Read more in today's Vendor Spotlight column below
 

Protos Security Enhances Executive Team

Kris Vece promoted to Vice President of Client Relations

Sally McGuffin promoted to Vice President of Vendor Relations

DALEVILLE, VA - Protos Security, a nationwide provider of Security Guard Management Services announced the promotion of Kristine Vece to Vice President of Client Relations and Sally McGuffin to Vice President of Vendor Relations.

Mrs. Vece joined Protos in 2015 and has been responsible for all aspects of Sales and Client Relations, she has been instrumental in Protos' growth over the past three years. Mrs. Vece has been in loss prevention for nearly 20 years and is known for her industry leadership and dedication to excellence. Kris has been named one of IAI Remarkable Women and received the Loss Prevention Magazine Magpie Award. She also holds her Loss Prevention Qualified designation from the Loss Prevention Foundation.

Ms. McGuffin joined Protos in 2012 as a National Account Manager and quickly rose to several supervisory and management positions. Sally has 25 years in the Security Guard Industry, she started out as a field supervisor at Borg Warner and was promoted to Operations Manager, then became the Director of Training and Recruitment for the Gulf States for Borg Warner. Ms. McGuffin also worked at USSA as a District Manager where, she stabilized their current business, expanded their growth and reduced the overall operating costs by 10%. Other accomplishments include being recognized by the state of Florida for recruiting and assisting in the Family Transition Program and was an instructor for the Department of Criminal Justice. Sally knows the security guard industry well and is always there to assist our clients and vendors.

"We have two women, two individuals, two get it done, gritty people that we are proud of and know they will continue to carry the torch and lead us on!" said Patrick Henderson Owner and Co-Founder of Protos.

US retailers lead world in data breaches
U.S. retailers lead the world in security breaches, according to the 2018 Thales Data Threat Report, Retail Edition. U.S. retail data breaches more than doubled since the last Thales report, rising to 50% from 19% in the 2017 survey. The global average of retail executives reporting data breaches is 27%.

Additionally, the number of U.S. retailers reporting a data breach at any time in the past is up to 75% with half of those occurring in the last year. Of global retailers, 60% report at least one breach in the past. As a result, U.S. retail is now the second most breached segment analyzed by Thales, trailing the U.S. federal government only slightly and ranking ahead of healthcare and financial services.

While 84% of the U.S. retailers polled are increasing information technology security spending, which is up from last year's 77% and exceeds global retail's 67%, the Thales report said that the spending is "in all the wrong places." The spending is highest on security measures regarded as least effective. retaildive.com

Every Week Is Shark Week in Cyberspace
Your data, identities, and credentials are cyber chum.
Here's how to protect yourself from the feeding frenzy.
Your odds of being attacked by a shark are zero if you never venture into the ocean - which is far lower than the odds of being cyber hacked even if you never go online. After all, you could still become a victim of identity theft without ever wading unto Internet waters.

The point is this: Fear the cyber shark far more than the great white, tiger, or bull shark, whose majesty was celebrated last week during the Discovery Channel's Shark Week, as it has every year since 1987.

So, what can Shark Week teach us about cybersecurity? Here are four areas to focus on in honor of Shark Week.

1. Assume the Role of a Lifeguard - An organization's ocean is the Internet. Some of it equates to shallow waters such as internal networks, but much of is deep and uncharted via the cloud. No matter the depth of the water, you still need to assess the risks of venturing into potentially perilous territory. A CISO is a company's lifeguard, which means being aware of, adapting to, taking precautions against, and assuming control of the threats that attackers present. With threats always evolving, it's imperative to keep improving your organizational lifeguarding skills.

2. Guard Against Phishing Attacks and Save the Whales - Prevention measures for all phishing, spearphishing, and whaling attacks are widely known and essentially the same. Yet despite anti-phishing methods such as reporting suspicious emails and routinely changing passwords, attacks are still increasing. Modern authentication techniques can be great tools for preventing the repercussions of stolen credentials. Performing security audits and providing user education and training are also solid prevention methods.

