Internal data breaches a rarity

In 85 percent of the cases, 7Safe found that the compromised information was payment and card data, and the main attack route was through the sort of unsophisticated SQL injection attacks databases are supposed to be able to resist. Shared hosting was a common theme, whereby an attacker undermines one website and uses the same vulnerability to attack others on the same host.

…

“The analysis proves that many organisations who declare themselves compliant with the PCI Data Security Standards are not even close,” the report concludes.

via Internal data breaches a rarity, study finds ( – Software – Security ).

Related posts

• The Death Of PCI DSS? Don’t Be Silly – Security Blog – InformationWeek (0)
• Restructuring the Contact Center for PCI Compliance (0)
• RBS WorldPay Breach Rings Alarm Bells About Acquirer Security (1)
• PCI Post-Audit Pain (0)
• PCI Cairo – December 1 2008 (0)

---

Did you enjoy this post? Why not leave a comment below and continue the conversation, or subscribe to my feed and get articles like this delivered automatically each day to your feed reader. If you don't have a feed reader, you can always have these articles delivered to your email inbox every day. Click here to sign up.