As a member of the National Council of ISACs, the RH-ISAC is the information sharing and analysis center for these important sectors – retail and hospitality.
Microsoft, Google, and Mozilla are removing trust for eMudhra’s root certificates following a security compromise.
Read the details on how major browsers are responding to the incident: rhisac.org/general-blog/micr…
On 14 October 2026, @GroupIB_TI researchers published an in-depth analysis of KGB RAT. KGB RAT is a Remote Access Trojan (RAT) for sale on the dark web under the pretense of a legitimate Remote Administration Tool targeting Windows platforms. rhisac.org/general-blog/kgb-…
Calling all Cybersecurity practitioners from retail, hospitality, and consumer-facing organizations:
Join RH-ISAC in London on 5 November for a full day of peer discussions, leading practices, professional development, and networking.
Register: eventbrite.pulse.ly/jkreyynq…#Cybersecurity#RHISAC
Why do CISO-led fraud prevention programs underperform? 📉
Discover what the data says, and learn actionable strategies to align security and fraud teams for better business outcomes.
Read the full report from @AccertifyIncaccertify.pulse.ly/rx6njmx1r…
Social engineering attacks are evolving fast in the age of AI. Join @DoppelHQ to see how threat intelligence, Digital Risk Protection, Email Security, and Human Risk Management come together to defend the full social engineering attack chain.
On-Demand | Register and watch here: doppel.pulse.ly/j3ervrymvu
🚨 Last chance to register! 🚨
Join the ThreatOps Challenge: Capture-the-Flag on October 15 and test your skills against real-world attack scenarios. Built for SOC analysts, threat hunters, and security teams across retail, hospitality, and travel.
Register now: rhisac.pulse.ly/wzwwtyf8lw#Cybersecurity#CTF#RHISAC#ThreatOps
China-linked threat actors are utilizing a operational relay box (ORB) network to target critical infrastructure sectors globally.
Read the full analysis and mitigation recommendations: rhisac.pulse.ly/vv9mb496z9
Are you a CISO working for a consumer-facing company? If so, we want YOU to take the RH-ISAC CISO Benchmark Survey! Responses will remain anonymous, and everyone who completes the survey will receive a copy of the full report, which offers exclusive insights into cybersecurity budgets, staffing, priorities, and challenges in the sector.
Take the survey: rhisac.pulse.ly/idg9toaxmq#RHISAC#Cybersecurity#CISO#Benchmarking
Hackers are exploiting negative hotel reviews to deliver AI-generated malware while hiding command-and-control infrastructure on the blockchain. A reminder that social engineering techniques continue to evolve alongside attacker tradecraft.
Read more: rhisac.pulse.ly/vz6rztqwmb#Cybersecurity#ThreatIntelligence#Malware
🇦🇺 RH-ISAC is coming to Sydney, Australia on November 11!
Hosted by @woolworths, this one-day event brings together cybersecurity practitioners from across consumer-facing industries for interactive discussions, knowledge sharing, networking, and professional development.
Learn more and register here: eventbrite.pulse.ly/tiacamuk…#CyberSecurity#ThreatIntelligence#RHISAC
How are organizations combating account takeover, bot attacks, and synthetic identity fraud without adding customer friction?
Explore the 2025 KuppingerCole FRIP for eCommerce report, highlighting @TransmitSec as uniquely placed to combat the modern threats presented by Agentic AI.transmitsecurity.pulse.ly/uf…
The "Gentlemen" ransomware affiliate is escalating operations, deploying Multiple Command Protocols (MCP) in highly coordinated, multi-sector campaigns.
Our analysis breaks down their active Tactics, Techniques, and Procedures (TTPs) to help SOC and threat intelligence teams fortify defenses. Read the full analysis here: rhisac.pulse.ly/nsnfuvwgia
🚩 The flags are hidden. The clock is ticking. Think you can beat the clock?
Join @SentinelOne and @RH_ISAC on October 15 for ThreatOps Challenge: Capture-the-Flag and race through hands-on attack scenarios, hunt threats, compete with industry peers, and earn 3 ISC2 CPE credits. Open to all skill levels.
Register here: rhisac.pulse.ly/pij8x1mtvh#CyberSecurity#CTF#ThreatHunting#RHISAC
Threat actors are abusing ChatGPT Custom GPTs to deliver ClickFix lures, leading to RAT deployment and persistent access through DLL sideloading.
The campaign demonstrates how trusted AI platforms can be weaponized for social engineering and malware delivery.
Read the analysis: rhisac.pulse.ly/tgnpmuch7g#CyberSecurity#ThreatIntel#ClickFix#Malware#AISecurity#RHISAC