Welcome to This Week’s [in]Security. PCI Updates. PIN v3.1. PIN Block Format 4 Deprecated. Exchange server mass-exploitation. Big F5 has big CVE's. SolarWinds & Accellion. New breaches: More CRA account problems. Walmart. Massive Security Camera Breach. GitHub. Bad Blockchain. Healthcare. New Ransomware. Followups & Fall-out. No Undo! DarkNetWorth. Crypto-wars. Fuzzing. Zero-days. ZeroDays. GitGate!? Redaction Failure. IoT: Smartmeters. SAP. Research. New CSS tracking side- channel attack. Trends. SolarWinds. Nation States. Crime. AI. The EFF Follies. LastPass. Non-fungible tokens. Hackers. Disinformation. Health, Safety & Environment. Covid-19: Spread, Curves, Spikes, Waves, & reinfections. New Variants. Impact. Immunity, Vaccines, and Vaccination. And more.

PINs, Passwords, and PCI

What is the difference between Passwords and Passphrases, PINs, and other authentication factors under PCI DSS? Our team was recently asked for a second opinion on a scenario that seemed like a simple question. When we dug into it, we found some useful but scattered guidance in PCI DSS and its supporting documents . While ambiguity can support flexibility, it can also lead entities astray. PCI's flexibility can sometimes be akin to running with scissors. And this question is no exception.