General Blog - RH-ISAC Blog

Somewhere in your organization this week, someone saved themselves a few hours by pasting company data into an AI tool nobody reviewed. They didn’t file a ticket, and they don’t think they did anything wrong.  It’s tempting to treat that as a policy violation. It’s more useful to treat it as information. Every unsanctioned AI…

Executive Summary A joint law enforcement advisory conducted by the National Police Agency of Japan (NPA),  National Cybersecurity Office of Japan (NCO), US Federal Bureau of Investigation (FBI), US Department of Defense Cyber Crime Center (DC3), Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC), Germany Federal Intelligence Service (BND), and Germany Federal Office for…

Executive Summary An Infoblox cybersecurity report, published on 15 September 2026, has revealed that online casinos are being used to disguise and deploy malicious threats targeting governments across Asia. Infoblox researchers discovered that a computer script known as PeckBirdy is being embedded into Chinese-language casino websites to avoid detection by targets and security software. These…

Executive Summary Manchester Airports Group has disclosed on 27 August 2026 that an unauthorized third party accessed customer data belonging to approximately 8.7 million people across three of England’s busiest airports: Manchester, London Stansted, and East Midlands. The incident involved data related to parking lot, lounge and fast-track bookings and in-airport Wi-Fi sign-ups, and the hackers obtained email…

Cyberattacks are relentless, with thousands occurring every day. Yet despite billions spent on defense, breaches persist, leaving organizations reeling from financial and reputational damage. The harsh reality? Many cybersecurity tools fail because they aren’t built for today’s dynamic threat landscape. I founded Stairwell to challenge that status quo—not by adding to the noise but by…

On November 2, 2023, the RH-ISAC intelligence and engineering team published the RH-ISAC Fraud Galaxy in the RH-ISAC Malware Intelligence Sharing Platform (MISP) instance for the retail, hospitality, and travel community to leverage. Purpose The purpose of the RH-ISAC Fraud MISP galaxy is to provide a knowledge base for the numerous fraud types that affect…

With cyber incidents on the rise, it’s more important than ever to protect data, both professionally and personally. Each October, we celebrate Cybersecurity Awareness Month as a reminder to take proactive steps to safeguard information from cyberattacks. This year is particularly significant as 2023 marks the 20th campaign. Developed by the National Cybersecurity Alliance and…

Picture this: A French-speaking security researcher finds a critical vulnerability in a major U.S. retailer’s mobile app. They draft an email warning, but they run it by an AI chatbot to fix English language snafus before notifying the company. Now imagine an attacker has been prowling the same large language model app for sensitive information….

With cybersecurity being a flourishing industry with promising job opportunities, recent college graduates may have their sights set on a career in cyber threat intelligence. The notion that graduates must obtain a degree in computer science, computer programming, or machine learning to land a career in cybersecurity is no longer the case. Many skills developed…

As a retailer or hospitality professional, we know that it is important to you to ensure that you are securing payment data effectively for your customers and for your business. It is also important for you to have a voice when it comes to the future of securing payment data through the ongoing development of…