AI is transforming retail operations and expanding your attack surface. Read this report from SentinelOne to learn how a layered defense-in-depth approach protects LLMs, cloud workloads, and AI-powered tools prompt injection, data exfiltration, and supply chain threats. assets.sentinelone.c...

Join us on 12 June for a deep dive with Intel471 into building a threat hunt from an initial hypothesis to a structured, repeatable workflow. This threat briefing also includes a session from Fastly about How Bots & AI Agents are Impacting Infrastructure. Register: rhisac.zoom.us/meeting/regi...

Join Accertify on 23 June for a webinar about fraud–cyber convergence. Learn the behaviors that drive performance, challenge assumptions, and equip your organization to reduce losses, boost approvals, and lead with confidence. Register: www.accertify.com/webinar-even...

In just over a month, Retail & Hospitality ISAC will be in Germany for a full-day cybersecurity workshop hosted by PUMA! There's still time to register and join us on 7 July: rh-isac-workshop-ger...

Connect with cybersecurity peers in person! Join us on 13 Aug for the RH-ISAC Regional Workshop in Louisville, KY hosted by Brown-Forman. Eligible non-members are welcome. Space is limited to keep discussions interactive. Reserve your seat now: rhisac.org/event/reg...

We are thrilled to be heading to the Boston area on 29 July for a Retail & Hospitality ISAC Workshop! 🗓️ When: 29 July | 9 a.m. - 5 p.m. 📍 Where: Marriott Boston Natick 💻 What: Presentations, Interactive Discussions, Threat Briefings ✅ Registration: rh-isac-workshop-boston-2026.eventbrite.com

Want to learn more about joining the RH-ISAC? We're hosting a call on 10 June where you can ask questions and hear from a current member about their experience with the ISAC! Register:

A new report details an ongoing Glassworm malware campaign targeting software developers through trusted development platforms, including npm, PyPI, OpenVSX, and GitHub. rhisac.org/threat-intel...

We'll be doing a deep dive into bad bots and agentic AI on 8 June! Join us for a presentation with Imperva to explore how modern bots are evolving and how to implement adaptive defenses. More info and registration:

The RH-ISAC globetrotting continues! We'll be in Bangalore on 5 Aug for a full-day program. RH-ISAC members, along with eligible non-members (must work in cybersecurity for a consumer-facing company) are invited to attend! More details and registration: rh-isac-workshop-india-2026.eventbrite.com

Each year, the RH-ISAC intel team cross-references our data with the findings of the annual Verizon Data Breach Investigation Report (DBIR). The 2026 report reveals where our community's experience aligns with global data and where it diverges. Read the report: rhisac.org/wp-content/u...

Headed to London for @Infosecurity next month? Join @Intel471Inc at a CTI and Threat Hunting networking event on 3 June at @heroicalounge! More info and registration: www.intel471.com/lp/infosecur...

Join RH-ISAC and Loblaw on 30 July for a full day of collaboration and real-world perspectives on top cybersecurity challenges. From interactive discussions to threat intel briefings, it is a great opportunity to connect and learn. Register: rh-isac-workshop-toronto-2026.eventbrite.com

Spots are filling up quickly for the Retail & Hospitality ISAC workshop in Singapore on 3 June! In collaboration with NRF 2026: Retail's Big Show Asia Pacific, this workshop will cover a range of topics relevant to the region and industry. Register at www.eventbrite.com/e/rh-isac-re...

Our latest blog post walks through what account fraud looked like in retail, QSR, airlines, and accommodation in Q1 2026, the macro forces shaping each industry, and the Q1 benchmarks behind the story, according to Kasada. rhisac.org/threat-intel...

