Phying News
Curated security research, vulnerabilities, advisories and tools for practitioners.

Why does one QSA pass me and another would not?

Summary

A customer passed a PCI audit despite an accepted high-risk vulnerability, violating Requirement 6.5.6 (High findings must be fixed). QSA inconsistency carries fine and reputation risks.
Published
Collected

original ↗