Researchers at the @umassamherst.bsky.social report the technical details of an attack vector that revives expired Visa contactless credit cards for real in-store purchases by rewriting the expiration date read by a point-of-sale terminal: rhisac.org/general-blog...

Zombie Card Attack Exploits Contactless Payments for POS Terminals - RH-ISAC

Researchers at the University of Massachusetts Amherst report the technical details of an attack vector that revives expired Visa contactless credit cards for

rhisac.org

A threat actor known as TheHatman is currently selling massive internal employee directories belonging to major retail entities on Breached cybercrime forum. rhisac.org/general-blog...

TheHatman Listing Major Retail and Hospitality Azure/Entra Records on Dark Web Forum - RH-ISAC

A threat actor known as TheHatman is currently selling massive internal employee directories belonging to major retail entities on Breached cybercrime forum.

rhisac.org

A cyberattack on a major global logistics provider disrupted operations across banking, gaming, and retail customers alike — a reminder that the risk retailers need to manage doesn't stop at their direct vendors. Read more insights from IANS: rhisac.org/risk-mana... #cybersecurity #riskmanagement

When Your Vendor's Vendor Goes Down: What a Logistics Incident Teaches Retailers About Fourth-Party Risk - RH-ISAC

In late July, a major global logistics and shipping provider was hit by a cyberattack that disrupted warehouse operations across Europe. The company, which

rhisac.org

Registration is open for the RH-ISAC workshop in Vancouver on 14 October! Hosted by Earls Kitchen + Bar and in collaboration with the Retail Council of Canada, this full-day event brings together cybersecurity practitioners from across the industry. rh-isac-workshop-vancouver-2026.eventbrite.com

RH-ISAC Workshop Vancouver: Hosted by Earls Kitchen + Bar

Join consumer-facing cybersecurity teams at the RH-ISAC Workshop in Vancouver, BC hosted by Earl's Kitchen + Bar

rh-isac-workshop-vancouver-2026.eventbrite.com

Calling all retail and hospitality CISOs in Europe! Join the Retail & Hospitality ISAC for a CISO Forum event on 23-24 September in Paris, hosted by Kering at their headquarters, housed in a 17th-century architectural landmark. ✅ Register: rh-isac-cisoforum-paris-2026.eventbrite.com

RH-ISAC CISO Forum EMEA: Hosted by Kering

Join top retail and hospitality CISOs at Kering headquarters in Paris on 24 September and dinner before the meeting on 23 September.

rh-isac-cisoforum-paris-2026.eventbrite.com

Join RH-ISAC Associate Member Doppel on 25 August to learn how security leaders from the San Francisco 49ers and New York Giants are preparing to protect their teams, athletes, executives, brands, and fans from emerging AI-enabled threats.

Preparing the SF 49ers and NY Giants for the 2026 Season: Defending Against AI-Powered Social Engineering | Doppel

Hear security leaders at the San Francisco 49ers and New York Giants discuss how teams can protect their brand from AI-powered social engineering.

doppel.com

Original 2026 research from CISOs and senior security leaders reveals why detection isn't the bottleneck: 70% cite AI data exposure as their top risk, half still remediate manually, and 0% report full automation. See where security teams are stuck and what's next: www.teleskope.ai/campaign/the...

Join us on 14 August for a briefing on how AI-driven bots, crawlers, and autonomous agents are changing the threat landscape. We'll also discuss the exposure of nearly 50,000 valid FortiGate firewall credentials and what your team should do now to reduce risk. Register: rhisac.org/event/threat...

Retail & Hospitality Threat Landscape Briefing - RH-ISAC

Join RH-ISAC for a monthly threat briefing webinar series about the latest intel on observed incidents and emerging threats relevant to the retail and hospitality community.

rhisac.org

Read the latest study from @Accertify for insights into what happens when fraud and cyber teams actually converge: www.accertify.com/re... #Cybersecurity #Fraud

Fraud-Cyber Convergence Performance: 3.4x Study Findings

Fraud-cyber convergence performance, quantified: a study of 250 leaders found fully converged teams score 3.4x higher on fraud precision.

accertify.com

If an AI agent issues refunds, approves purchases or changes access permissions, can your team answer who is accountable and reconstruct every action it took? New blog from @sentinelone.com explores why AI agents should be governed like identities, not treated like tools: rhisac.org/ai/the-missi...

