1/21/21

LP, AP & IT Security's #1 News Source

New Administration Focused on Cyber Security
SolarWinds Attack, Cyber Supply Chain Among Priorities for Biden Administration

During Senate confirmation hearings, the nominees for Secretary of Homeland Security and Director of National Intelligence pledged to focus on cybersecurity.

With his inauguration, President Joseph Biden inherits a number of significant national crises, from an ongoing pandemic, to a bifurcated economy, to the fallout from a massive nation-state espionage attack against US companies and government agencies.

While the administration will initially focus on the pandemic and the economy, cybersecurity will also be a top priority for the US government, said two nominees for top security posts - Secretary for the Department of Homeland Security and Director of National Intelligence - during their Senate confirmation hearings on Jan. 19. Cybersecurity is integral, underpinning the US economy and ability to govern, said Avril Haines, the administration's nominee for director of national intelligence, during her confirmation hearing.

"One of the great challenges we face - in the United States, in particular - is the relative asymmetry of the threat in cyber," she said in response to senators' questions. "It is relatively easy for adversaries to hold at risk what are high-value assets to the United States given how much we rely on cyber and digital work for our economy, for our security [and] for so many different issues."

In the wake of the SolarWinds supply chain attack that has led to thousands of compromises at companies and government agencies, cybersecurity officials will have to scramble to get up to speed. While the issue is not listed on the Biden administration's page of policy priorities, the incoming administration has already made several appointments that indicate its direction.

In addition to the two cabinet-level posts, former National Security Agency cyber expert Rob Joyce will become deputy national security advisor for cyber and emerging technology for the National Security Council (NSC), replacing Anne Neuberger, who will become the deputy national security adviser, where she will take charge of cybersecurity for the entire US federal government. darkreading.com

Ransomware is now the biggest cybersecurity concern for CISOs
A survey of chief information security officers (CISOs) and chief security officers (CSOs) by cybersecurity Proofpoint found that ransomware is now viewed as the main cybersecurity threat to their organisation over the course of the next year.

Almost half - 46% - of CSOs and CISOs surveyed said that ransomware or other forms of extortion by outsiders represents the biggest cybersecurity threat.

Ransomware continues to be one of the most damaging and disruptive cyberattacks, while for cybercriminals, encrypting networks and demanding bitcoin in exchange for the decryption key is the easiest way to quickly make a large amount of money from a hacked network.

A significant percentage of organisations will pay the ransom - which can amount to millions of dollars - because they perceive it as the quickest means of restoring the network and the least amount of further disruption to the business. And it's because these ransoms are paid that ransomware remains so appealing - and lucrative - for cybercriminals.

Some of the other cyberattacks that CISOs consider the to be the biggest threats this year include cloud account compromise, insider threats, phishing and business email compromise attacks. While not as visible as ransomware attacks, all of these cyber threats can also cause problems for organisations - especially if hackers are able to combine attacks like phishing and compromising cloud account login credentials in order to gain further access to networks. zdnet.com

Visibility, control and governance holding back cloud transformation
While 91% of organizations were successful in increasing security as a result of adopting cloud services, it remains a top concern for many, an Aptum study reveals. The report identifies common security, compliance and governance challenges impacting organizations undergoing cloud transformation.

The research reveals that 51% of survey respondents see security as the main driver behind cloud adoption. However, 38% cite security and data protection as the primary barrier to cloud transformation.

Security and compliance play a critical role
Raising security and compliance issues among senior IT professionals
A holistic approach to cloud architectures is needed
Read more here: helpnetsecurity.com

Indoor security drone may replace night security guards
A new indoor security drone may have its sights on replacing them on the midnight shift. The Israeli startup Indoor Robotics has designed a quadcopter drone it calls Tando to keep an eye on companies once the employees have gone home for the day. Tando consists of three parts, the drone itself, some ceiling-mounted tiles where the drones recharge, and an app that allows users to manage it. The drones hang bat-like from the ceiling when they're not patrolling. But even in repose, they're watching. Once the staff has cleared out, they begin flying around the rooms and hallways. The indoor security drones have video and thermal cameras and scan their environment in 360 degrees. If they spot intruders, fires, or anything they don't particularly like, the app sends out a notice to the system administrator. dronedj.com

The dangers Adobe Flash Player pose for all computer users who still have it installed

Two-day bitcoin sell-off wipes out $100 billion from the entire crypto market

Joe Biden's Peloton bike may pose cybersecurity risk, experts warn

Improving Security for Cannabis Growers
AI software makes cannabis business' cameras systems smarter

AI software can filter out 90% or more of alarms caused by nothing more threatening than a passing dog or blowing leaves

With security regulations varying in locations across the U.S. and Canada - even between a city and its neighboring jurisdiction - it's easy to see how business owners could become confused and frustrated. Integrators specializing in securing cannabis businesses have sprung up to help owners comply with regulations through detailed security plans, including access and inventory control, lights, vaults, gates and video surveillance. The quality and standard of surveillance video is a critical component of these systems.

