Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Threat Intelligence

2/21/2019
08:30 AM
Dark Reading
Dark Reading
Products and Releases
50%
50%

R-CISC Changes Name to Retail and Hospitality ISAC

Name change and 2019 plans reflect expanded membership and include additional staff, focused reports, new workshops.

Washington, D.C., February 21 2019– The Retail Cyber Intelligence Sharing Center (R-CISC), the trusted cybersecurity community for retail and consumer-facing companies, today announced it has changed its name to the Retail and Hospitality Information Sharing and Analysis Center (RH-ISAC) to better reflect its evolving membership base and offerings.

“Retailers and hospitality companies face many of the same challenges as they continue to strengthen their defenses to better protect their customers’ and companies’ information,” explained RH-ISAC President Suzie Squier. “Incorporating ‘hospitality’ into our name reflects the growing number of hotels, gaming casinos, restaurants and consumer-product companies that are joining retailers to combat these threats.”

“We, as an industry, must come together and join forces to manage our common cybersecurity risks,” said Colin Anderson, chair of the RH-ISAC Board of Directors and global CISO of Levi Strauss & Co. “A rising tide lifts all ships. If we as the RH-ISAC community can collaborate and help one another, then the entire industry will be stronger.”

RH-ISAC facilitates the sharing of timely threat and vulnerability information among its members and creates a variety of reports providing situational awareness, threat analysis and strategic exploration of the current challenges facing the retail and hospitality sectors. Members also share best practices through both virtual and in-person events to assist all members on their cybersecurity journey. In addition, RH-ISAC partners with other security organizations such as government agencies, law enforcement and other ISACs.

The new name is part of the evolution and growing mandate of the organization. The RH-ISAC has grown from an initial 30 companies to now serving more than 130 member companies and has expanded its operations. Recently, new personnel were added including Tactical Threat Analyst Seth Monteleone; Program Director Amy Tate, who will drive committee and member group products; and Membership Manager Lea Lubag.

Key RH-ISAC highlights from 2018 include:

Building upon last year’s momentum, 2019 offerings will include resources such as the Threat Trend Report, co-produced with Accenture, an account takeover (ATO) resource, Anatomy of ATO, driven by its Fraud Committee, as well as additional regional workshops and events for members at the tactical, operational and strategic levels are being rolled out in 2019. The Retail Cyber Intelligence Summit will take place in Denver, September 24-25.

About RH-ISAC

Formed in 2014 as the Retail Cyber Intelligence Sharing Center, the Retail & Hospitality Information Sharing and Analysis Center (RH-ISAC) operates as the trusted community for sharing sector-specific cyber security information and intelligence. The RH-ISAC connects information security teams at the strategic, operational and tactical levels to work together on issues and challenges, to share practices and insights, and to benchmark among each other – all with the goal of building better security for the retail and hospitality industries through collaboration. RH-ISAC currently serves retail, hotels, restaurants, gaming and other consumer-facing entities.

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Aviation Faces Increasing Cybersecurity Scrutiny
Kelly Jackson Higgins, Executive Editor at Dark Reading,  8/22/2019
Microsoft Tops Phishers' Favorite Brands as Facebook Spikes
Kelly Sheridan, Staff Editor, Dark Reading,  8/22/2019
Capital One Breach: What Security Teams Can Do Now
Dr. Richard Gold, Head of Security Engineering at Digital Shadows,  8/23/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
7 Threats & Disruptive Forces Changing the Face of Cybersecurity
This Dark Reading Tech Digest gives an in-depth look at the biggest emerging threats and disruptive forces that are changing the face of cybersecurity today.
Flash Poll
The State of IT Operations and Cybersecurity Operations
The State of IT Operations and Cybersecurity Operations
Your enterprise's cyber risk may depend upon the relationship between the IT team and the security team. Heres some insight on what's working and what isn't in the data center.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-15540
PUBLISHED: 2019-08-25
filters/filter-cso/filter-stream.c in the CSO filter in libMirage 3.2.2 in CDemu does not validate the part size, triggering a heap-based buffer overflow that can lead to root access by a local Linux user.
CVE-2019-15538
PUBLISHED: 2019-08-25
An issue was discovered in xfs_setattr_nonsize in fs/xfs/xfs_iops.c in the Linux kernel through 5.2.9. XFS partially wedges when a chgrp fails on account of being out of disk quota. xfs_setattr_nonsize is failing to unlock the ILOCK after the xfs_qm_vop_chown_reserve call fails. This is primarily a ...
CVE-2016-6154
PUBLISHED: 2019-08-23
The authentication applet in Watchguard Fireware 11.11 Operating System has reflected XSS (this can also cause an open redirect).
CVE-2019-5594
PUBLISHED: 2019-08-23
An Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") in Fortinet FortiNAC 8.3.0 to 8.3.6 and 8.5.0 admin webUI may allow an unauthenticated attacker to perform a reflected XSS attack via the search field in the webUI.
CVE-2019-6695
PUBLISHED: 2019-08-23
Lack of root file system integrity checking in Fortinet FortiManager VM application images of all versions below 6.2.1 may allow an attacker to implant third-party programs by recreating the image through specific methods.