As a member of the National Council of ISACs, the RH-ISAC is the information sharing and analysis center for these important sectors – retail and hospitality.
Vienna, VA
Joined March 2015
- Tweets4.8K
- Following1.1K
- Followers1.8K
- Likes1.8K
Security alert: A malicious, trojanized "Claude Code" extension has been discovered on the Cursor Marketplace containing an SSH backdoor.
Read the full analysis and details on how to protect your environment here: rhisac.org/general-blog/clau…
As retailers gear up for the holiday season, cybercriminals are too. 🛍️💻
A new @Unit42_Intel report breaks down the top cyber threats facing the retail sector, from ransomware to e-skimming, and how organizations can defend themselves.
Read the full analysis: unit42.paloaltonetworks.com/…
Save $800+ on RSA Conference 2027 during Early Bird pricing. Join us and 43,000+ cyber- and AI security experts in San Francisco, April 5–8, for the Power of Community, at scale. Members save an extra $175—contact us for your exclusive discount code. rsaconference.pulse.ly/cy7cm…
Join RH-ISAC in Sydney, Australia on November 11 for an exclusive Regional Workshop!
Connect with retail and hospitality cybersecurity leaders to share threat intelligence, discuss emerging risks, and collaborate on industry-best defense strategies.
Secure your spot today: rhisac.pulse.ly/hb5tldwl63
CISA added the critical PHP2Shell vulnerabilities, CVE-2026-109618 and CVE-2026-109619, to its Known Exploited Vulnerabilities (KEV) Catalog following confirmation of in-the-wild exploitation. Read the full blog post here: rhisac.org/general-blog/upda…
A patch is now available for the "HTTP2Shell" vulnerability in the Brotli compression library, with proof-of-concept exploits already public. Organizations using Brotli should update immediately to mitigate risk.
Read the full details and security advisory: rhisac.org/general-blog/patc…
New RH-ISAC Intelligence Trends Summary + 2026 Holiday Threat Trends Report:
✅ Fraud, social engineering, and malware remain the most reported threats
✅ Intelligence sharing volume increased in Q3
✅ AI-driven commerce may introduce new fraud and account takeover risks this holiday season
Read the report and prepare for peak season: rhisac.pulse.ly/8hnlsevcwc
#ThreatIntel #RetailSecurity #Cybersecurity
The RH-ISAC CISO Benchmark Survey closes soon! Any CISO working for a retail, hospitality, or consumer-facing company is eligible to take the survey, regardless of RH-ISAC membership.
➡️Take the survey here: rhisac.pulse.ly/w17jsupi3m
✔️All survey respondents will receive a copy of the final report
📊 The CISO Benchmark report offers insights on budgets, staffing, priorities, investments, and trends shaping cybersecurity programs across the sector
#RHISAC #Cybersecurity #CISO #Benchmarking #RetailSecurity #HospitalitySecurity #CyberLeadership #InformationSharing
PHP has released a critical security update to mitigate severe vulnerabilities. Read the full details and update recommendations here: rhisac.org/general-blog/upda…
Microsoft, Google, and Mozilla are removing trust for eMudhra’s root certificates following a security compromise.
Read the details on how major browsers are responding to the incident: rhisac.org/general-blog/micr…
On 14 October 2026, @GroupIB_TI researchers published an in-depth analysis of KGB RAT. KGB RAT is a Remote Access Trojan (RAT) for sale on the dark web under the pretense of a legitimate Remote Administration Tool targeting Windows platforms. rhisac.org/general-blog/kgb-…
Calling all Cybersecurity practitioners from retail, hospitality, and consumer-facing organizations:
Join RH-ISAC in London on 5 November for a full day of peer discussions, leading practices, professional development, and networking.
Register: eventbrite.pulse.ly/jkreyynq…
#Cybersecurity #RHISAC
Why do CISO-led fraud prevention programs underperform? 📉
Discover what the data says, and learn actionable strategies to align security and fraud teams for better business outcomes.
Read the full report from @AccertifyInc accertify.pulse.ly/rx6njmx1r…
RH-ISAC retweeted
It’s officially #CybersecurityAwarenessMonth — and NCI is proud to be a @StaySafeOnline (National Cybersecurity Alliance) Champion!
When defenders share what they see, everyone gets stronger.
See something. Share something.
#cybersecurity #resilience #staysafeonline
Social engineering attacks are evolving fast in the age of AI. Join @DoppelHQ to see how threat intelligence, Digital Risk Protection, Email Security, and Human Risk Management come together to defend the full social engineering attack chain.
On-Demand | Register and watch here: doppel.pulse.ly/j3ervrymvu
🚨 Last chance to register! 🚨
Join the ThreatOps Challenge: Capture-the-Flag on October 15 and test your skills against real-world attack scenarios. Built for SOC analysts, threat hunters, and security teams across retail, hospitality, and travel.
Register now: rhisac.pulse.ly/wzwwtyf8lw
#Cybersecurity #CTF #RHISAC #ThreatOps
China-linked threat actors are utilizing a operational relay box (ORB) network to target critical infrastructure sectors globally.
Read the full analysis and mitigation recommendations: rhisac.pulse.ly/vv9mb496z9
Are you a CISO working for a consumer-facing company? If so, we want YOU to take the RH-ISAC CISO Benchmark Survey! Responses will remain anonymous, and everyone who completes the survey will receive a copy of the full report, which offers exclusive insights into cybersecurity budgets, staffing, priorities, and challenges in the sector.
Take the survey: rhisac.pulse.ly/idg9toaxmq
#RHISAC #Cybersecurity #CISO #Benchmarking
Hackers are exploiting negative hotel reviews to deliver AI-generated malware while hiding command-and-control infrastructure on the blockchain. A reminder that social engineering techniques continue to evolve alongside attacker tradecraft.
Read more: rhisac.pulse.ly/vz6rztqwmb
#Cybersecurity #ThreatIntelligence #Malware