An active “ClickFix” campaign is targeting macOS users through fake utility and troubleshooting lures. The campaign uses deceptive prompts masquerading as system fixes or macOS utilities to trick users into manually executing malicious terminal commands. rhisac.org/threat-in... #cybersecurity

Join @imperva.bsky.social on 21 May to learn how to identify and mitigate bot traffic, as well as bot attack simulation & defense strategies, the state of bots using AI, evasion tactics bots use, and key mitigation strategies. Register:

For #WorldPasswordDay, RH-ISAC is proud to support the updated Common Guidance on Passwords from Nonprofit Cyber. Let's make the Internet a safer place for all.

Researchers reported that a North Korea-aligned threat group known as ScarCruft executed a supply chain attack against a video gaming platform serving ethnic Koreans in China’s Yanbian region. rhisac.org/threat-intel... #Cybersecurity #SupplyChainAttack #ScarCruft

This practitioner's guide from SentinelOne shows how to leverage Agentic AI for machine-speed triage and remediation while maintaining human-in-the-loop governance. www.sentinelone.com/... #Cybersecurity #AgenticAI

Join Retail & Hospitality ISAC for our monthly threat briefing on 8 May, featuring Cloudflare presenting a deep dive into Tycoon2FA’s AiTM tactics. Register at: rhisac.org/event/threat... #ThreatIntelligence #CyberThreats #RetailSecurity #HospitalitySecurity #Phishing #MFA #Cloudflare

The Annual Threat Report from @sentinelone.com gives defenders a real-world playbook on how today’s adversaries abuse identity to move past MFA, exploit legacy edge blind spots, and weaponize automation. www.sentinelone.com/resources/eb...

Researchers have discovered that version 2026.4.0 of Bitwarden CLI has been compromised through a poisoned GitHub Actions workflow. The incident is part of the broader Checkmarx supply chain campaign.

This summer, RH-ISAC will be in Germany for a workshop on 7 July! Hosted by PUMA, the workshop provides a full day of presentations and discussions focused on issues that matter most to our industry. 🗓️ 7 July 📍 Herzogenaurach, Germany 🌐 Register: rh-isac-workshop-ger...

Researchers uncovered a critical vulnerability (CVE-2026-3854) in GitHub’s internal git infrastructure. By exploiting an injection flaw in GitHub’s internal protocol, any authenticated user could execute arbitrary commands on GitHub’s backend servers. rhisac.org/threat-intel...

ICYMI: Our recent threat intel blog in collaboration with @paloaltonetworks.com was picked up by @bleepingcomputer.com and numerous other outlets. www.bleepingcomputer.com/news/securit...

A new report from @imperva.bsky.social explores how AI-driven automation is transforming the way applications and APIs are accessed, with bots now accounting for the majority of global web traffic. Download now: www.imperva.com/resources/re...

RH-ISAC is proud to have contributed to the MITRE Fight Fraud Framework, an open, globally accessible knowledge base that maps real-world financial fraud tactics and techniques! The framework enables stronger collaboration across fraud prevention, detection & response teams. ctid.mitre.org/fraud#/

Join a virtual SentinelOne Cyber Forum: Threat Intel on 12 May to see how threat intel leaders dissect real attacks and harden defenses in live environments. Discover how AI-driven investigations and expert human responders can help stop threats.

🗓️ SAVE THE DATE!! The 2027 Retail & Hospitality ISAC Cybersecurity Summit will be held in Phoenix from 1-3 March. Registration will open later this year.

@paloaltonetworks.com Unit 42 is tracking an emerging extortion campaign targeting retail & hospitality organizations since February 2026. Read our latest blog post for details on the attack lifecycle and defensive options. rhisac.org/threat-intel...

Researchers discovered a new variant of the NGate malware family that abuses a legitimate Android application called HandyPay, instead of the previously leveraged NFCGate tool. rhisac.org/threat-intel...

Exciting news! RH-ISAC will host its first-ever regional workshop in Singapore. The event will be held in conjunction with NRF 2026: Retail's Big Show Asia Pacific on 3 June. The workshop is free to attend. More info: rhisac.org/event/region... #cybersecurity #retailsecurity

Agentic AI will continue to grow across retail environments, driven by competitive pressure and the need for operational scale. The challenge is to ensure that innovation is matched by appropriate governance, according to insights from Cequence Security: rhisac.org/risk-managem...

