New Requirements for PCI DSS 4.0.1 and Digital Payment Security in 2025

With e-commerce volumes reaching trillions of dollars, the risk of cyberattacks is also increasing. The PCI DSS 4.0.1 standard, developed to protect credit card data against AI-powered attacks in particular, has become a critical requirement for organizations by 2025.

New regulations, which came into effect in April, require companies to implement more sophisticated security measures. Many new technical controls are now mandatory, ranging from encrypting CVV codes and preventing remote access and card number copying to virus scanning of portable media (USB drives, etc.). Furthermore, companies need to conduct detailed risk analyses to determine how frequently security checks should be performed. While artificial intelligence can assist in these processes, accurately identifying where data is stored and effectively managing the new risks posed by cloud systems remains crucial.

Some of the precautions we need to take to protect against these types of attacks include:

• Do not open emails from untrusted sources.

• Use multi-factor authentication (MFA).

• Keep your system updated to the latest version at all times.

• Monitor login logs regularly.

• Track the security of mobile devices.

For detailed information, you can reach out to our experts at info@zerosecond.ae