Pointe Solutions, Inc.

09/18/2025

2025 PCI Community Meeting

10/24/2023

Attending 2023 PCI Community Meeting in Dublin.

10/24/2022

Last out

03/30/2017

West Chester University tops the list.

02/10/2017

https://krebsonsecurity.com/2017/02/fast-food-chain-arbys-acknowledges-breach/

12/16/2016

A third suspect alleged to be responsible for the 2014 JPMorgan Chase data breach, which affected more than 83 million customers, was arrested Dec. 14 after

11/02/2016

http://www.bankinfosecurity.com/blogs/cyber-mandates-for-big-banks-would-build-on-earlier-guidance-p-2301?rf=2016-10-26-eb&mkt_tok=eyJpIjoiWW1FMFptRTVZbUl3TkRnMCIsInQiOiJaM2dvUVBIU3ZxRlRSYXpnVlY4ZG1KOE94eXhlMFo4Skg5SG1rQ2RZZ0dvbVNPTTZKK1JMOUFiOHFXd0xnK3BHTkFQREgzQUFyXC9GK0NINGY2OHVsS251aEhHNHpxbWErWEx4RW5RRjhEM1E9In0%3D

05/06/2015

As you may already know, SSL and early TLS are not considered strong cryptography and cannot be used as a security control after 30th June, 2016. Prior to this date, existing implementations that use SSL and/or early TLS must have a formal Risk Mitigation and Migration Plan in place.

Effective immediately, new implementations must not use SSL or early TLS. POS POI terminals (and the SSL/TLS termination points to which they connect) that can be verified as not being susceptible to any known exploits for SSL and early TLS, may continue using these as a security control after 30th June, 2016.

The PCI Council has just released PCI DSS version 3.1, which calls for mothballing the SSL encryption protocol. PCI DSS version 3.1 must be used for all PCI assessments after 30th June, 2015. Again, clients have until 30th June, 2016 to comply with this requirement as long as a Risk Mitigation and Migration Plan is in place.

http://www.bankinfosecurity.com/interviews/pci-dss-version-31-whats-new-i-2648?rf=2015-04-20-eb&mkt_tok=3RkMMJWWfF9wsRonv67KZKXonjHpfsX%2B6uwkUK%2Bg38431UFwdcjKPmjr1YsDStQ%2FcOedCQkZHblFnVwNS62vRKkNqKYK

The PCI Council has just released PCI DSS 3.1, which calls for mothballing the SSL encryption protocol. What do security leaders need to know about the revised

03/18/2015

http://www.cnbc.com/id/102477081 #.

Apple and the banks both have some serious explaining to do.

03/28/2014

Lessons Learned From Target Security Breach and PIN Security (TR-39) Audits Due in 2014...

http://www.pointesolutionsinc.com/news.html

Pointe Solutions provides expert and flexible audit consulting for information technology, operations, payment systems and regulatory compliance.

02/06/2014

Last week, Target told reporters at The Wall Street Journal and Reuters that the initial intrusion into its systems was traced back to network credentials that were stolen from a third party vendor. Sources now tell KrebsOnSecurity that the vendor in question was a refrigeration, heating and air con...

01/08/2014

JPMorgan Chase will pay more than $2 billion in fines for violations of the Bank Secrecy Act tied to failure to report suspicious activity related to Bernie