3. Safeguard Your Waters with Modern Authentication Methods - Many threats are false positives; the dorsal fin of a friendly, curious dolphin can look like the dorsal fin of a shark that's circling the waters. Similarly, an access attempt might not look suspicious until it's too late. With 80% of breaches being caused by valid yet stolen or misused credentials, it is imperative to validate every access attempt - ensuring that the good guys get in (without hindering user experience and productivity) while keeping the bad guys out. Today's available solutions add intelligence and analytics to authentication methods. These risk-based solutions, available from many vendors, focus on the user's profile and tendencies. They can include techniques such as geographic analysis, device recognition, and IP address-based threat services.

4. Continually Assess Your Environments - Threats are everywhere, in the water and online. They're usually hidden. They sometimes don't appear until it's too late. But that shouldn't keep humans from swimming in the ocean or conducting activity online, especially in the age of digital transformation. Safety counts, and precautions matter. darkreading.com

'Identity Has Become the Perimeter': Oracle Security SVP
Eric Olden, Oracle's new leader in security and identity, shares how the enterprise tech giant plans to operate in a cloud-first world. Moving from startups to one of the world's largest software companies, he says, has given him a new perspective on how large businesses handle cybersecurity in the cloud.

Whereas businesses used to be able to build their own data centers to protect their information and applications, and put up firewalls for security, the cloud is forcing them to change their approach, he says. Combined with the fact that most people are going mobile, it's time for defenses to evolve.

"We've pushed the notion of a post-perimeter world where the identity has become the perimeter," Olden says. "It's something I've seen coming for 20-plus years, and now we see it all the time."

Hackers Set Their Sights on Cloud
Once an organization begins its cloud transition, the volume and velocity of data can quickly overwhelm traditional manual approaches, Olden says. Moving to the cloud isn't a pilot project, and it's not something people can constantly watch for security alerts. Businesses are overwhelmed "with a sheer amount of noise," and the ability to detect threats in the chaos can't be done by humans alone, he adds.

Amid that struggle, hackers see the opportunity to exploit vulnerabilities with increasingly sophisticated tool sets and new attack techniques, Olden continues.

"We're past the days of writing a virus," he says, noting how hackers once just wanted to see whether they could pull off a cyberattack. "Now we're talking about very organized operations trying to get identity data. [They] want the keys. Identity data is incredibly sensitive." darkreading.com

LifeLock Bug Exposed Millions of Customer Email Addresses
Identity theft protection firm LifeLock - a company that's built a name for itself based on the promise of helping consumers protect their identities online - may have actually exposed customers to additional attacks from ID thieves and phishers. The company just fixed a vulnerability on its site that allowed anyone with a Web browser to index email addresses associated with millions of customer accounts, or to unsubscribe users from all communications from the company.

The upshot of this weakness is that cyber criminals could harvest the data and use it in targeted phishing campaigns that spoof LifeLock's brand. Of course, phishers could spam the entire world looking for LifeLock customers without the aid of this flaw, but nevertheless the design of the company's site suggests that whoever put it together lacked a basic understanding of Web site authentication and security.

Security firm Symantec, which acquired LifeLock in November 2016 for $2.3 billion, took LifeLock.com offline shortly after being contacted by KrebsOnSecurity. According to LifeLock's marketing literature as of January 2017, the company has more than 4.5 million customer accounts. krebsonsecurity.com

Opinion: Omnichannel shopping proliferates the fraud threat
Online shopping fraud has been on the rise for several years, and in 2017 alone it rose by 30%. Shipping fraud, in which scammers arrange for stolen goods to arrive at their address for quick reshipping, was up by 37%, per Experian's 2017 E-Commerce Fraud Report. Billing fraud, in which unwitting consumers' stolen data is used to buy merchandise for resale, was up 34%.

This rising tide of fraud is expensive. At first glance, the 0.9% of revenue that the average North American merchant loses to chargebacks and fraud may seem minor, but typical retail margins range from four to 8%. That means the nearly 1% average fraud loss is really a 10 to 20% loss of profit.

Channels matter a great deal to merchants and fraud analysts, because each channel comes with its own security challenges, and because customers are engaging in more channels as part of their shopping journeys. It's important to remember, though, that customers don't care about the concept of channels. They care about how convenient their shopping experiences are, and retailers must respond accordingly.

