Journey to the Cloud
Last week, I had the privilege of speaking on a webinar with F5 about the complexities of securing internally created Large Language Models (LLMs) for organizations. This wasn’t about protecting end-users from asking ChatGPT how to make apple pie, it was about helping organizations safeguard their internal models from disclosing sensitive information. I was prepared […]
Governance of AI and Other Emerging Technologies: Balancing Innovation and Responsibility
Artificial Intelligence (AI) and other emerging technologies, such as blockchain, IoT, quantum computing, and biotechnology, are not just reshaping industries and societies but also offering a beacon of hope. These innovations bring immense potential to solve complex problems, drive efficiency, and enhance the quality of life. However, they also raise critical questions about ethics, privacy, […]
Inside the 2025 PCI SSC North America Community Meeting: Insights, Myths, and Key Takeaways
This week, the payments security community gathered in Fort Worth, Texas, for the highly anticipated 2025 PCI SSC North America Community Meeting. Held from September 16–18, the event brought together Council staff, industry experts, and stakeholders from across North America to discuss the latest in payment card security, technical updates, and collaborative opportunities. Setting the […]
Legacy Stripe API Exploited: Why PCI DSS Requirement 6.4.3 is Critical for Payment Security
The digital payment ecosystem is under constant attack, and a recent campaign exploiting a legacy Stripe API has brought a new level of urgency to securing payment pages. Cybercriminals used this API to validate stolen credit card details, combining it with malicious scripts injected into payment pages to skim sensitive data. This attack highlights the evolving sophistication […]
Navigating the New PCI DSS SAQ-A Updates: What Merchants Need to Know
The Payment Card Industry Security Standards Council (PCI SSC) has introduced significant updates to the Self-Assessment Questionnaire A (SAQ-A), effective March 31, 2025. These updates significantly change merchant eligibility requirements and compliance obligations, particularly for e-commerce businesses that outsource cardholder data processing. While the removal of two specific compliance requirements, 6.4.3 and 11.6.1, might initially […]