7/31/19

LP, AP & IT Security's 1 News Source

Webinar: Self-checkout in Retailing:
Understanding the Risk and Managing the Problem

As retailers continue to invest in developing ever more 'frictionless' shopping environments, the use of a range of self-checkout technologies is becoming ever more conspicuous across a broader range of retail formats. While undoubtedly offering both retailers and consumers a range of potential benefits, these technologies have also been found to negatively impact upon retail losses.

This Webinar brings together the latest research on not only the scale and extent of the problem of self-scan-related losses but also the emerging strategies and approaches that may help retailers to begin to manage them more effectively. Focusing particularly upon the role video technologies might play in controlling self-scan losses, this Webinar will provide detailed and thought-provoking insights into an increasingly important part of the rapidly developing retail landscape.

Click here to watch a recording of our webinar.

To view, the presentation slides click here.

A Cloud Insider Who's Everywhere & Anywhere
Capital One Breach Shows Danger of a New Insider Threat - A Cloud Provider
The alleged Capital One hacker had worked at the bank's cloud provider recently, highlighting the challenges in stopping attackers with inside knowledge.

The breach disclosed by Capital One Financial Corp. this week highlights an uncomfortable truth: It's almost impossible to stop a determined hacker with inside knowledge of a firm's systems.

As more information is stored in the cloud, staff trained in how to use these systems could become a threat to other companies.

The data exposed in the Capital One hack was stored on Amazon.com Inc.'s cloud, according to a federal criminal complaint and people familiar with the matter.

An Amazon spokesman attributed the hack to a firewall issue, not a cloud-computing problem.

While AWS itself wasn't breached, cloud providers should do more to assist their users.

Capital One Breach Casts Shadow Over Cloud Security

And could reignite debate among financial institutions about using such vendors. WSJ Pro

Equifax throws Big Money at Cybersecurity
Over $2.5 Billion, A New Leadership Team + 1,000 New Hires
Equifax Spent $1.44 Billion Recovering From 2017 Breach
$1.26 Billion allocated for technology and security investments between 2018 and 2020 and hired 1,000 in IT and cybersecurity over the past year alone.

Equifax so far has spent around $1.44 billion recovering from the cyberattack, including data security and technology investments and legal costs, according to its most recent financial statement.

The company plans to make its board-assessment method public and it is promoting it to other businesses through the World Economic Forum and the National Association of Corporate Directors, he said. Representatives for these organizations declined to comment.

"We want to be a force for good," Jamil Farshchi, who joined as chief information security officer in February 2018. Mr. Farshchi comes from Home Depot Inc., where he cleaned up after a 2014 breach exposed data about 56 million customers-one of the biggest cyber incidents until that point.

Equifax said it now ties part of executive bonuses to cybersecurity goals. Executives this year became accountable for improving firewalls to defend against attacks targeting web applications and implementing more advanced technology to classify cyber threats, among other objectives. The company is also experimenting with a system to rate managers in part by how well their teams adhere to security practices.

Mr. Farshchi reports to Mr. Begor, Equifax CEO, while the former head of security reported to Equifax's chief legal officer. A direct relationship with the CEO, some analysts say, can help elevate cybersecurity to a business priority.

Mr. Begor receives security alerts on his smartphone through a mobile app, as well as emails and text messages from Mr. Farshchi. Some alerts are automated, sent by security tools. Others Mr. Farshchi decides to send on an ad hoc basis, considering risks such as attacks on customers or business partners that use the same technology as Equifax. The security team may send alerts if it discovers hacked credentials from the company's vendors for sale in dark web criminal forums, he said.

Top executives hope the moves will make Equifax a cybersecurity model. WSJ Pro

  Equifax settlement claims: FTC says fake Equifax websites popping up to skim consumer data

Suffering SOC Saga Continues
New study exposes low confidence among security professionals in their security operations centers.

More than half of IT and security professionals consider their security operations center (SOC) ineffectual, and the long hours, alert overload, and incomplete visibility into their IT infrastructure has 65% considering quitting their jobs.