An effective program must now include always-updating fraud scores and cutoff thresholds; a split manual-review queue, with orders routed to specific analysts based on store profile and analyst capabilities; two-way reporting for accurate internal files; scalability for sales peaks; customization by channel, store, and industry; proactive people management and quality checks on fraud analysts; 24/7 IT support; and consistent chargeback challenge code logging. paymentssource.com

Square to create contracts enabling businesses dispute buyer chargebacks
The feature will be promoted to business owners starting with August 2018. Square says that business owners who are taken advantage of by customers charging back on goods and services could save money with a contract that details the terms of a transaction. Moreover, the chances of winning a credit card dispute are nearly twice as high when contracts are used, according to Square.

However, the agreements aren't supposed to help in the case of credit card fraud, when the affected customer generally holds no responsibility. thepaypers.com

Reducing online out-of-stocks critical for retailers, says GMA study

Tariffs may cost US online retailers more business from Mexico than China
 

Two Members of $850,000 Fraud & ID Theft Ring Sentenced in Alexandria, Va.
Under the direction of gang leader Michael Oginni, of Rockville, Maryland, Andraliesha Jefferson, 28, of Reno, Nevada, and Robert McCrickard, 56, of Baltimore, Maryland, used stolen identities to rack up $850,000 in fraudulent charges of luxury goods and gift cards.

Jefferson was sentenced to three years of probation, a sentence which credited her for time she served in a Virginia detention center. McCrickard was sentenced to 31 months of in prison. Another conspirator, Lacola Nickens, was sentenced last week to a one year in prison. Ringleader Michael Oginni will be sentenced in September. justice.gov

Cincinnati Airport Police & US Secret Service Bust Tampa Ring Before They Even Get Started
Five Florida Residents Sentenced For Committing CC Fraud In Northern Kentucky
Jose Valdes, Jairo Castro, Yanetsi Sanchez, Arnado Salazar and Dianey Quintero, all residents of Tampa, Fla., were sentenced yesterday, to a range of 37 months to 46 months in federal prison for committing credit card fraud.

According to their guilty pleas, the Defendants were responsible for mailing a package containing 227 blank credit cards from Tampa, to a Florence, Ky. motel, using a local shipping company. Due to suspicious markings on the package, law enforcement began an investigation that ultimately led to a search of the package. Law enforcement tracked the package to the motel, and found the Defendants waiting, in three vehicles located nearby. A search of those vehicles resulted in the discovery of laptops and a thumb drive containing approximately 2,000 stolen account numbers. Also located were skimmer devices (used at gas stations to record account numbers from unsuspecting customers using the pumps), equipment designed to download the stolen account numbers onto blank cards, and seven money orders that had been purchased with stolen account numbers. The Defendants were arrested before they could unlawfully use the credit cards in the package. justice.gov

San Diego, CA: Burglar gets away with $8,000 bicycle
A popular North Park bicycle shop is hoping the community can help identify a thief who broke in and took a high-priced bike Friday morning. Bars on the window weren't enough to keep him out of Adams Avenue Bicycles. The thief showed up with tools of his own and took the bars off, then smashed the window. Surveillance cameras caught the entire act, including the moment the thief rode off on a brand-new Moots bicycle. nbcsandiego.com


Gloucester Township, NJ: Two men Grab & Run with $5,500 worth of handbags from Michael Kors Outlet
Police are seeking two men who scooped up designer purses, then fled from a store at Gloucester Premium Outlets. The men fled from the Michael Kors store with handbags valued at about $5,500, Gloucester Township police said Sunday. A surveillance video showed the men grabbing numerous bags from a display area near an entrance, then bolting from the store. courierpostonline.com

Lady Lake , FL: Woman arrested for theft of Amazon Firesticks at Best Buy; other merchandise recovered
Tara Vonshay Masoline, 47, entered the store at Village Crossroads on July 21 and selected three Amazon firesticks and a Fitbit. She walked with the items to the appliance aisle, where she put them in her purse. As she attempted to leave the store, a Best Buy employee asked to see her receipt. Masoline walked around the employee and fled. A Lady Lake Police officer stopped Masoline's vehicle. The officer noticed that there was perfume, cosmetics, batteries and phone chargers all in new packaging in Masoline's vehicle. The three Amazon firesticks and the Fitbit from Best Buy were found in the vehicle. The report indicated this was Masoline's second arrest for retail theft. villages-news.com

