The Coalfire Blog

Welcome to the Coalfire Blog, a resource covering the most important issues in IT security and compliance. You'll also find information on Coalfire's insights into the unique cybersecurity issues that impact the industries we serve, including Cloud Service Providers, RetailFinancial Services, Healthcare, Higher Education, Payments, Government, Restaurants, and Utilities.

The Coalfire blog is written by the company's leadership team and our highly-credentialed security assessment experts. We look forward to your comments, so please join the conversation.


  • Detecting and Preventing Compromises in Retail Payment Systems

    January 14, 2014, Mike Weber, Vice President, Coalfire Labs

    Information Week’s Matthew Swartz published an article on the recently- confirmed payment card breaches at Target, Nieman Marcus and three other unnamed  retailers. This article and many others reveal that these attacks involve sophisticated malware and some even suggest it is the work of the same gang.  To be clear, Coalfire and the Coalfire Labs group that I lead are not involved in these investigations. But we do perform security audits and digital forensics investigations for many retailers. And based on that experience, we can confidently say this: all retailers are targets, and many retailers have already been compromised..

    Read more
  • Free and low-cost tools for PCI DSS Compliance

    December 12, 2013, Steven Weil, Senior Security Auditor

    Complying with the PCI DSS requires policies and processes plus implementing and managing a variety of software tools. As a QSA who has performed many PCI assessments for merchants and service providers, I’ve seen and assessed a variety of free and low-cost (under $200) software tools that help our customers comply with PCI DSS.

    Read more
  • A Proven Strategy for Implementing Vendor Management Programs

    December 10, 2013, Andrew Hicks, Managing Principal, Coalfire

    Every regulated industry includes a requirement for managing third-party risk.  Some industries are further along the path and have more mature processes than others.  However, there are tried and true methodologies and standards established by those early movers that we can utilize across other regulated industries.

    Read more
  • 2013 PCI SSC European Community Meeting Wrap-Up

    November 04, 2013, Andrew Barratt, Managing Director, Europe

    Matt Getzleman – PCI Practice Director, Dan Fritsche – Director, Solution Validation, Andrew Barratt  - Managing Director UK, and Brian Pennington – Regional Sales Director, discuss the recent PCI SSC Community Meeting in Nice, France.

    Read more
  • 2013 PCI SSC North America Meeting – Wrap-Up

    October 21, 2013, Matt Getzelman, PCI Practice Director

    Coalfire sent the entire team to the meeting in Las Vegas and everyone reported a positive and engaging experience.  We hosted our annual dinner where we caught up with clients and friends – a good time was had by all. 
    The most valuable technical information was presented during the ‘Assessors Only’ session on Tuesday afternoon.  The SSC covered the upcoming changes to the PCI DSS and PA-DSS standards.  There was an open Q&A session with excellent insight on the industry’s concerns and the SSC’s intent with many of the proposed changes.

    Read more
  • Displaying results 26-30 (of 44)
     |<  <  1 - 2 - 3 - 4 - 5 - 6 - 7 - 8 - 9  >  >| 

Recent Posts

Post Topics

Archives

RSS Feed

The Coalfire BlogSubscribe to Feed
Chrome users will need to install RSS Subscription Extension (by Google)

Tags