![This Week's [in]Security - Issue 207 | insecurity | Control Gap](https://www.controlgap.com/hubfs/Imported_Blog_Media/lava_fire_smoke_417070.jpg)
Welcome to This Week’s [in]Security. Magecart exfiltration. More FPE Weakness. Big-Hacks: Exchange Hack. F5 Attacks. SolarWinds. New breaches:...
![This Week’s [in]Security – Issue 104 | insecurity | Control Gap](https://www.controlgap.com/hubfs/Imported_Blog_Media/sign-slippery-wet-caution-700x467-1.jpg)
Welcome to This Week’s [in]Security. This week: NIST FPE update may render some deployed solutions weak, NIST formalizes TDES sunset, Magecart...
Last month NIST announced they were seeking feedback on a proposed updated guidance for FPE. More formally this is SP 800-38G rev 1 "Recommendation...
![This Week’s [in]Security – Issue 101 | insecurity | Control Gap](https://www.controlgap.com/hubfs/Imported_Blog_Media/molehammer-2-700x573-Dec-21-2021-03-51-00-26-AM-1.jpg)
Welcome to This Week’s [in]Security. This week: detailed alert on trending e-commerce attack methods, PCI glossary for small business, PCI seeks...
Barely a year after NIST approved Format-Preserving Encryption (FPE) based on AES they've issued a news release that one of the approved modes has...
Previously we looked at Format Preserving Encryption (FPE) its characteristics and suitability for application in solutions intended for PCI DSS. To...
Format Preserving Encryption or FPE is recent technology that is beginning to show up in payment solutions with the promise of simplifying PCI DSS...