PCI DSS

PCI DSS (Payment Card Industry Data Security Standard) is a set of security requirements that organizations must follow to protect payment card data and maintain secure payment processing environments. Compliance with PCI DSS is mandatory for any entity that stores, processes, or transmits credit card information, making it a critical framework for enterprises handling financial transactions. For AI governance, PCI DSS becomes relevant when machine learning models process payment data, as organizations must ensure their AI systems don't compromise cardholder data security or create new vulnerabilities in their compliance posture.

1 item

ResearchGlobal2026-09-23

AI Agents Stole 600K Cards at $25 Per Target, Rewriting the E-Commerce Threat Model

A threat actor used three open-source AI agent frameworks, named Strix, Cairn, and Hermes, to autonomously compromise at least 119 online retail sites and steal over 600,000 payment card records. The operation ran at roughly $25 per target, demonstrating that agentic AI has industrialized payment skimming at scale. The attacker's cleanup routine also caused secondary data loss at victim organizations, compounding forensic and operational harm.

agentic AI AI-enabled attacks payment data breach PCI DSS open-source AI e-commerce security supply chain risk