The Missing Owner: Why Every AI Agent Needs Governance, Not Just Guardrails - RH-ISAC

Overnight, a retailer's support agent issues hundreds of refunds. At a hospitality group, a guest-services agent comps dozens of rooms across the portfolio

rhisac.org

New report details Russian Loader-as-a-Service designed to support ClickFix campaigns. The service enables operators to configure malicious lure pages that instruct victims to copy and execute commands from fake verification prompts. rhisac.org/threat-intel... #cybersecurity #ClickFix

DOUBLECUP ClickFix Loader Delivers CountLoader and DeviceManager RATs - RH-ISAC

A SOCRadar Threat Research Unit report published on 3 August 2026 detailed DOUBLECUP, a Russian Loader-as-a-Service designed to support ClickFix campaigns.

rhisac.org

RH-ISAC's Jackie Deloplaine will be a featured panelist at @blackhatevents.bsky.social this week! Come to her session on Wednesday, August 5 at 5:35pm. See details and add to your schedule here: blackhat.com/us-26/sponso... #BHUSA #BlackHat

Black Hat

Black Hat

blackhat.com

Heading to Black Hat Events next week? Check out this curated list of events hosted by Retail & Hospitality ISAC Associate Members! From unique networking events to private demos, we've got a great lineup: rhisac.org/events/bl... #BHUSA #BlackHat

Black Hat Conference Partner Events - RH-ISAC

 

rhisac.org

Calling all gaming and casino cybersecurity pros! In conjunction with the Global Gaming Expo in Las Vegas, RH-ISAC is hosting a Gaming Workshop! 🗓️ 1 Oct | 12 p.m. - 5 p.m. 📍 Wynn Las Vegas 💲 No cost to attend ✅ Register:

RH-ISAC Gaming Workshop Las Vegas

A day of discussions & presentations on building secure products for the gaming industry with fellow cybersecurity practitioners in Vegas!

rh-isac-workshop-las-vegas-2026.eventbrite.com

On 14 Aug, join RH-ISAC and Akamai for a threat briefing on the new wave of automated traffic emerging in the frontier AI era, from AI crawlers and autonomous agents to the surge in bot and crawler activity driving infrastructure strain. Register:

Retail & Hospitality Threat Landscape Briefing - RH-ISAC

Join RH-ISAC for a monthly threat briefing webinar series about the latest intel on observed incidents and emerging threats relevant to the retail and hospitality community.

rhisac.org

A new report detailed a typosquatted NuGet package, Newtonsoftt.Json.Net, that impersonated the legitimate Newtonsoft.Json library. The malicious package delivered a trojanized JSON library designed specifically to manipulate game results. rhisac.org/threat-intel... #ThreatIntel #Cybersecurity

NuGet Typosquatting Package Targets Digitain Betting Platform - RH-ISAC

A JFrog report published on 21 July 2026 detailed a typosquatted NuGet package, Newtonsoftt.Json.Net, that impersonated the legitimate Newtonsoft.Json

rhisac.org

Join RH-ISAC's Regional Workshop on 25 September, hosted by Kering, for a day of peer-driven discussions, professional development, and networking with cybersecurity practitioners. 📍 Paris, France 📅 25 September 2026 ✅ Register: rh-isac-workshop-paris-2026.eventbrite.com

RH-ISAC Workshop Paris: Hosted by Kering

Join consumer-facing cybersecurity teams at the RH-ISAC Workshop in Paris, hosted by Kering

rh-isac-workshop-paris-2026.eventbrite.com

A novel AI-themed malware distribution campaign (AgentBaiting) has emerged alongside a sustained wave of data breaches and ransomware attacks targeting retail organizations across Europe and North America. rhisac.org/threat-intel... #cybersecurity #threatintelligence #AI #agentbaiting

New AgentBaiting Campaign Delivers SmartLoader Via Fake AI Skills and MCP Servers - RH-ISAC

On 21 July 2026, Cyber Security News reported a novel AI-themed malware distribution campaign (AgentBaiting) has emerged alongside a sustained wave of data

rhisac.org

Check out the latest State of the Internet report from Akamai, which features a guest column about how agentic commerce is rewriting the fraud playbook, written by RH-ISAC's Pam Lindemoen: www.akamai.com/resou...

