Webinar Description
Key Takeaways
- Focuses on browser-based threats targeting retail and eCommerce environments during peak holiday shopping periods
- Examines how approved scripts from tag managers, analytics platforms and payment services can be exploited for malicious purposes
- Addresses PCI DSS 4.0.1 compliance requirements 6.4.3 and 11.6.1
- Designed for AppSec professionals, retail security teams and PCI compliance officers
- Provides practical questions for reviewing checkout, account and billing processes before change windows narrow
About the Event
The Holiday 2026 Threat Briefing is a live webinar hosted by Source Defense on October 14th, 2026. The session presents research and practical strategies for defending against browser-based threats that target retail and eCommerce environments during the holiday season. The briefing aims to equip security teams with actionable insights before peak shopping periods begin.
Browser-Based Attack Techniques
The webinar examines how attackers exploit scripts that have already passed approval processes. Even legitimate scripts from tag managers, analytics services and payment workflows can be leveraged for malicious purposes through techniques that evade routine security reviews and scans. Specific attack methods covered include conditional execution, fake form injection and page manipulation designed to compromise sensitive customer journeys.
A central theme is the gap between script approval and runtime behavior. Security reviews may confirm which scripts are approved without revealing what those scripts do after execution. Understanding runtime behavior helps teams identify threats that script inventories and source-based reviews miss.
PCI DSS 4.0.1 Compliance Context
The briefing addresses PCI DSS 4.0.1 requirements 6.4.3 and 11.6.1, which relate to script management and integrity monitoring on payment pages. These requirements have direct implications for how retailers and payment processors must monitor and control client-side scripts in checkout and billing processes.
Who Should Attend
This webinar is designed for mid to senior-level professionals responsible for security and compliance in retail, eCommerce and payment processing organizations. Relevant roles include application security professionals, retail security teams, PCI compliance officers and eCommerce security specialists. The content is particularly relevant for those working in application security, IT security, compliance and eCommerce operations departments who need to prepare their defenses before holiday traffic peaks.