Investment

Only 37% of U.S. merchant locations are fully equipped for EMV card acceptance, narrowly missing a projected 40% rate of deployment predicted by management consulting firm Strawhecker Group, according to research it published Wednesday.

WASHINGTON — President Obama on Wednesday named Thomas Donilon, the former national security adviser, to chair a special commission to develop a long-term cybersecurity strategy.

Web standards developer W3C has launched a Web Authentication effort aimed at replacing the use of passwords for log-ins with more secure authentication methods.

WASHINGTON — The Department of Homeland Security and the Department of Justice on Tuesday released guidelines for the implementation of the Cybersecurity Information Sharing Act, prompting some industry skepticism as well as renewed privacy concerns.

Gary McAlum, USAA's top security executive, discusses what he sees as a false choice between security and convenience, his company's progress in getting users to adopt biometric authentication, and the need for a holistic approach to security.

The Electronic Transactions Association released its updated Guidelines on Merchant and ISO Underwriting and Risk Monitoring last week, spotlighting various merchant categories that face the biggest scrutiny from law enforcement agencies.

It has been difficult for the card brands' 3D Secure technology to find a following in the U.S., in part because of a lack of awareness, and in part because of the consumer friction the authentication process has caused in the past.

Much of the growth in wearable technology is happening without an eye to enabling payments. This is prompting many companies to find a way to add payment capabilities to wearables without forcing users to buy an entirely new device.

By now, many merchants should be wondering if they made the right decision by failing to act before last fall’s EMV liability shift.

A cybercrime ring that reportedly stole $1 billion from banks around the world last year is back, using different tactics. For one thing, it's more often going after banks' corporate customers, making its activities harder for banks to detect.