What Works in Video Surveillance

Recorded video is ideal for forensic purposes and providing visual proof regulations are met. But it's the live feed that enables operators to see crimes in progress and immediately share data with security guards or local first responders. Some jurisdictions require live monitoring 24/7. However, video monitoring is not a DIY project; it's better to leave it to professional central station operators. It's no secret within the security industry that 95% or more of traditional video alerts are false.

AI-based Software Enhances Video

The cloud-based software easily integrates with a monitoring station's existing operating software. The cameras located in and around a cannabis facility are added through an easy drag-and-drop process. A software dashboard highlights idle cameras, enabling an integrator to see if they need replacing or should be moved to another area to increase their value. securityinfowatch.com

Why Cannabis Is Shut Out of $900 Billion Economic Aid Act

In tranches of up to $10M, the federal government is doling out $900B of forgivable loans to borrowers other than "plant touching" marijuana-related businesses.

Pursuant to the Economic Aid to Hard-Hit Small Businesses, Nonprofits, and Venues Act (Economic Aid Act), supplementing the Coronavirus Aid, Relief, and Economic Security Act (CARES Act), on Jan. 6, the U.S. Small Business Administration (SBA) and Department of Treasury issued Paycheck Protection Program (PPP) guidances for forgivable loans to new and previous borrowers, expanded the parameters of how the monies may be spent, and provided "set asides" for "minority, underserved, veteran and women-owned" businesses.

While closed to those growing, processing, transporting or selling marijuana, a business not directly "aiding marijuana's use, growth, enhancement or development" is eligible for Economic Aid Act benefits including $284 billion in forgivable Paycheck Protection Program loans. cannabisbusinessexecutive.com

Recreational marijuana sales could begin in Arizona later in week
Arizona adults could be legally purchasing marijuana for recreational use by the end of the week. State health officials began accepting applications Tuesday to run some of the more than 120 recreational sites that voters agreed to in November to allow to sell marijuana to anyone.

On paper, the state has up to 60 days to review and approve. But Arizona Department of Health Services spokesman Steve Elliott told Capitol Media Services it's not going to take anywhere near that long. tucson.com

Could Arizona Dispensaries Start Selling Recreational Pot Soon?

After Two Years Of Work, USDA Publishes National Hemp Rule

Suing Retailer for $850K after Losing Leg Trying to Stop Thief
Asheville, NC: Customer says he lost a leg trying to stop thief at NC grocery store
Now he's suing for $850,000. Just before Christmas in 2019, a regular customer at a discount grocery store in Western North Carolina tried to stop a shoplifter who made off with an armful of meat. It cost him part of his leg. Now William Modlin, who was 61 when he got run over in the parking lot of a Go Grocery Outlet in Asheville, wants $850,000 from the store chain he says is responsible. In a lawsuit moved to federal court on Friday from Buncombe County Superior Court, an attorney for Modlin said United Grocery Outlet - which operates a chain of discount stores known as Go Grocery Outlet in six states across the Southeast - failed to adequately deescalate the situation after Modlin confronted the shoplifter in the parking lot.

Modlin "suffered an irreparable de-gloving injury to the bottom of his right foot, thereby necessitating an amputation of his right leg just below the knee," the complaint says. Attorneys and a representative from United Grocery Outlet did not immediately respond to McClatchy News' request for comment Wednesday. An attorney representing Modlin also did not respond.

According to the complaint, Modlin was entering the grocery store where he regularly shopped on Leicester Highway on Dec. 16, 2019, when he saw another man hurry past the checkout with an armful of meat. "Hey man, what are you doing!" he said, according to court filings. The shoplifter made a break for the parking lot, where Modlin followed him intending to get a license plate number or a description of the car, the complaint said. Instead, he said, he found the man sitting in the front seat of a car with the door open.

As Modlin reportedly tried to encourage the man to "do the right thing" by leaving the stolen meat and driving away, his attorney said, a grocery store employee "suddenly and angrily appeared" with a box cutter threatening to slash the man's tires. That's when the man accused of shoplifting "suddenly and without warning accelerated his vehicle in reverse and fled the scene," the lawsuit said. "As a result, plaintiff was trapped and struck by the opened driver's door. In the process of the shoplifter fleeing, plaintiff was knocked to the ground, dragged across the asphalt and ran over." The shoplifter fled the scene and, after exhausting their leads, law enforcement closed the case in January 2020. charlotteobserver.com

Aurora, IL: Car crashes into Aurora Best Buy; police investigating possible theft
Aurora police are investigating if merchandise was stolen after a vehicle crashed into the front of a Best Buy early Wednesday morning. Law enforcement officials responded to a call of a vehicle smashing through the front doors of the store, located in the 4400-block of East New York Street in Aurora, about 4:30 a.m. The vehicle then drove away, police said. It was not immediately clear how much merchandise was taken, and no injuries were reported. abc7chicago.com

Joplin, MO: Woman Questioned by Staff, Pulls Knife on Employee; Charges Include Armed Robbery, Armed Criminal Action and Resisting
Tuesday evening just before 7:00 PM Joplin Police responded to Academy Sports & Outdoors for a report of an armed robbery. The female suspect was fleeing the store. But officers were able to capture her. Detectives determined during investigation the suspect, Tiffany M. Madison, age 34 of St. Louis, Missouri, was concealing merchandise in the store and was confronted by an employee. Capt William Davis tells us in a media release Wednesday, "Madison then grabbed a knife from the shelf in the store, removed it from the packaging and used it to threaten the employee. Madison then fled the store with the merchandise and the knife." fourstateshomepage.com

