Guidance from CoalFire on the eSkimming Security requirements found in PCI DSS 4.0.
The most talked about and concerning new requirements in PCI DSS 4.0 fall under sections 6.4.3 and 11.6.1. For the first time, merchants are required to implement security controls to prevent eSkimming attacks. These new requirements require control of all scripts running on merchant eCommerce websites.
In this new whitepaper “A Holistic Approach to Protecting Credit Card Payment Flows,” CoalFire chimes in with background on the problem, guidance on scope, advice on how best to secure credit card data in eCommerce transactions, and a review of the Source Defense approach.
To shed light on the risks introduced through this critical digital supply chain, we scanned the top 4,300 websites by traffic worldwide and analyzed the data to provide answers to important questions.
To shed light on the risks introduced through this critical digital supply chain, we scanned the top 4,300 websites by traffic worldwide and analyzed the data to provide answers to important questions.
by Source Defense Even with the PCI DSS 4.0 deadline now behind us, many organizations are still exposed to costly eSkimming threats and compliance gaps.