Retail & Hospitality ISAC

The RH-ISAC CISO Benchmark Survey closes soon! Any CISO working for a retail, hospitality, or consumer-facing company is eligible to take the survey, regardless of RH-ISAC membership. Take the survey: https://rhisac.pulse.ly/u1hfgbxw85 #RHISAC #Cybersecurity #CISO #Benchmarking

PHP has released a critical security update to mitigate severe vulnerabilities. Read the full details and update recommendations here: https://rhisac.org/general-blog/update-php-releases-critical-php-security-update-to-mitigate-vulnerabilities/

Microsoft, Google, and Mozilla are removing trust for eMudhra’s root certificates following a security compromise. Read the details on how major browsers are responding to the incident: https://rhisac.org/general-blog/microsoft-chrome-firefox-respond-to-emudhra-ca-revocation-after-compromise/

On 14 October 2026, Group-IB TI researchers published an in-depth analysis of KGB RAT. KGB RAT is a Remote Access Trojan (RAT) for sale on the dark web under the pretense of a legitimate Remote Administration Tool targeting Windows platforms. rhisac.org/general-blog...

Join RH-ISAC in London on 5 November for a full-day cybersecurity workshop. Connect with fellow practitioners from retail, hospitality, and other consumer-facing organizations. If you're eligible, we'd love to have you join us! Register here: https://eventbrite.pulse.ly/drbcyd31kn

Why do CISO-led fraud prevention programs underperform? 📉 Discover what the data says, and learn actionable strategies to align security and fraud teams for better business outcomes. Read the full report from Accertify:https://accertify.pulse.ly/xxzblcblh2

Join @doppelhq.bsky.social to see how threat intelligence, Digital Risk Protection, Email Security, and Human Risk Management come together to defend the full social engineering attack chain. On-demand | Register and watch here: doppel.pulse.ly/tmfbamdict

⏰ Last chance to register for the ThreatOps Challenge: Capture-the-Flag! Investigate attack scenarios and compete with peers in a virtual CTF designed for cybersecurity practitioners across retail, hospitality, and travel. https://rhisac.pulse.ly/hjggbpjzzo #Cybersecurity #CTF #ThreatHunting

China-linked threat actors are utilizing a operational relay box (ORB) network to target critical infrastructure sectors globally. Read the full analysis and mitigation recommendations: https://rhisac.pulse.ly/snbzv8gwfh

Threat actors are using fake responses to negative hotel reviews to spread AI-generated malware and leverage blockchain technology to conceal C2 communications. Learn how this campaign works: https://rhisac.pulse.ly/fgjk3sftxo #Cybersecurity #ThreatIntel #RetailSecurity

Registration is now open for the 2027 RH-ISAC Cybersecurity Summit! Join us on 1-3 March in Phoenix for the retail and hospitality industry's can't-miss cybersecurity conference: https://rhisac.pulse.ly/gbmfwtsbcl #Cybersecurity #InfoSec #RetailSecurity #HospitalitySecurity

🇦🇺Join RH-ISAC in Australia on November 11! Hosted by @woolworths.bsky.social, this one-day event brings together cybersecurity practitioners from across consumer-facing industries. Learn more and register here: https://eventbrite.pulse.ly/noxeqpm1vo #CyberSecurity #ThreatIntelligence #RHISAC

🏨🔐 RH-ISAC's CISO Forum Americas brings together cybersecurity leaders from retail, hospitality, and travel for a day of collaboration and networking. Hosted by @choiceadvantages.bsky.social. 📅 Oct. 22 | Scottsdale, AZ | Register here: https://eventbrite.pulse.ly/wd9h6do8ic #CyberSecurity #CISO

How are organizations combating synthetic identity fraud without adding customer friction? Explore the 2025 KuppingerCole FRIP report, highlighting Transmit Security as uniquely placed to combat the modern threats presented by Agentic AI.: https://transmitsecurity.pulse.ly/rolrtijm7x

AI-enabled fraud is evolving fast. This new whitepaper from Transmit Security explores the 2026 threat landscape, covering agentic phishing, deepfake social engineering, and more: content.transmitsecurity.com/how-to-prote... #CyberSecurity #FraudPrevention #IdentitySecurity

The "Gentlemen" ransomware affiliate is escalating operations, deploying Multiple Command Protocols (MCP) in highly coordinated, multi-sector campaigns. Read the full analysis here: https://rhisac.pulse.ly/dv6ygwcz5p