Westminster, CO: JSA Warns of Spike in Grab-and-Run Repeat Offenders
The Jewelers' Security Alliance has reported an increase in the number of grab-and-run thefts being perpetrated by repeat offenders. According to an email alert sent out to the trade last Thursday, four men-three operating together and one alone-who were already wanted for several thefts recently struck again. On Jan. 13, JSA said a man entered a retail jewelry store in Westminster, Colorado with two other male suspects, saying he wanted to look at gold chains. The suspects displayed a large amount of cash as they looked at product and asked if they could use it to pay. JSA said two of the suspects started to leave, saying their ride had arrived. The third suspect, who was looking at the chain at the time, grabbed it, and all three fled in a white Ford F-150 pickup truck. The trio are believed to have also committed grab-and-run thefts in Loveland and Greeley, Colorado on Jan. 13, fleeing in the same white Ford pickup. nationaljeweler.com

Memphis, TN: Armored Truck Guard Arrested For Fake Robbery
Two friends are facing serious charges after a robbery heist to steal more than $100,000 from an armored truck outside Wolfchase Galleria. But the heist wasn't exactly Oceans 11. When police started investigating and asking questions, the crime came screeching to a halt. The mall was quiet on Wednesday afternoon when an armored truck pulled up with hundreds of thousands of dollars in cash to drop off. One guard went inside, while the driver waited in the truck. Police say as the truck sat outside the mall, a man reached into the van, stealing a large amount of cash, and then fleeing in a dark-colored sedan. The scam didn't get very far. According to the affidavit, the armored truck driver was taken in for questioning. Police say that is when they started noticing inconsistencies. wmcactionnews5.com

Salt Lake City, UT: High-risk traffic stop made on rental car, driver released after company may have mixed up vehicles
A tourist might have had quite a fright on Tuesday when a handful of law enforcement personnel performed what they called a "high-risk" traffic stop near the Park City Library after the rental car he was driving had been reported stolen, according to a report from the Summit County Sheriff's Office. Deputies initiated the traffic stop after checking the license plates of a vehicle driving on Park Avenue in Park City. The Salt Lake City Police Department had reported the vehicle stolen that day, according to the report. Deputies indicated the driver was released because there was reason to believe the rental company had mixed up vehicles during the rental process. parkrecord.com

Chesterfield County, VA: Skimming: Police find credit card skimming device at gas station on Chester Road

Submit Your New Hires/Promotions or New Position

Featured Job Spotlights
 

	Loss Prevention Auditor and Fraud Detection Analyst Raleigh, NC - posted Dec. 14 As a Loss Prevention Auditor and Fraud Detection Analyst for Staples, you will conduct LP operational field audits remote, virtual and in person, within a base of 60 retail stores to ensure compliance to operational standards to drive operational excellence and preserve profitability...
	Leader, Asset & Profit Protection San Fran/Chicago/NY/West Palm Beach - posted Dec. 14 As the leader of the Data/Analytics & Investigations strategy, you should have strong analytical/investigation skills, the drive to innovate, and the ability to build strong partnerships to lead through the influence of others. They will be personable, open to learning, collaborating with others...
	District Asset Protection Manager Seattle, WA - posted Dec. 11 As the District Asset Protection Manager you will lead administration of Asset Protection programs and training for an assigned district in order to drive sales, profits, and a customer service culture...
	Regional Manager LP, Audit & Firearms Compliance IL, WI, MN, IA, ND, SD, NE, OK, MO & KS - posted Dec. 9 The Regional Loss Prevention Manager is responsible for the control and reduction of shrinkage at the stores in their Territory. Investigate and resolves all matters that jeopardize or cause a loss to the company's assets...
	Customer Success Specialists Multiple Locations - posted Oct. 9 The role of the Customer Success Specialist is to engage, empower, and excite our community. As a Customer Success Specialist, your primary responsibility is to ensure both retailers and law enforcement, who make up our community, have great experiences and achieve real crime reduction outcomes from using our platform. Apply Here
	Sales Representatives NuTech National - posted Oct. 13 NuTech National, an established and rapidly growing 40+ year electronic security company is expanding our National Sales Team. Seeking motivated, driven and successful sales reps to expand our national retail and governmental vertical markets. Top pay, benefits and signing bonus available. Please apply to melissa@nutechnational.com

Featured Jobs

To apply to any of today's Featured Jobs, Click Here

View Featured Jobs   |   Post Your Job
 

We want to post your tips or advice... Click here

Not getting the Daily? Is it ending up in your spam folder?
Please make sure to add d-ddaily@downing-downing.com to your contact list, address book, trusted sender list, and/or company whitelist to ensure you receive our newsletter. 
Want to know how? Read Here

FEEDBACK    /    downing-downing.com    /    Advertise with The D&D Daily