a

PCI kills SSL

SSL v3.0 is no longer allowed The PCI Security Standards Council will soon release an update to PCI DSS to disallow the use of SSL v3.0 for protecting cardholder data. Due to “inherent weaknesses in the protocol,” no version of SSL meets the...

Are your browser transactions secure?

Based on PCI declaring SSL not fit for use where “strong cryptography” is needed it looks like our online https transactions may not be secure either if they are SSL based. A recommendation is to use TLS 1.2 for secure https sessions, How do you know if...

Anthem Hack – Don’t let it be you

The Good, The Bad and The Ugly of Anthem’s Cyber Security Hack It was earlier this month that the database of America’s second largest health insurance company, Anthem, was cyber hacked.  The hackers were able to gain over 80 million records, making this the largest...