PCI Security Standards Council – Protect Payment Data with Industry-driven Security Standards, Training, and Programs

Industry Bulletins

Date Title

15 October 2024

PCI Security Standards Council Bulletin: SAQs for PCI DSS v4.0.1 Now Available

03 April 2024

PCI Security Standards Council Bulletin: Extension of Expiration of the PCI PTS POI v6 Security Requirements

20 March 2024

PCI Security Standards Council Bulletin: Items Noted for Improvement (INFI) Worksheet Discontinued

29 September 2023

PCI Security Standards Council Bulletin: Updated PCI 3DS Core Technical FAQs

21 September 2023

PCI Security Standards Council Bulletin: SAQ Instructions and Guidelines and SAQ SPoC Published for PCI DSS v4.0

13 July 2023

PCI Security Standards Council Bulletin: PCI SSC Impersonation, Phishing, and Know Your Customer (KYC) Scams

30 June 2023

PCI Security Standards Council Bulletin: Updates Made to Qualified Security Assessor Program

28 June 2023

PCI Security Standards Council Bulletin: New PCI DSS v4.x Worksheet and Guidelines Published to Support Security as a Continuous Process

23 May 2023

PCI Security Standards Council Bulletin: Technical FAQs for MPoC Security and Test Requirements v1.1 Published

22 May 2023

PCI Security Standards Council Bulletin: Updated Version of Secure Software Standard to Address Errata

16 May 2023

PCI Security Standards Council Bulletin: Secure Software Standard: Web Software Module Assessor Training Now Available

09 May 2023

PCI Security Standards Council Bulletin: Technical FAQs for Secure Software Standard v1.x Published

14 April 2023

PCI Security Standards Council Bulletin: Secure Software v1.2 ROV and AOV Published

31 March 2023

PCI Security Standards Council Bulletin: Updates to the Qualified Integrator and Reseller (QIR) Program

17 February 2023

PCI Security Standards Council Bulletin: Updated Version of Mobile Payments on COTS (MPoC) to Address Errata

27 January 2023

PCI Security Standards Council Bulletin: PTS POI Modular Security Requirements v6.2 Published

14 December 2022

PCI Security Standards Council Bulletin: PCI DSS v4.0 Reporting Updates

09 December 2022

PCI Security Standards Council Bulletin: Expiry Date Extended for PCI PTS POI v4 Devices

01 November 2022

PCI Security Standards Council Bulletin: Updates to the P2PE Program

07 October 2022

PCI Security Standards Council Bulletin: PCI DSS v3.2.1 Minor Updates Published to Include All PCI Participating Payment Brands

31 August 2022

PCI Security Standards Council Bulletin: IoT Security in Payment Environments

30 June 2022

PCI Security Standards Council Bulletin: Card Production Errata, AOCs, ROCs, and FAQ Published

29 April 2022

PCI Security Standards Council Bulletin: SAQs for PCI DSS v4.0 are Now Available

19 April 2022

PCI Security Standards Council bulletin on the expiration of the approval of PCI PTS HSM version 2 devices

18 April 2022

PCI Security Standards Council Bulletin: PTS POI Modular Security Requirements v6.1 Published

10 February 2022

Bulletin: Ransomware Attacks Back on the Rise

05 August 2021

Bulletin: The Importance of Properly Scoping Cloud Environments

11 March 2021

PCI Security Standards Bulletin: PCI SSC Announces Suspension of ISO Format 4 Pin Block Support Dates

17 December 2020

PCI Security Standards Council Bulletin: Implementation Dates for Key Block Equivalence

01 December 2020

PCI Security Standards Council Bulletin: Revisions to the Implementation Dates and Scope for PCI P2PE Security Requirement 32-9

16 November 2020

PCI Security Standards Council Bulletin: Revisions to the Implementation Dates and Scope for PCI PIN Security Requirement 32-9

21 October 2020

PCI Security Standards Council Bulletin: The Threat of Account Testing to Payment Security

07 October 2020

PCI Security Standards Council Bulletin: The Threat Of ATM Cash-Outs Payment Security

02 September 2020

PCI Security Standards Council Bulletin: Implementation of P2PE Expired Listings

21 August 2020

PCI Security Standards Council Bulletin: Revisions to the Implementation Dates for PCI P2PE Security Requirement 18-3

