The PCI Security Standards Council (PCI SSC) has published Security Considerations for AI Systems, guidance covering the protection of data supplied to AI systems in payment environments and defenses against AI-assisted attacks. Developed with industry stakeholders, the document addresses governance, deployment, access controls, testing and the application of PCI standards. Its recommendations are advisory, and existing PCI requirements take precedence. “As AI is increasingly used in payment environments, there is an obligation for all parties … More
The post PCI SSC calls for human approval of AI agent actions involving cardholder data appeared first on Help Net Security.
source & further reading
helpnetsecurity.com — original article
Companies want autonomous IT operations but hesitate to let AI act alone
Anthropic’s new budget model gets much better at ignoring hidden commands
Cryptomining botnet hides C2 addresses in GitHub poem, infects over 3,400 servers