Corunna, MI: Judge sends 'career criminal' to prison
Judge Matthew Stewart called Lorenzo Childs a "career criminal" as he sentenced Childs in 35th Circuit Court Friday to 50 to 90 months in prison for Organized Shoplifting charges. argus-press.com

Hilltown Township, PA: Giant Foods associate steals $6,400 of merchandise in 5 weeks

Brentwood, TN: Pressure Washers and Chainsaws are a target for thieves in Brentwood

UK: Middlesbrough, England: Two men sentenced to 32 months after pleading guilty to $1,400 theft of Razor blades and Cosmetics from Wilco

Submit Your New Hires/Promotions or New Position

Featured Job Spotlights

	Vice President, Asset Protection Columbus, OH Oversees and directs all Asset Protection related functions for a Corporate Office, multi-state distribution centers and large retail store network. Responsible for enterprise direction and strategy as it pertains to Asset Protection with a goal of minimizing shrink, reducing loss and maximizing security and associate safety...
	Vice President Loss Prevention Memphis, TN The Vice President Loss Prevention is responsible for providing direction, development and leadership to Loss Prevention, Safety, Security and Audit teams for corporate, distribution centers and the field...
	Director of North America Digital Risk & Control Beaverton, OR As the Director of North America Digital Risk & Control, you will provide leadership for payment risk mitigation in our digital business including fraud risk management. You will be responsible for ensuring our resources and capabilities are properly aligned to the execution of key priorities, as you develop and implement ecommerce risk management strategies to appropriate tolerance levels based on advanced data analytics and trends...
	Director of Data Privacy and Security, Legal Los Angeles, California As Netflix continues to grow and expand, we are looking for a talented team member to join the Data Privacy and Security Legal team to provide support on privacy and data security compliance matters. The position will report to the Global Director of Data Privacy and Security, and will work in an ongoing and collaborative way with relevant Legal, Security and Public Policy groups in carrying out her or his responsibilities...
	Director, Risk Management and Safety Los Angeles, CA To protect the company's global assets and property from risk of loss via the purchase of insurance and by implementing a global risk management program in the most cost efficient and effective manner...
	Financial Analyst (Internal Fraud) Anaheim, CA This role is responsible for investigating internal fraud and Cast Privilege abuse at the Disneyland Resort, across all lines of business including but not limited to: merchandise, food & beverage, rooms, ticketing, and employee privileges. Specific investigative tasks will vary but may include: reviewing exception reporting to identify potential fraud trends, conducting in-depth point-of-sale research, reviewing camera surveillance, performing integrity shops and observations, interviewing employees, representing the Company at grievances and unemployment hearings, and partnering with law enforcement as needed...
	Regional Loss Prevention Manager Pacific Northwest Job responsibilities include, but are not limited to the following: ● Conducts internal investigations related to theft, business abuse, and safety violations by conducting interviews, determining course of action, and writing reports. ● Formal interview training, i.e. Wicklander-Zulawski or Reid Techniques...
	Regional Safety & Loss Prevention Specialist Baltimore, MD The Safety and Loss Prevention Specialist is a subject matter expert responsible for partnering with both our corporate TUSA stores and franchise store operations to improve the safety and training processes...
	Area Loss Prevention Specialist Boston/Springfield We are currently looking for an Area Loss Prevention Specialist to join our team in the Boston / Springfield area. This position is responsible for conducting employee investigations, responding to and providing guidance during critical incidents, and assessing new/current retail store locations...
	Area Loss Prevention Specialist Jacksonville, FL We are currently looking for an Area Loss Prevention Specialist to join our team in Jacksonville, FL. This position is responsible for conducting employee investigations, responding to and providing guidance during critical incidents, and assessing new retail store locations...
	Area Loss Prevention Specialist San Francisco Bay Area We are currently looking for an Area Loss Prevention Specialist to join our team in San Francisco Bay Area. This position is responsible for conducting employee investigations, responding to and providing guidance during critical incidents, and assessing new/current retail store locations...

Today's Daily Job Postings from all around the net - Appearing today only

To apply to today's Internet Jobs, Click Here

Sponsor Today's Internet Jobs 

We want to post your tips or advice... Click here

Not getting the Daily? Is it ending up in your spam folder?
Please make sure to add d-ddaily@downing-downing.com to your contact list, address book, trusted sender list, and/or company whitelist to ensure you receive our newsletter. 
Want to know how? Read Here