Expert perspectives on application security, compliance, and emerging threats
Fraud Detection AnalyticsThe Challenge In May 2026, a federal court found Cliq Inc. (formerly Cardflex Inc.) and its executives, Andrew Phillips and John Blaugrund, in civil contempt for violating a 2015 FTC order designed to
PCI DSS ComplianceThe Problem An organization using PCI DSS v4.x opted for the customized approach for several requirements. They enlisted their Qualified Security Assessor (QSA) early on, seeking help to design custom
AML and KYCThe Question at Hand Your team collects a bank statement from a high-risk customer, checks the source-of-funds box, and moves on. But what does that statement actually prove? It shows money moved from
Fraud Detection AnalyticsYou ve just received a call from an 82-year-old customer trying to wire $15,000 to help a grandson who contacted her via text. Your fraud detection system flags nothing unusual. The customer insists i
Get weekly security insights and compliance updates delivered to your inbox.
Payment Ecosystem and Transaction ProcessingThe Question at Hand When your bank underwrites a merchant payment processing relationship, you re taking on fraud exposure, reputational risk, and regulatory scrutiny. The FDIC has issued new guideli
Authentication and Access ControlThe FFIEC s final authentication guidance urges financial institutions to adopt risk-based authentication, but many teams struggle with implementation. The challenge isn t understanding the concept; i
AML and KYCThe FCA s shutdown of Euro Exchange Securities UK Limited wasn t just a fine or a warning. It was an operational death sentence. The regulator identified systemic weaknesses in financial crime control
PCI DSS ComplianceThe PCI Security Standards Council released its Information Supplement for Compensating Controls and the Customized Approach on June 11, 2026. The most significant change is that assessed entities now
AML and KYCThe Federal Reserve s proposed AML rule requires stablecoin issuers to implement bank-style customer identification programs, exempting secondary market transactions. If your team is building or updat
Fraud TypologiesFraud operations teams, AML analysts, and compliance managers often encounter suspicious account activity but struggle to identify it or coordinate a response. These questions arise during incident re
Fraud Detection AnalyticsFraudsters don t respect organizational boundaries. They test your payment gateway, probe your competitor s authentication flow, and exploit the gaps between your fraud detection system and your acqui
PCI DSS ComplianceYou ve likely heard the rumors in vendor meetings and compliance calls. As the PCI SSC rolls out version 2.0 of the Secure Software Standard, myths are spreading. Some arise from wishful thinking abou
Regulations and StandardsYour enforcement action count just dropped 50% over the last decade. That s not a headline from one administration; it s the trend across four. Now your team is trying to figure out what it means for
PCI DSS ComplianceThe six-week RFC period for PCI DSS v4.0.1 closes on July 20. If your team has been managing compliance under v4.0 and encountered ambiguities, documented compensating controls for requirements that d
