PCA Cyber Security

AI is everywhere. But what can it actually do for product security?   Beyond the hype, the real question is how AI can help security teams make sense of complexity, analyse massive amounts of information and make better, faster security decisions. On 7 September, Tamas Pentz Tamás, Senior Threat Intelligence Analyst at PCA Cyber Security, will take the stage at AI Summit Budapest 2026 to explore exactly that in his talk:   🔹 Beyond the AI Hype: What AI Can Actually Do for Your Product Security 📍 Future Lab, House of Music Hungary, Budapest 🕞 15:40–16:00   If you're interested in the practical intersection of AI, threat intelligence and product security, come and join the conversation. See you at #AISummit2026!   #ArtificialIntelligence #AI #ProductSecurity #Cybersecurity #ThreatIntelligence #PCACyberSecurity

⏰ 11 September 2026: the next CRA milestone is here. From this date, CRA reporting obligations apply - including reporting actively exploited vulnerabilities and severe incidents. But you can’t report what you don’t know about. For manufacturers and fleet operators of embedded devices, such as payment and PTS devices, continuous SBOM validation and vulnerability monitoring are critical. Discover more: https://lnkd.in/dbAYYtkg When the processes or expertise aren’t in place, combining our platform's continuous monitoring with PCA Cyber Security's expert Threat Intelligence analysis can help identify what is affected, what matters, and what needs action. The deadline is a milestone. Continuous security is the journey. #CRA #CyberResilienceAct #SBOM #ThreatIntelligence #ProductSecurity #EmbeddedSecurity

Are certified payment devices really secure against tomorrow’s fraud? At the PCI Security Standards Council Europe Community Meeting (#PCIEURCM26) in Edinburgh, Aleksei Stennikov, Hardware Security Expert at PCA Cyber Security, and Niels Vonk, Team Lead, Offensive Security at Adyen will share a real-world case study on taking payment device security beyond certification. An excellent example of cooperation between the product security team of a PSP and their extended security research team. Title: Preparing for Tomorrow’s Fraud: Offensive Security Research on Merchant Payment Hardware The session will explore how proactive offensive security research can uncover realistic attack paths, assess exploitability, and turn technical findings into actionable decisions that strengthen products and protect merchants-before attackers get there first. 📅 22 October 2026 ⏰ 12:40–13:10 CET 📍 PCI SSC Europe Community Meeting, Edinburgh PCA Cyber Security (PCI APO) is proud to collaborate with Adyen (PCI PPO) on this work, combining deep payment hardware expertise with hands-on offensive security research. Come and join the conversation on what it really takes to prepare payment hardware for tomorrow’s threats. Registration link: https://lnkd.in/d5axCnge #PCI #PaymentSecurity #OffensiveSecurity #PaymentDevices #FraudPrevention #CyberSecurity #PCICommunityMeeting #HardwareSecurity

The countdown is on for PCI Security Standards Council’s #PCIEURCM26. We are proud to be exhibiting at this year’s event (booth no. 12) and look forward to collaborating with industry peers, sharing insights, and celebrating 20 years of securing payment data. Don't miss the chance to discuss our latest developments on payment device security, SBOM validation and continuous vulnerability monitoring! See you in Edinburgh, Scotland: https://lnkd.in/d5axCnge #PCIDSS #PCIPTS #PaymentSecurity #CyberSecurity #Fintech #PCIEURCM26

SBOMs are becoming essential for embedded device security, including payment devices - but are they enough for operational resilience? A static or incomplete SBOM can leave payment providers without a clear view of what is actually running inside their devices. In his latest article for The European Financial Review, Artem Serebrov - Director of Product at PCA Cyber Security, explores why payment security needs to move beyond one-time compliance towards validated SBOMs, continuous vulnerability monitoring and lifecycle security. Read the full article: The Payments Industry Needs to Think Beyond SBOMs for Operational Resilience (https://lnkd.in/d26bscay) #PaymentSecurity #SBOM #CyberSecurity #OperationalResilience #PCI #CyberResilienceAct

PCI PTS approval doesn’t mean your payment terminal fleet is secure. With thousands of terminals across different locations, networks and configurations, fleet-level security is a different challenge. Our latest article explains what PCI DSS testing covers, how sampling works, and where vulnerability scanning, penetration testing and segmentation fit in. 👉 Read more below: PCI DSS Testing for Payment Terminal Fleets Explained #PCIDSS #PaymentSecurity #CyberSecurity #Fintech #PCIEURCM26

We’re looking forward to connecting with payment security professionals from around the world at @PCI Security Standards Council’s #PCIEURCM26. Your coffee will be on us! ☕ If you’re attending in Edinburgh, Scotland, stop by our booth (#12) to discuss the latest trends, challenges, and technologies influencing the payments industry. Register today 🎟 https://lnkd.in/d5axCnge

🚨 Don't miss it this Sunday at Car Hacking Village! If you're attending DEF CON, join Danilo Erazo for a deep dive into the security of rolling code systems used in aftermarket vehicle access solutions. Unlocking Vehicles by Brute-Forcing Rolling Code Systems Danilo will share how reverse engineering uncovered previously undocumented weaknesses, leading to three CVEs assigned in 2026, and demonstrate how a practical brute-force attack can recover valid rolling codes and enable key fob cloning. 📅 Sunday, August 9 🕥 10:30–11:00 AM 📍 Creator Stage 1 📍 Car Hacking Village @ DEF CON 34 If you're interested in automotive cybersecurity, embedded systems, RF security, or reverse engineering, we'd love to see you there. More details: https://lnkd.in/gWAUqbUt #DEFCON #CarHackingVillage #AutomotiveSecurity #EmbeddedSecurity #ReverseEngineering #CyberSecurity

In our latest article we summarized the most important findings of our Q2 2026 Global Automotive Cybersecurity Report, which reveals 345 automotive-specific vulnerabilities (+30% QoQ) and multiple other valuable insights. Based on intelligence collected by the PCA Cyber Security Threat Intelligence Collection & Analysis Platform (TICAP), the report provides actionable insights for OEMs, suppliers, and product security teams. Get your copy of the report: https://lnkd.in/dy73EwEj Read the article below. #AutomotiveCybersecurity #CyberSecurity #ThreatIntelligence #Automotive #ConnectedVehicles #UNR155 #CyberResilienceAct #ProductSecurity

How secure are automotive rolling code systems, really? At this year's Car Hacking Village at DEF CON 34, our security researcher Danilo Erazo will reveal how reverse engineering exposed undocumented weaknesses in a widely deployed aftermarket rolling code system. The research demonstrates how a rollback vulnerability, combined with a practical brute force attack, can recover valid rolling codes and enable cloning of a legitimate key fob to unlock vehicles. The findings resulted in three CVEs assigned in 2026 and affect products deployed across multiple markets. 📍 DEF CON 34 - Creator Stage 1 🗓 Sunday, August 9 🕥 10:30–11:00 AM   If you're interested in automotive security, embedded systems, reverse engineering, don't miss this session. More details: https://lnkd.in/gWAUqbUt #DEFCON #CarHackingVillage #AutomotiveSecurity #CyberSecurity #EmbeddedSecurity #ReverseEngineering #RollingCode #Research