The Retail and Hospitality Information Sharing and Analysis Center (RH-ISAC) today announced its adoption of the FIRST Standard Definitions and Usage Guidance — Traffic Light Protocol (TLP) Version 2.0 for sharing information within the organization. As of January 4, 2023, all RH-ISAC intelligence reports, community calls, workshops, and briefings will follow TLP 2.0 standards. The intelligence team will discuss…
Read More
Vienna, VA (November 16, 2022) – The Retail & Hospitality Information Sharing and Analysis Center (RH-ISAC) announced the results of the 2022 Board of Directors elections today. Rich Agostino, SVP and CISO at Target, and Dave Estlick, VP and CISO at Chipotle, were both re-elected for three-year terms on the board. Brett Cumming, senior director of information security at…
Read More
Vienna, VA (November 7, 2022) – The Retail & Hospitality Information Sharing and Analysis Center (RH-ISAC) today released its Holiday Season Cyber Threat Trends report, which examines the threat landscape facing the retail and hospitality sector during the holiday season, typically the busiest time of year for these industries. According to the report, QakBot, Emotet, Agent…
Read More
Context On October 4, 2022, DCSO CyTec security researchers reported the technical details of a new backdoor malware targeting Microsoft SQL servers they dubbed “Maggie.” According to researchers, the Maggie backdoor can bruteforce logins to other MSSQL servers and add a new hardcoded backdoor user after bruteforcing administrator logins. Researchers did not investigate if and…
Read More
The annual RH-ISAC Cyber Intelligence Summit was held in Plano, Texas on September 20-21, 2022. Summit is the premier event for cybersecurity practitioners in the retail, hospitality, and travel industries. This year’s event had nearly 400 attendees for two days full of presentations and networking. The post-conference report is now available to download. It includes details about…
Read More
Vienna, VA (September 29, 2022) – The Retail & Hospitality Information Sharing and Analysis Center (RH-ISAC) today released the first-ever public version of the Retail & Hospitality Intelligence Trends Summary, which analyzes trends in the cyberthreat landscape for the retail, hospitality, and travel sectors. The report sheds light on the top threats and malware families reported…
Read More
Vienna, VA (September 21, 2022) – The Retail & Hospitality Information Sharing and Analysis Center (RH-ISAC) announced its 2022 award winners during the annual membership meeting held on September 20 in Frisco, Texas. The awards recognize outstanding companies and individuals who have displayed extraordinary dedication to RH-ISAC’s mission to build a collaborative sharing community that enables consumer-facing…
Read More
Vienna, VA (August 30, 2022) – The Retail & Hospitality Information Sharing and Analysis Center (RH-ISAC) today announced that Splunk will be the title sponsor of the RH-ISAC Cyber Intelligence Summit which takes place September 20-21 in Dallas/Plano, TX. This annual event is tailored for strategic leaders and cybersecurity practitioners from physical and online retailers, hotels,…
Read More
Context On August 4, 2022, Cisco Talos Intelligence researchers reported new technical details of a tool called “Dark Utilities” that provides a full suite of command-and-control (C2) capabilities for threat actors. The tool, which was released in early 2022, is advertised by creators as enabling remote access, command execution, distributed denial-of-service (DDoS) attacks, and cryptomining…
Read More
Context On August 3, 2022, ZScaler researchers reported the technical details of an adversary in the middle (AiTM) campaign active since at least June 2022. The RH-ISAC team believes, based on timing and nearly identical tactics, techniques, and procedures (TTPs), that this campaign is likely connected to highly similar activity previously reported by Microsoft. Key…
Read More
