Michael Gavin: “Every retailer out there has to acknowledge that they could be the next Hannaford” Gavin: No matter what PCI says, no matter how good it is, there is no such thing as absolute security. There are ways to beat people who are compliant right now, he says. Gavin: Application security is still a major concern at this point and must be addressed by people processing card card data. He says the application security requirement has grown from being a best practice to being one of the best requirements.”]
Source: https://www.cuinfosecurity.com/pci-compliance-update-there-no-such-thing-as-absolute-security-a-858

