Carr's claims did little to stop the filing of numerous lawsuits against the company for negligence, many of which have since been dismissed in court The PCI Security Council, which administers the PCI standard, bluntly refuted Heartland's claims of compliance and its overall security readiness at the time of the breach Speaking with Computerworld this week, Robert Russo, general manager of the PCI Security Council, said the fact that the Heartland breach resulted from a basic SQL injection error also refutes Carr's claims about the sophistication of the attack Even so, Carr's statements have led to greater scrutiny of the PCI standard The intrusion resulted in the "stark realization that passing a PCI security audit does not make a company secure," said Avivah Litan, an analyst with research firm Gartner Inc "This was known well before the breach, but Heartland served as a big pail of ice water thrown on the face of companies complying with PCI," she said 
Share:  Carr's claims did little to stop the filing of numerous lawsuits against the company for negligence, many of which have since been dismissed in court The PCI Security Council, which administers the PCI standard, bluntly refuted <span class="company">Heartland</span>'s claims of compliance and its overall security readiness at the time of the breach Speaking with Computerworld this week, Robert Russo, general manager of the PCI Security Council, said the fact that the <span class="company">Heartland</span> breach resulted from a basic SQL injection error also refutes Carr's claims about the sophistication of the attack Even so, Carr's statements have led to greater scrutiny of the PCI standard<span class="sent"> The intrusion resulted in the "stark realization that passing a PCI security audit does not make a company secure," said <span class="analyst">Avivah Litan</span>, an analyst with research firm Gartner Inc "This was known well before the breach, but <span class="company">Heartland</span> served as a big pail of ice water thrown on the face of companies complying with PCI," she said</span>...The PCI Security Council, which administers the PCI standard, bluntly refuted <span class="company">Heartland</span>'s claims of compliance and its overall security readiness at the time of the breach Speaking with Computerworld this week, Robert Russo, general manager of the PCI Security Council, said the fact that the <span class="company">Heartland</span> breach resulted from a basi Tweet this 

Carr's claims did little to stop the filing of numerous lawsuits against the company for negligence, many of which have since been dismissed in court The PCI Security Council, which administers the PCI standard, bluntly refuted Heartland's claims of compliance and its overall security readiness at the time of the breach Speaking with Computerworld this week, Robert Russo, general manager of the PCI Security Council, said the fact that the Heartland breach resulted from a basic SQL injection error also refutes Carr's claims about the sophistication of the attack Even so, Carr's statements have led to greater scrutiny of the PCI standard The intrusion resulted in the "stark realization that passing a PCI security audit does not make a company secure," said Avivah Litan, an analyst with research firm Gartner Inc "This was known well before the breach, but Heartland served as a big pail of ice water thrown on the face of companies complying with PCI," she said 
Share:  Carr's claims did little to stop the filing of numerous lawsuits against the company for negligence, many of which have since been dismissed in court The PCI Security Council, which administers the PCI standard, bluntly refuted <span class="company">Heartland</span>'s claims of compliance and its overall security readiness at the time of the breach Speaking with Computerworld this week, Robert Russo, general manager of the PCI Security Council, said the fact that the <span class="company">Heartland</span> breach resulted from a basic SQL injection error also refutes Carr's claims about the sophistication of the attack Even so, Carr's statements have led to greater scrutiny of the PCI standard<span class="sent"> The intrusion resulted in the "stark realization that passing a PCI security audit does not make a company secure," said <span class="analyst">Avivah Litan</span>, an analyst with research firm Gartner Inc "This was known well before the breach, but <span class="company">Heartland</span> served as a big pail of ice water thrown on the face of companies complying with PCI," she said</span>...The PCI Security Council, which administers the PCI standard, bluntly refuted <span class="company">Heartland</span>'s claims of compliance and its overall security readiness at the time of the breach Speaking with Computerworld this week, Robert Russo, general manager of the PCI Security Council, said the fact that the <span class="company">Heartland< Tweet this 

Gonzalez from five companies, including Heartland Payment Systems ( ), Hannaford Brothers supermarkets, 7 Eleven and two major unnamed national retailers Shortly after the hearing on Tuesday, Reuters identified Target ( ) as one of the retailers affected, though Target said the breach lasted only a short time US Attorney Erez Liebermann said in August that the vast majority of the stolen card information came from Heartland Payment Systems 
Share:  <span class="sent">Gonzalez from five companies, including <span class="company">Heartland Payment Systems</span> ( ), Hannaford Brothers supermarkets, 7 Eleven and two major unnamed national retailers</span> Shortly after the hearing on Tuesday, Reuters identified Target ( ) as one of the retailers affected, though Target said the breach lasted only a short time US Attorney Erez Liebermann said in August that the vast majority of the stolen card information came from <span class="company">Heartland Payment Systems</span> Tweet this 

. "Many of us in the payment industry were curious to see how Heartland's end to end encryption would work," Bokor said. Considering how the effort was touted as the "next big thing in the industry, it is a little disheartening to see that there can't be more cooperation," between Heartland and VeriFone, Bokor said. . The dispute highlights the need for payment processors and vendors of PoS systems to work together to implement any kind of end to end encryption, he said. . Avivah Litan, an analyst with market research firm Gartner Inc., said the lawsuits will only serve to further confuse merchants about end to end encryption efforts. . Many merchants are hesitant to implement the technology because it offers them no immediate benefit from a compliance standpoint, Litan said. 
Share:  . "Many of us in the payment industry were curious to see how <span class="company">Heartland</span>'s end to end encryption would work," Bokor said. Considering how the effort was touted as the "next big thing in the industry, it is a little disheartening to see that there can't be more cooperation," between <span class="company">Heartland</span> and VeriFone, Bokor said. . The dispute highlights the need for payment processors and vendors of PoS systems to work together to implement any kind of end to end encryption, he said. <span class="sent"> . <span class="analyst">Avivah Litan</span>, an analyst with market research firm Gartner Inc., said the lawsuits will only serve to further confuse merchants about end to end encryption efforts. </span> . Many merchants are hesitant to implement the technology because it offers them no immediate benefit from a compliance standpoint, Litan said. Tweet this 

Some of the most common vulnerabilities include SQL injection and cross site scripting flaws and authorization and authentication errors. The massive data thefts at Heartland Payment Systems and several retailers recently resulted from SQL injection errors that allowed intruders to insert malicious code into their enterprise networks. . Though the security risks posed by such vulnerabilities have been well understood for years, a large and growing number of companies continue to be exposed to them. . At least part of the growth in vulnerabilities is tied to the rising number of Web applications and Web sites that spring up each year, said Chenxi Wang, a researcher with Forrester Research in Cambridge, Mass. . But buggy Web software products and sloppy in house development processes continue to be huge issues, too. 
Share:  Some of the most common vulnerabilities include SQL injection and cross site scripting flaws and authorization and authentication errors. The massive data thefts at <span class="company">Heartland Payment Systems</span> and several retailers recently resulted from SQL injection errors that allowed intruders to insert malicious code into their enterprise networks. . Though the security risks posed by such vulnerabilities have been well understood for years, a large and growing number of companies continue to be exposed to them. <span class="sent"> . At least part of the growth in vulnerabilities is tied to the rising number of Web applications and Web sites that spring up each year, said <span class="analyst">Chenxi Wang</span>, a researcher with Forrester Research in Cambridge, Mass. </span> . But buggy Web software products and sloppy in house development processes continue to be huge issues, too. Tweet this