vulnerable.

The plug-and-play mindset is ruining Point-of-Sale (POS) security.

If you have any questions, please contact SecurityMetrics support, 801.705.5700.

Find out how to use nature's defense mechanisms to protect your business.