In the last two years, ClickFix tactics have moved from a one-off social engineering trick into an industrialized attack ecosystem that is outpacing conventional antivirus and endpoint defenses. rhisac.org/threat-intel...

Current ClickFix Threat Landscape Developments - RH-ISAC

In the last two years, ClickFix tactics have moved from a one-off social engineering trick into an industrialized attack ecosystem that is outpacing

rhisac.org

The team at Wyndham Hotels & Resorts is hosting us in beautiful Parsippany, NJ for a Retail & Hospitality ISAC workshop on 16 September! See more details and register at: rhisac-workshop-new-jersey-2026.eventbrite.com

RH-ISAC Workshop New Jersey: Hosted by Wyndham Hotels & Resorts

Join consumer-facing cybersecurity teams at the RH-ISAC Workshop at Wyndam headquarters, hosted by Wyndham Hotels & Resorts.

rhisac-workshop-new-jersey-2026.eventbrite.com

Check out the Human Risk Blueprint from Doppel to learn how security teams can identify, measure, and reduce employee risk with real-world threat intelligence, phishing simulations, and targeted security awareness programs that strengthen defense against social engineering:

The Human Risk Management Blueprint | Doppel

Stop measuring passive compliance. Start actively modifying human risk. Learn how to shift to Human Risk Management in 5 straightforward phases, so you can neutralize AI-native threats with AI-native resilience.

doppel.com

Will you be at Black Hat in Las Vegas next month? RH-ISAC Associate Members have a full lineup of events and special demos scheduled! RSVP today to save your space:

Black Hat Conference Partner Events - RH-ISAC

 

rhisac.org

Account takeover attacks are evolving. Residential proxy networks allow threat actors to distribute login attempts across thousands of legitimate-looking IP addresses, reducing the effectiveness of traditional perimeter defenses. Read insights from Accertify:

Residential Proxy Networks Are Enabling Account Takeover That Perimeter Controls Cannot See - RH-ISAC

Accertify, a fraud decisioning platform provider, has identified a sustained shift in account takeover (ATO) infrastructure: attackers are moving away from

rhisac.org

🥃 Come for the premium cybersecurity content, stay for the bourbon tasting! Our workshop in Louisville, KY on Aug. 13 will be held at the Old Forester Distillery, and feature a full day of cybersecurity presentations, followed by a distillery tour and tasting. Register: rh-isac-workshop-lou...

RH-ISAC will join @cyberalliance.bsky.social for a panel discussion about how AI‑enabled threats are accelerating across sectors and how ISACs are adapting their intelligence sharing and defensive workflows. 🗓️ Tuesday, July 14th, 10am ET ✅ Register at us06web.zoom.us/webinar/regi...

As cybercriminals use generative AI to exploit the customer-first culture of retail and hospitality, organizations that adopt dynamic behavioral risk management in place of static compliance training reduce both their risk exposure and the impact when an attack lands. rhisac.org/risk-managem...

Protecting Retail and Hospitality Front Lines From Conversational AI Threats - RH-ISAC

The retail and hospitality sectors operate on high-velocity human interaction, making their front lines a major target for sophisticated social engineering

rhisac.org

That's a wrap on our workshop in Germany! Thanks to our fantastic member host, @PUMA, who went above and beyond by treating attendees to a special RH-ISAC cake after lunch! Check out where RH-ISAC is going next and register for a workshop in your area! rhisac.org/events/regio...

The EU AI Act places real obligations on any enterprise deploying AI — not just those building it. This guide from @SentinelOne shows your security, compliance, and governance teams exactly where to focus: www.sentinelone.com/...

Researchers linked the financially motivated campaign dubbed “FortiBleed” to the Ransom and Lynx ransomware operations, marking the first confirmed instance connecting mass FortiGate credential theft to actual ransomware deployment. rhisac.org/threat-intel...

FortiBleed Credential Theft Campaign Attributed to INC and Lynx Ransomware Groups - RH-ISAC

On 02 July 2026, SOCRadar researchers linked the financially-motivated campaign dubbed "FortiBleed" to the Ransom and Lynx ransomware operations, marking the

rhisac.org