PCI compliance guides, Magecart threat intelligence, and practical security advice for ecommerce merchants.
A supply chain attack compromises software or services that you depend on, so attackers reach you through a vendor you already trust. Here's how it works, why it's behind many of the biggest breaches, and what ecommerce merchants can do about it.
Card skimming installs hidden hardware on payment terminals to steal card details the moment a card is swiped or inserted. Here's how it works, where it happens most, and what it means for online merchants dealing with the resulting fraud.
Magecart attacks quietly steal your customers' card numbers as they type. Here's how they work, why they hit small stores just as often as big ones, and what you can do about it.
Clickjacking hides a real page underneath a fake one so users click something without realising it. Here's how it works, why it matters for ecommerce stores, and the one-line fix that stops it.
Many Shopify and Stripe merchants believe SAQ A means no vulnerability scanning. Under PCI DSS v4.x that is no longer true. Requirement 11.3.2 now requires quarterly ASV scans for SAQ A merchants, here's why, and what to do about it.
In March 2025, two new PCI DSS v4.0.1 requirements became mandatory for all merchants with payment pages. Here's what they mean, why they exist, and the practical steps to comply.