PCI Updates Security Guidance with Focus on Firmware

The PCI Security Standards Council updated PIN Transaction Security (PTS) requirements for point-of-sale systems to address firmware security and supply-chain threats after malware outbreaks (including PoSeidon) and reported spear-phishing campaigns targeting POS vendors; the guidance mandates cryptographic firmware authentication, secure update mechanisms, change-control and manufacturing protections, and implies PCI site inspections and lab validation to reduce risks to retail and hospitality POS environments.