John Elliott
Explore articles by John
Compliance Enforcement
PCI DSS 4.0.1 Released: Changes to Requirements 6.4.3 and 11.6.1
Originally published in June 2024PCI DSS 4.0.1 was released on June 11th, 2024.It’s a limited revision that aims to correct small typographical errors and make clarifications. However, sometimes such clarifications…
Security Research
The Hidden Cost of Convenience: Is Public Wi-Fi Putting Your Private Data at Risk?
Recently, Turaco Labs detailed a silent skimming attack that used a proxy to silently skim payment card data from Stripe’s iframe solution. Theirs is a great analysis of the attack,…
Compliance Enforcement
FAQ 1588 Just Landed: SAQ A Clarifications and Questions
On 28 February 2025, the PCI SSC released FAQ 1588 to clarify the new eligibility criterion in SAQ A for e-commerce merchants. In particular, the FAQ aims to clarify how…
Client-Side Security
Preventing Skimming Attacks and Enabling PCI DSS Compliance
Preventing skimming attacks is one of the reasons behind the newest version of PCI DSS. E-commerce skimming, also known as form-jacking or Magecart attacks, represents the majority of criminal attacks…