🚩 The flags are hidden. The clock is ticking. Join RH-ISAC and SentinelOne for a Capture-the-Flag exercise to tackle hands-on attack scenarios, compete with industry peers, and sharpen your threat-hunting skills. Plus, earn 3 ISC2 CPE credits. Register here: https://rhisac.pulse.ly/hupeeskg5c

Threat actors are leveraging ChatGPT Custom GPTs to distribute ClickFix lures and malware, demonstrating a novel use of trusted AI platforms to facilitate social engineering. Read RH-ISAC's analysis and mitigation recommendations: https://rhisac.pulse.ly/sjkhnask2d #CyberSecurity #ThreatIntel

October is #CybersecurityAwarenessMonth! 🔐 Protecting the retail and hospitality sectors takes collaboration, trusted intelligence sharing, and a community committed to staying ahead of evolving threats. At RH-ISAC, we're strongest when we #ProtectAsOne. #Cybersecurity #ThreatIntelligence

Join RH-ISAC on October 9 for our Retail & Hospitality Threat Landscape Briefing, featuring presentations from @servicenow.bsky.social and @cequence.bsky.social Register here: https://rhisac.pulse.ly/nretbil2xs #CyberSecurity #ThreatIntelligence #RetailSecurity https://rhisac.pulse.ly/nretbil2xs

CISOs at consumer-facing companies, we want to hear from you! Take the RH-ISAC CISO Benchmark Survey. Responses are anonymous, and participants receive the full report with insights into cybersecurity budgets, staffing, priorities, and challenges. Take survey: https://rhisac.pulse.ly/tzmfvyhreu

Somewhere in your organization this week, someone saved themselves a few hours by pasting company data into an AI tool nobody reviewed. It’s tempting to treat that as a policy violation. It’s more useful to treat it as information. Read the full blog post from Onyx Security

Want to learn how your company can benefit from joining RH-ISAC's sharing community? Join us on 22 Sept at 12 p.m. ET for a call where Patagonia will speak about their experience with RH-ISAC. Register: https://rhisac.pulse.ly/mdb5ie6cor #Cybersecurity #InfoSec #ThreatIntelligence #ThreatSharing

A threat report lands. Turning it into detections takes a week. We'll work one end to end, then showcase how Nightwatch automates the path. Hosted by Robert Fly, https://detections.pulse.ly/6zc2jhs1us CEO. Register now! https://zoom.pulse.ly/5xkuzcfgns

RH-ISAC's Steve Diamond will be speaking at Merchant Fraud Alliance, October 6-7 in Chicago. His session, titled Inside the Fraud Machine: How Fraud-as-a-Service Operates, Scales, and Why Collective Defense Matters, will be part of the Deep Dive track. Register: www.merchantfraudalliance.com

The Retail & Hospitality ISAC workshop in Vancouver is filling up fast! If you're planning to join us on 14 October, register now: rh-isac-workshop-vancouver-2026.eventbrite.com

An Infoblox cybersecurity report, published on 15 September 2026, has revealed that online casinos are being used to disguise and deploy malicious threats targeting governments across Asia. Read our story on it here: rhisac.org/general-blog... rhisac.org/general-blog...

RH-ISAC will be in London on 5 November for a full-day cybersecurity workshop! Cybersecurity practitioners who work for a retail, hospitality, or consumer-facing company are eligible to attend. See more details and register here: rh-isac-workshop-london-2026.eventbrite.com

Doppel's threat intelligence snapshot examines retail and consumer goods exposure from March to July 2026: leaked gift-card credentials, counterfeit marketplace listings, lookalike domains, and paid-ad abuse across Bing, Meta, and Google. www.doppel.com/resources/re...

Join Xcelerate as they bring engineering and security leaders together to share how they’re building innovative digital experiences on Fastly’s platform. This event features guest speakers from Wayfair, Life Time, The Weather Company and others. Register here: www.fastly.com/events/xcele...

Microsoft Security Research published in a report tracking active cloud-based intrusions spanning multiple accounts in which unusual sign-ins were followed by threat actor-added authentication methods and more. Read the full report here: rhisac.org/threat-intel...

📢 The RH-ISAC CISO Benchmark Survey is now open. Retail and hospitality CISOs: share your perspective to help build one of the industry's most valuable cybersecurity benchmarking resources. ⏱️ ~15 minutes to complete 🔒 Responses are anonymous Take the survey: rhisac.org/ciso-benchma...

