» Annie Chambliss Blog

On December 5, 2023, industrial and operational technology security vendor TXOne Networks disclosed details of 10 unpatched vulnerabilities in building automation products made by Austrian company Loytec. Context According to reports, TXOne researchers discovered the vulnerabilities over two years ago. According to reports, “The vulnerabilities are related to usernames and passwords being transmitted or stored…

The holiday shopping season is teed up for its annual explosion of spending. Retailers know this, consumers know this, and, unfortunately, cybercriminals know this. They are already taking advantage of any weak link they find to steal vital consumer and business data. Unlike gift buyers heading to stores or shopping online on Black Friday and…

Vienna, VA (November 21, 2023) – The Retail & Hospitality Information Sharing and Analysis Center (RH-ISAC) announced the results of the 2023 Board of Directors elections today. Diane Brown, vice president of IT risk management at Ulta Beauty, and Jason Stead, CISO for Choice Hotels International, were both re-elected for three-year terms on the board. Ngozi Eze, Global CISO…

On November 20, 2023, Cofense researchers published a report on a phishing campaign spreading DarkGate and Pikabot that is leveraging tactics previously used to deploy QakBot. Context Cofense researchers stated, “This campaign disseminates a high volume of emails to a wide range of industries, and due to the loader capabilities of the malware delivered, targets…

Tyler Compton, lead information security engineer at Aaron’s, discusses how he began his journey in cybersecurity, what he enjoys about cybersecurity, and the value of the RH-ISAC community. Tell us about yourself and your background. I grew up outside of a little big city in North Georgia called Rome. There are not a ton of…