Small businesses and local mom-and-pop stores are familiar with cybersecurity risks they face, but major retailers and corporations also suffer from difficult point-of-sale (POS) systems struggling with security problems. Botnets made of thousands of compromised PCs are trying to launch brute-force attacks against POS with lackluster security in place.
"Point of sale architecture and security is such a niche industry in terms of how to secure these systems and how card data flows," said Lucas Zaichowsky, AccessData enterprise defense architect, said. "It's like a big black box; those who know it well are few and far between. Even PCI auditors don't understand it all that well."
Zaichowsky will speak during the Black Hat USA 2014 in early August, hoping to spur interest in helping POS dealers build better defense of POS technologies. Cybercriminals rely on exposing older versions of VNC, PCAnywhere and other remote management clients, able to brute-force their way into networks.