Cyber-Secure Philanthropy: Tech Infrastructure for Global Donations
ID: a9100523-11ea-599e-a5ff-e6754e3f8707
STIX ID: report--a9100523-11ea-599e-a5ff-e6754e3f8707
Feed Name: HackRead
Threat Score
Nonprofit donation platforms are frequently targeted due to under-resourced infrastructure and predictable integrations: common failures (SQL injection, formjacking/Magecart skimmers, exposed API/webhook keys) enable payment theft and donor data exposure, while misunderstandings about PCI DSS and GDPR expand compliance risk; pragmatic controls like CSP, Subresource Integrity, webhook signature verification, strict key management, and infrastructure isolation materially reduce this sector-wide risk.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.