Weekly News Roundup: January 17, 2014

Some news highlights from around the world this week including a new study that shows small retailers are still failing to meet the PCI DSS criteria, a first look at the malware used to attack Target (and conjecture on how it may have gotten in), and unnerving suspicion that more card breaches may be yet to come.

ZDNet – Hackers Steal Card Data from Neiman Marcus – A new survey of small retailers in the U.S. shows that 20 percent are not PCI-compliant, while a further 14 percent simply don’t know their PCI compliance status.

GovInfo Security – Fraud Patterns Suggest New Breaches – Executives from U.S. card issuers say recent card fraud trails suggest that a leading hotel company and a restaurant chain also may have been recently breached. Whether those potential compromises are linked to Target and Neiman Marcus is unknown, they say.

Krebs on Security – A First Look at the Target Intrusion, Malware – An in-depth look at BlackPOS, the malware believed to have been used to infect Target, and some theories on how the hackers may have accessed Target’s POS system and information databases.