Join RH-ISAC for a threat briefing about the latest intel on observed incidents and emerging threats relevant to the retail and hospitality community, as well as mitigation or response techniques. This month’s briefing will feature intel and research from RH-ISAC Associate Members, Flare and Kasada.

Topics:

Bypassing Authentication: How Attackers Use Session Cookies to Take Over Accounts
Retail and hospitality businesses rely on seamless digital experiences, but cybercriminals are exploiting session hijacking to bypass authentication, steal customer data, and commit fraud. This briefing explores how session cookies are compromised, traded on the dark web, and weaponized against organizations—leading to financial losses and reputational damage. Presented by Flare. 

New Threat Intel on Credential Stuffing Crews Targeting Retail and Hospitality:
Kasada infiltrated 22 credential stuffing crews to uncover how over 6.8 million stolen accounts fueled targeted attacks on retail and hospitality in Q1 2025. This session reveals how attackers use tools like OpenBullet, bypass CAPTCHA, and exploit economic conditions to scale fraud across customer accounts, loyalty programs, and digital platforms. You will walk away with intel-backed insights and strategies to mitigate automated threats without compromising user experience.