Data security

An organization could go to great lengths to protect its internal network only to have all that effort undone by its third party service provider failing to take proper security measures.

Wells Fargo will soon roll out eyeprint verification for its commercial customers using its mobile banking platform.

Visa issuers will be required by October of this year to provide a transaction alert service to cardholders — but if they don't have a plan in place this week, Visa will step in with its own offering.

The hurdles to broader EMV adoption in the U.S. have many causes, but to the consumer the end result is typically the same: A longer payment process with no immediate gain.

Nearly half of bank data security incidents in 2015 involved compromised web applications, according to a closely watched annual report from Verizon released Tuesday.

When you make a payment on a website using a HTTPS connection, Transport Layer Security (TLS) encryption is what makes your payment transfer over the public internet secure. Unfortunately, it's riddled with security flaws.

Multi-factor authentication will be required for administrative access to card data and systems for Payment Card Industry data security compliance this week.

The breach experienced by Mossack Fonseca did more than expose sensitive tax documents for global figures in politics and business. It's also a warning sign for any company that manages large amounts of financial and transaction data.

There's plenty of criticism of the U.S. chip card migration, including its pace, the pressure on merchants to upgrade and the lingering confusion over how to use the cards. But Visa painted a more bullish picture of the migration.

Issuers still have a choice of whether to require PIN authentication for EMV-chip cards, but David Nelms, chairman and CEO of Discover Financial Services, says the chip-and-PIN path increasingly makes the most sense for U.S. payment cards going forward.