Infrastructure provider Vercel disclosed a significant security incident, stemming from a compromise of the third-party AI tool Context[.]ai. ShinyHunters has claimed responsibility for the breach. rhisac.org/threat-intel... #cybersecurity #ShinyHunters

Today’s most disruptive and violent threat actors don’t just exploit systems, they exploit people, culture, and online communities. In this keynote, Unit 221B explores how youth-driven, cybercrime networks organize, recruit, and scale attacks. Read more: summit2026.rhisac.or...

Modern fraud operations have drastically changed. Kasada offers insights into what this means for retail and hospitality: rhisac.org/special-inte...

In the opening Summit keynote, Target's CISO, Jodie Kautt will explore how adopting a “never waste a good crisis” mindset—using both internal incidents and industry headlines—can help sharpen focus and strengthen cyber programs. Read more: summit2026.rhisac.or...

It's almost time for the RH-ISAC Cybersecurity Summit, and we are thrilled to have Kasada as our title sponsor this year! Read more about their keynote session that will dive into fraud and agentic commerce: rhisac.org/press-rel... #cybersecurity #fraud #protectasone

According to open-source reports, multiple companies have suffered data theft attacks after a SaaS integration provider was breached and authentication tokens stolen. rhisac.org/threat-intel... #cybersecurity #breach

Read our latest blog post about a security researcher who publicly released a working proof-of-concept for an unpatched Windows local privilege escalation (LPE) vulnerability named BlueHammer. rhisac.org/threat-intel... #cybersecurity #zeroday #bluehammer

We are officially one week out from the 2026 Retail & Hospitality ISAC Cybersecurity Summit! This year's conference promises to be the best one yet, and we couldn't do it without the support of our fantastic sponsors!

Next week on 10 April at 11 a.m. ET, join RH-ISAC, Intel 471, and Kasada for a threat briefing. We’ll be using Scattered Spider activity as a foundation to show how to build a hunt package, taking you from single hypothesis to a fully operationalized workflow. Register: rhisac.org/event/threat...

📊 The 2026 Retail & Hospitality ISAC CISO Benchmark Report is out! Produced in collaboration with IANS, this year’s research captures insights from 200+ CISOs. Download a copy of the report at rhisac.org/wp-content/u...

Modern fraud is too often an identity-driven attack that spans the entire customer journey, making it a natural extension of the CISO’s security mandate. In our latest blog post, Accertify explains why fraud now belongs on the CISO's desk. rhisac.org/risk-managem...

Drawing on his professional experiences, which include roles at the FBI and the world's largest retailer, Tim Pappa of Walmart Global Tech will introduce 3 practical models of disruptive cyber deception operations during a Summit keynote presentation. summit2026.rhisac.or...

We're so excited for this keynote presentation featuring Sam Crowther of Kasada and John Byun of Sephora, who will discuss agentic commerce, what Sephora is seeing in this space, & how security teams can get ahead of agentic commerce before it becomes a problem. Read more:

Last year, @paloaltonetworks.com responded to more than 750 major cyber incidents. This report distills investigations into key trends shaping the threat landscape, revealing how attackers gain access, where organizations fall short, and what defenders can do. rhisac.org/threat-intel...

AI adoption in retail and hospitality is happening faster than most security teams can establish visibility, policy, and real-time enforcement. In our latest blog post, SentinelOne offers insights into the AI attack surface and mitigation strategies to consider. rhisac.org/risk-managem...

If you're in town for RSAC, join RH‑ISAC for a casual happy hour meet‑up! 📅 When: Stop by anytime between 4 p.m. - 6 p.m. on Tuesday or Wednesday. 📍 Where: Marriott Union Square, Bin480 Bar (lobby level) 🤝 Who: RH-ISAC members + cybersecurity pros who work in retail and hospitality