[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:pci-dss\u002Frequirement-10":3},{"item":4,"lessons":16,"controls":66,"related":94},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"pci-dss","requirement-10","Requirement 10","Requirement 10: Log and Monitor All Access to System Components and Cardholder Data",20,"PCI Security Standards Council","**What it asks for.** Requirement 10 of PCI DSS v4.0 covers audit logging and monitoring. It requires logs that capture user activity and security relevant events in sufficient detail, protection of logs against tampering, regular review of logs, retention for a defined period, time synchronisation and prompt detection and response to failures of critical security control systems.\n\n**In practice.** Organisations collect logs centrally, protect their integrity, synchronise clocks and use automated mechanisms to review logs and alert on suspicious activity, which v4.0 now expects. Evidence includes logging configuration, retention settings, review records, alert handling and records of control failures and how they were addressed.\n\n**Common gaps.** Logs are often collected but not reviewed in a meaningful way. Failures of security controls, such as a logging agent stopping, can go unnoticed for long periods.",null,"https:\u002F\u002Fwww.pcisecuritystandards.org\u002Fstandards\u002Fpci-dss\u002F","Read about PCI DSS","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46,50,54,58,62],{"slug":19,"title":20,"published_at":21},"critical-magento-rce-flaw-demands-immediate-patching","Critical Magento RCE Flaw Demands Immediate Patching","2026-10-16T22:20:34.131+00:00",{"slug":23,"title":24,"published_at":25},"ai-powered-penetration-tools-weaponized-against-south-korean-banks","AI-Powered Penetration Tools Weaponized Against South Korean Banks","2026-10-10T16:20:36.028+00:00",{"slug":27,"title":28,"published_at":29},"ploutus-atm-malware-developer-arrested-lessons-for-physical-logical-atm-security","Ploutus ATM Malware Developer Arrested — Lessons for Physical & Logical ATM Security","2026-10-06T14:21:58.654+00:00",{"slug":31,"title":32,"published_at":33},"atm-jackpotting-malware-driven-cash-theft-highlights-physical-and-cyber-atm-security-gaps","ATM Jackpotting: Malware-Driven Cash Theft Highlights Physical and Cyber ATM Security Gaps","2026-10-02T16:20:41.59+00:00",{"slug":35,"title":36,"published_at":37},"atm-jackpotting-malware-exposes-critical-physical-and-cyber-security-gaps","ATM Jackpotting Malware Exposes Critical Physical and Cyber Security Gaps","2026-10-01T12:20:33.379+00:00",{"slug":39,"title":40,"published_at":41},"self-registration-exploit-leads-to-webshell-implant-on-municipal-recreation-platform","Self-Registration Exploit Leads to Webshell Implant on Municipal Recreation Platform","2026-09-30T16:21:13.611+00:00",{"slug":43,"title":44,"published_at":45},"ai-powered-skimming-campaign-steals-600k-credit-cards-from-100-retail-sites","AI-Powered Skimming Campaign Steals 600K Credit Cards from 100+ Retail Sites","2026-09-23T21:20:23.65+00:00",{"slug":47,"title":48,"published_at":49},"ai-powered-open-source-agents-compromise-27-retailers-exfiltrate-600k-credit-card-records","AI-Powered Open-Source Agents Compromise 27 Retailers, Exfiltrate 600K Credit Card Records","2026-09-23T20:22:16.866+00:00",{"slug":51,"title":52,"published_at":53},"critical-magento-zero-day-stylesmuggler-exploited-to-plant-server-backdoors","Critical Magento Zero-Day (StyleSmuggler) Exploited to Plant Server Backdoors","2026-09-08T14:20:41.441+00:00",{"slug":55,"title":56,"published_at":57},"adobe-magento-zero-day-exploited-to-deploy-rust-backdoor-and-php-web-shell","Adobe Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell","2026-09-08T10:21:47.659+00:00",{"slug":59,"title":60,"published_at":61},"adobe-commerce-zero-day-exploited-to-backdoor-e-commerce-stores","Adobe Commerce Zero-Day Exploited to Backdoor E-Commerce Stores","2026-09-07T12:20:28.119+00:00",{"slug":63,"title":64,"published_at":65},"breeze-comet-apt-group-siphons-funds-from-global-financial-systems","Breeze Comet APT Group Siphons Funds from Global Financial Systems","2026-09-03T14:22:22.678+00:00",[67,72,77,81,85,90],{"slug":68,"name":69,"problem":70,"stories":71},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",9,{"slug":73,"name":74,"problem":75,"stories":76},"patch-management","Automated patch management","Known holes get closed in days, not months.",4,{"slug":78,"name":79,"problem":80,"stories":76},"network-detection-response","Network detection and response (NDR)","Attackers moving between systems inside the network get seen.",{"slug":82,"name":83,"problem":84,"stories":76},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",{"slug":86,"name":87,"problem":88,"stories":89},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",3,{"slug":91,"name":92,"problem":93,"stories":89},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.",[95,101,106,112,116,121,125,130],{"family":96,"item":97,"code":98,"title":99,"together":100},"cis","13","Control 13","Network Monitoring and Defense",15,{"family":5,"item":102,"code":103,"title":104,"together":105},"requirement-6","Requirement 6.3","Requirement 6: Develop and Maintain Secure Systems and Software",12,{"family":107,"item":108,"code":109,"title":110,"together":111},"gdpr","32","Article 32","Security of processing",11,{"family":96,"item":113,"code":114,"title":115,"together":71},"7","Control 7","Continuous Vulnerability Management",{"family":96,"item":117,"code":118,"title":119,"together":120},"3","Control 3","Data Protection",8,{"family":122,"item":123,"code":124,"title":124,"together":120},"itil","overview","ITIL",{"family":96,"item":126,"code":127,"title":128,"together":129},"2","Control 2","Inventory and Control of Software Assets",7,{"family":96,"item":131,"code":132,"title":133,"together":129},"6","Control 6","Access Control Management"]