One attack created a fake payment form. A second could read it. Then someone cloned the bakery’s website, both attacks included. Apparently, “made from scratch” doesn’t apply to cybercrime. Watch the research video (hubs.li/Q04BhBxS0).

Routine testing may see a clean page while an eSkimming attack waits for a specific shopper action or payment choice. Learn what retail teams should review before peak season. October 14 at 2:00 PM ET. hubs.ly/Q04zcNks0

An approved script can still read sensitive fields, change page content, or contact an unauthorized destination. Join the Holiday 2026 Threat Briefing on October 14 at 2:00 PM ET. hubs.ly/Q04zcNm60

A crosswalk does not create maturity. Ownership does. Who discovers payment-page scripts? Who approves them? Who monitors changes? Who responds? If those handoffs are unclear, the mapping stays on the shelf. Watch the Recording: hubs.li/Q04vLc1Y0

If browser runtime is missing from your NIST CSF profile, so is software executing in every customer session. Payment-page script inventory should cover what runs, where it came from, and whether its behavior changes. Watch the Recording: hubs.li/Q04vKW470

PCI DSS 4.0.1 and NIST CSF 2.0 overlap, but they are not interchangeable. The mapping can help one control support both a PCI requirement and a NIST outcome without turning either framework into a shortcut. Watch the Recording: hubs.li/Q04vKS3m0

Screenshots are not a strategy. If your team is still translating PCI DSS 6.4.3 and 11.6.1 into something a QSA can actually review, this webinar should help. May 7, 2 PM ET. hubs.li/Q04fklwk0

What gets flagged in a real PCI DSS 6.4.3 and 11.6.1 assessment? Incomplete script inventory, weak justification, unclear monitoring, and evidence that does not hold up. We’re covering all of it on May 7 at 2 PM ET. hubs.li/Q04fkv6q0

Most teams do not get stuck on PCI DSS 6.4.3 and 11.6.1 because they do not know the words. They get stuck because they cannot prove the controls. Join our May 7 webinar on what good evidence looks like in a real assessment. hubs.li/Q04fkpZp0

If you rely on 3rd-party scripts for payments, this matters. Enforcement is increasing. Visibility is expected. We break it down in this session. hubs.li/Q04cNpZ40

PCI DSS 4.0.1 requires control over payment page scripts. Do you have it? hubs.ly/Q04cltC60

PCI DSS 4.0.1 is no longer theoretical. QSAs are enforcing it. Gaps are showing up. Learn what to fix now. hubs.li/Q04cNpBN0