3DS browser flows can reveal card state before authorization
In six of seven ACS cohorts, a Braintree/Cardinal browser path separated researcher cards from nearby same-range PANs.
3 stories, newest first · one card per story
In six of seven ACS cohorts, a Braintree/Cardinal browser path separated researcher cards from nearby same-range PANs.

UMass Amherst researchers demonstrated expired Visa contactless cards can complete real purchases via relay attacks exploiting Visa Kernel 3's unsigned expiry date handling.

UMass Amherst researchers demonstrate Zombie Card, an NFC relay attack that revives expired Visa contactless cards for in-store purchases without breaking cryptography.
Today 1.6K readers · 2.5K views · 779 reads · all time 189K views