@awnetworks.bsky.social Arctic Wolf is tracking a widespread data theft and extortion threat cluster designated as PREY-0058. This activity targets Microsoft 365 and other SaaS services through IT help-desk vishing, adversary-in-the-middle token theft, and residential-proxy sign-ins.

Join us on 11 Sept for our monthly threat briefing! This month's topics are: ☑️ AI-Powered Social Engineering Trends in Retail & Hospitality (presented by @Doppel) ☑️ Understanding Fringe Issues & the Evolution of Democratized Targeting (presented by 360Privacy) Register: rhisac.org/event/threat...

Join RH-ISAC for a group call to learn more about our sharing community! RH-ISAC members share real-time cyber intelligence on incidents, threats, vulnerabilities, and threat remediation from more than 5,000 analysts, threat hunters and security engineers. rhisac.org/event/rh-isa...

A dark web marketplace claims to be selling 153M U.S. and Canadian driver's licenses allegedly sourced from IDScan.net. The FBI NewOrleans has launched an inquiry, while the company investigates. No breach has been confirmed at this time. #CyberSecurity #ThreatIntel

We're one month out from the Retail & Hospitality ISAC Gaming Workshop in Las Vegas! Have you registered yet? It's free to attend and open to anyone who works in cybersecurity for the gaming/casino industry. Details and registration:

Drawing on over 570 million transactions and five years of Cyber Week intelligence, Accertify will share new research into how fraud patterns are changing across the holiday shopping season: event.on24.com/wcc/r/545446...

On 28 August 2026, @threatintel.microsoft.com reported details of what they have dubbed a TerminalFix campaign, a variant of ClickFix rhisac.org/threat-intel...

Manchester Airports Group has disclosed on 27 August 2026 that an unauthorized third party accessed customer data belonging to approximately 8.7 million people across three of England’s busiest airports: Manchester, London Stansted, and East Midlands. rhisac.org/general-blog...

The Retail & Hospitality ISAC worldwide workshop tour continues! In November, we'll be heading to Atlanta for a workshop hosted by The Home Depot on 3 November. More details and registration:

Researchers from Lab539 on 12 August 2026 observed a widespread campaign utilizing compromised WordPress sites to deliver a ClickFix verification flow that prompts users to execute a malicious PowerShell command. rhisac.org/threat-intel...

Join Tarun Thakur (ServiceNow) and Nick Krieble (IHG) on Aug 27 to gain practical guidance for strengthening least-privilege controls across your workforce while supporting AI adoption at scale. info.servicenow.com/WBR-MA000153...

A cyberattack on a major global logistics provider disrupted operations across banking, gaming, and retail customers alike — a reminder that the risk retailers need to manage doesn't stop at their direct vendors. Read the full blog post from IANS: rhisac.org/threat-intel...

Researchers at the @umassamherst.bsky.social report the technical details of an attack vector that revives expired Visa contactless credit cards for real in-store purchases by rewriting the expiration date read by a point-of-sale terminal: rhisac.org/general-blog...

A threat actor known as TheHatman is currently selling massive internal employee directories belonging to major retail entities on Breached cybercrime forum. rhisac.org/general-blog...

A cyberattack on a major global logistics provider disrupted operations across banking, gaming, and retail customers alike — a reminder that the risk retailers need to manage doesn't stop at their direct vendors. Read more insights from IANS: rhisac.org/risk-mana... #cybersecurity #riskmanagement

Registration is open for the RH-ISAC workshop in Vancouver on 14 October! Hosted by Earls Kitchen + Bar and in collaboration with the Retail Council of Canada, this full-day event brings together cybersecurity practitioners from across the industry. rh-isac-workshop-vancouver-2026.eventbrite.com

Calling all retail and hospitality CISOs in Europe! Join the Retail & Hospitality ISAC for a CISO Forum event on 23-24 September in Paris, hosted by Kering at their headquarters, housed in a 17th-century architectural landmark. ✅ Register: rh-isac-cisoforum-paris-2026.eventbrite.com

Join RH-ISAC Associate Member Doppel on 25 August to learn how security leaders from the San Francisco 49ers and New York Giants are preparing to protect their teams, athletes, executives, brands, and fans from emerging AI-enabled threats.