17 July 2020

PCI Security Standards Council Bulletin: Revisions to the Implementation Date for PCI PIN Security Requirement 18-3

26 March 2020

PCI Security Standards Council Bulletin: Extension of Expiration of the PCI PTS POI v5 and PTS HSM v3 Security Requirements

10 March 2020

PCI Security Standards Council Bulletin: Extension of Expiration of the Approval of PCI PTS POI v3 Devices

03 February 2020

PCI Security Standards Council bulletin on the expiration of the approval of PCI PTS POI version 3 devices

01 August 2019

PCI Security Standards Council bulletin on the threat of online skimming to payment security

01 May 2019

PCI Security Standards Council bulletin on the expiration of the approval of PCI PTS HSM version 1 devices

06 November 2018

PCI Security Standards Council bulletin on purchasing PCI approved devices

23 January 2018

PCI SSC advisory on “ASV Program Modernization Effort”

10 April 2017

PCI Security Standards Council bulletin on the expiration of the approval of PCI PTS POI version 2 devices

28 March 2017

PCI Security Standards Council bulletin on revisions to the implementation date for PCI PIN Security Requirement 18-3

20 July 2016

PCI SSC advisory on unauthorized representation and solicitation of funds by MGMX Compliance

02 February 2015

PCI SSC Bulletin on “GHOST” Vulnerability

24 October 2014

PCI SSC Statement on “BuySecure” Initiative

15 October 2014

PCI SSC Bulletin on “Shellshock” Vulnerability

27 August 2014

PCI SSC Bulletin on Malware Related to Recent Breach Incidents

19 March 2014

PCI Security Standards Council bulletin on the expiration of the approval of PCI PTS POI version 1 devices

06 March 2014

Can Technology Protect Americans from International Cybercriminals?.

05 March 2014

On 5 March 2014, PCI SSC Chief Technology Officer Troy Leach testified before the Committee on Financial Services, Subcommittee on Financial Institutions and Consumer Credit on the topic of ” Data Security: Examining Efforts to Protect Americansâ€™ Financial Information”

05 February 2014

On 5 February 2014, PCI SSC General Manager Bob Russo testified before the Energy and Commerce Committee, Subcommittee on Commerce, Manufacturing and Trade of the United States House of Representatives on the topic of “Protecting Consumer Information: Can Data Breaches Be Prevented?”

03 February 2014

On 3 February 2014, PCI SSC Chief Technology Officer Troy Leach testified before the National Security and International Trade and Finance Subcommittee of the US Senate Committee on Banking, Housing and Urban Affairs on the topic of “Safeguarding Consumer’s Financial Data.”

20 December 2013

PCI SSC Statement on Recent Data Breach

06 April 2012

PCI Security Standards Council statement on policy for validated payment application security disclosure

15 February 2012

PCI Security Standards Council bulletin on PTS Version 2 Devices Eligible to be Updated for SRED

07 December 2011

PCI Security Standards Council bulletin on determination of PCI approval status for PTS devices

29 August 2011

PCI Security Standards Council updates market on Point-to-point encryption program

04 August 2011

PCI Security Standards Council statement on revoking QSA and PA-QSA status of Chief Security Officers (CSO)

24 June 2011

PCI Security Standards Council update on PA-DSS and mobile payment acceptance applications

25 January 2011

Addendum to the PCI Security Standards Council statement on PA-DSS and mobile payment applications released on November 29th 2010

29 November 2010

PCI Security Standards Council statement on PA-DSS and mobile payment applications

16 June 2010

PCI Security Standards – Feedback Highlights

10 August 2009

PCI Security Standards Council on minor corrections to PCI DSS and PA-DSS standards documentation

27 July 2009

PCI Security Standards Council Statement on Recent Data Breaches

15 June 2009

PCI Security Standards Council Response Letter to Industry Associations Regarding PCI DSS

07 April 2009

QSA Remediation Statement

24 July 2008

PCI Security Standards Council Statement on Lifecycle Statement

28 April 2008

PCI Security Standards Council Statement On Malware

15 February 2007

PCI Security Standards Council Statement on the Formation of the PCI Security Vendor Alliance

18 January 2007

PCI Security Standards Council Statement on Recent Data Breaches