Joyrene Thomas
Explore articles by Joyrene
Compliance Enforcement
Prevent KYC Data Breaches: What Businesses Miss (And Hackers Don’t)
It’s time for a reality check regarding know-your-customer, biometric, and user data. 3 in 5 businesses have seen an increase in identity fraud attempts in the last year. Meanwhile, fraud…
Data Governance & Privacy
The Essential Guide to Data Privacy Compliance
Customers may trust you with their data, but regulators expect you to prove you deserve it. Legislation from the European Union’s General Data Protection Regulation (GDPR) to California’s Consumer Privacy…
AI Security
AI-Powered JavaScript Attacks: The New Threat Landscape for 2025
Originally posted in November 2024When it comes to online shopping season online, the peaks are getting steeper and closer together. The sales spikes start early in the fourth quarter, driven…
Compliance Enforcement
Navigating the Third-Party Code Minefield: Data Leakage Risks and Prevention Strategies
Today, virtually all websites use JavaScript to seamlessly integrate third-party services. This is primarily to improve their online operations with analytics, user tracking, payments, social media, chatbots, and more. But…
Security Research
From Blobs to Blockchain: Inside the New Takedown-Resistant Skimmer Tricks
Article originally posted in May 2024.Online tracking technologies include scripts or code embedded within websites or mobile applications to collect user data for analysis. Such technologies offer insight into user…
Data Governance & Privacy, Threat Detection & Prevention
Strategies to Safeguard E-Commerce Payment Pages This Holiday Season
As web applications grow more complex, client-side code has become a prime target for attackers. From third-party scripts to browser-based vulnerabilities, threats on the client-side are often overlooked until it’s…
Data Governance & Privacy, Threat Detection & Prevention
How to Stop Data Breaches in Your Business: A Strategic Overview
Whether your business is large or small, whether you trade in physical places, on the Internet, over the telephone, or via mail order, and whether you accept hundreds or hundreds…
Client-Side Security
Digital Skimming: the Definitive Guide for 2025
Money has migrated from the physical to the digital. It’s moved from bank branches and brick-and-mortar stores to online banking and E-Commerce. Criminals have migrated, too, meaning digital heists have…
Client-Side Security
Tracking Pixels Security: the Debate Marketers Face
It’s been dubbed a battle between tracking pixels and privacy—one where marketers face off against privacy advocates. Tracking pixels can help marketers improve the effectiveness of their campaigns. But at…
Client-Side Security
What Does it Mean to be PCI Compliant?
The payment card industry data security standard, or PCI DSS, is 20 years old in December of this year. Over the last two decades, it’s amazing – although not entirely…
Client-Side Security
Europol Identifies 400 Online Merchants as Victims of E-Skimming
More than 400 online merchants were found to be infected with e-skimmers following a coordinated international action by law enforcement.The two-month campaign by Europol and law enforcement agencies in 17…
Client-Side Security
Are Non-PCI Compliant Scripts Putting Your Business at Risk?
In an ideal world, websites would be secure, bullet-proof, and impregnable – whatever you want to call it. But the real world is complicated.Websites are built differently these days. They’re…
Client-Side Security
Myth buster: 10 of the most common PCI DSS myths busted
The first version of the PCI DSS was published almost 20 years ago. Since then, many myths and misconceptions have arisen around the 12 requirements, describing how card data must…