Member Spotlight: Alicia Gristmacher

Alicia Gristmacher, manager of cybersecurity compliance operations at Hyatt, discusses how she began her journey in cybersecurity, Hyatt’s commitment to protecting people, and what she enjoys most about the cybersecurity sector. Tell us about yourself and your background. As a manager of cybersecurity compliance operations at Hyatt, I am responsible for the global third-party risk…

Read More

GoPIX Infostealer Targeting PIX Payment System in Brazil

Context On October 24, 2023, Kaspersky researchers released a report on several cyber threats, including the GoPIX infostealer malware campaign, which they assess has been active since December 2022. Technical Details According to Kaspersky: “GoPIX is a typical clipboard stealer malware that steals PIX “transactions” used to identify payment requests and replaces them with a…

Read More

Safeguarding Tomorrow with Cybersecurity Awareness Month

With cyber incidents on the rise, it’s more important than ever to protect data, both professionally and personally. Each October, we celebrate Cybersecurity Awareness Month as a reminder to take proactive steps to safeguard information from cyberattacks. This year is particularly significant as 2023 marks the 20th campaign. Developed by the National Cybersecurity Alliance and…

Read More

2023 Award Winners Revealed During Member Meeting & Celebration Dinner at Annual Cyber Intelligence Summit

On October 3, the RH-ISAC recognized the 2023 award winners at the Member Meeting & Celebration Dinner, held in conjunction with the Annual Cyber Intelligence Summit. Each year we honor those member organizations and individuals who went the extra mile to further the RH-ISAC community through their sharing endeavors. Awards are distinguished by two different…

Read More

Don’t Miss These Sessions at the RH-ISAC Cyber Intelligence Summit

The RH-ISAC Cyber Intelligence Summit in Dallas, Texas, is right around the corner. From October 2 – 4, cybersecurity practitioners in retail and hospitality will meet at RH-ISAC’s largest conference of the year to explore solutions to pressing issues, expand their skillset, and network. This year, we developed an extensive program featuring a range of…

Read More

Member Spotlight: Michael Francess

Michael Francess is the senior manager of cybersecurity advanced threat and response at Wyndham Hotels & Resorts. We were able to talk with Michael about his fascination with cybersecurity during his youth, role at Wyndham, and how the RH-ISAC community has impacted him. Tell us about yourself and your background. I have been with Wyndham…

Read More

How to Stay Secure Amid AI Mania

Picture this: A French-speaking security researcher finds a critical vulnerability in a major U.S. retailer’s mobile app. They draft an email warning, but they run it by an AI chatbot to fix English language snafus before notifying the company. Now imagine an attacker has been prowling the same large language model app for sensitive information….

Read More

MetaStealer Family of Go Infostealers Targeting Businesses Using macOS

On September 11, 2023, SentinelOne researchers reported the technical details a campaign targeting unspecified businesses that operate macOS in their environments with a series of infostealers written in Go they dubbed the “MetaStealer” family. Context According to the report, the campaign has been “proactively targeting macOS businesses by posing as fake clients in order to…

Read More

The RH-ISAC Cyber Intelligence Summit Delivers Unmatched Content

The RH-ISAC Cyber Intelligence Summit agenda is brimming with keynote and breakout sessions showcasing an array of cybersecurity’s top experts. From October 2 – 4 in Dallas, Texas, attendees can partake in sessions designed to spark discussions, develop connections, and explore solutions to prominent issues cybersecurity practitioners face while working in the retail and hospitality…

Read More

“Spacecolon” Toolkit Used to Target Multiple Industries with Scarab Ransomware, including Hospitality and Entertainment Organizations

Context On August 22, 2023, researchers at ESET released the technical details of the Spacecolon toolset, which they observed being leveraged in multiple campaigns to deploy the Scarab ransomware against multiple industries. According to the report, the campaigns are not specifically targeted, but are opportunistic in nature. Known targets include “a hospital and a tourist…

Read More