Well another BlackHat is in the books and another round of vulnerabilities have been disclosed and bantered about.

In my inaugural post to this blog, I wrote about many of the religious wars that break out today regarding payment security and specifically PCI.
A set of security best practices were recently published via wiki for users, providers, and relying parties of OpenID.
No I am not speaking of military intelligence, but rather, business intelligence within a security context.
As my first introductory post here on CSO Online, I thought I would cover a topic I spend a lot of time dealing with and discussing, online payment security and ecommerce. Payment security, in particular PCI, tends to be a controversial and religious topic among security professionals. If you ever want to sit back and watch a very spirited debate amongst this crowd, just throw out a comment on PCI, web application firewalls, or vulnerability disclosure on any of your favorite message boards, blogs, Twitter, or other social media and watch the fireworks ensue!


