A protocol flaw has been discovered that could allow criminals to use a genuine chip-and-PIN card to make a payment without knowing the card’s PIN. The vulnerability allows fraudsters to remain undetected even when the merchant bank has an online connection to the banking network.Eli Jellenc, head of international cyber intelligence at iDefense, comments, “A group of researchers from Cambridge …[more]