The saga of the stressed-out SOC has been well documented over the past few years as organizations have amassed a cache of security tools amid an ever-expanding threat landscape where they don't have the time, resources, or expertise to fully tap into the tools nor keep up with all of the data they generate. Meantime, nearly 70% of organizations studied in a new report by the Ponemon Institute consider their SOC essential or very important to their security posture.

"There was a general concern or lack of confidence in the SOC being able to achieve its important role because of burnout, the crazy hours people are working, and a whole bunch of reasons," including lack of visibility into their IT networks, says Larry Ponemon, president of the Ponemon Institute and author of the SOC study. darkreading.com

A Return to Security Basics
Security trends to follow at Black Hat USA 2019
A telling shift in emphasis between the 2018 and 2019 Black Hat USA agendas, as the focus moves away from new attack vectors to devising improved approaches to closing long-standing security gaps. Recent high-profile breaches attributed to existing security gaps, such as those affecting Facebook, First America, and Quest Diagnostics, have inspired a return to security basics. Industry experts are increasingly hesitant to direct resources towards securing brand new IT environments when fundamental gaps endure within existing security architectures. helpnetsecurity.com

US files lawsuit against Russian 'Mr. Bitcoin' exchange -
helped launder ransomware profits
The US Department of Justice has filed a civil lawsuit seeking to recover more than $100 million from a notorious cryptocurrency exchange that has helped cyber-criminals launder stolen funds, such as those obtained from ransomware payments, dark web drug marketplaces, and funds from hacked cryptocurrency exchanges. zdnet.com

Facebook Says Libra Digital Currency May Never Launch

Report: LAPD Data Breach Exposes 2,500 Officer Records & 17,500 Police Candidates

Canadian Security announces 2019 Community Leader Award winner
Circle K LP Security Exec Sean Sportun
Canadian Security magazine is pleased to announce the winner of our Community Leader Award for 2019: Sean Sportun. Sportun has 26 years of professional experience in the security industry and has spent the last 13 years as manager of security and loss prevention for Circle K Stores Central Canada Division.

During his career, Sportun has consistently volunteered his time and expertise to worthwhile causes and industry associations. In 2002, he joined the Toronto Crime Stoppers volunteer Board of Directors and is currently the program's chair. He is first vice-president of the Ontario Association of Crime Stoppers and second vice-president of the International Society of Crime Prevention Practitioners. In 2017, he was a member of the elite security organizing committee for the Invictus Games which were held in Toronto.

Sportun has been recognized numerous times for his volunteer efforts and professionalism. In 2013, he was named Security Director of the Year by Canadian Security magazine's editorial advisory board. canadiansecuritymag.com

First Published in the Daily on July 29
Montreal Multi-Brand Luxury Men's Retailer Closes Amid Death Threat
Store Owner with Alleged Ties to the Mafia 'Flees for His Life'
The three-level Giorgio Gruppo Roma store at 1440 Peel Street in Montreal has shuttered as its owner, Tony Elian, flees for his life. That's according to a French language report over the weekend in TVA Nouvelles, which says that it has sources who say that Montreal police have informed Mr. Elian to go into hiding because his life is in danger, with threats said to be linked to his many debts to creditors.

The threats to Mr. Elian's life follow other serious incidents. In the spring of 2017, his car was firebombed and in March of 2018, he was shot with a shotgun in his Peel Street store. The TVA Nouvelles report notes that last week, a moving truck was parked in front of the shuttered Giorgio Gruppo Roma store.

Debts have plagued Mr. Elian's business dealings since at least 2015. TVA Nouvelles reports that there's a long list of subcontractors claiming to be unpaid for work done on a condominium building in nearby Westmount that was developed by Mr. Elian's company Cesare Immobilier. Between 2009 and 2014, Mr. Elian was involved in a $1.1 million lawsuit with Frank Bertucci, who was accused of trying to bribe a Revenue Canada representative with $150,000 for a tax reduction.

Some are saying Mr. Elian had ties to criminal entities in the Montreal area. He was seen in photos with gangster Ducarme Joseph who was murdered in 2014, and he attended the funeral of Italian-Canadian crime boss Vito Rizzuto in late 2013 - Rizzuto is alleged to have been the leader of the Sicilian Mafia in Canada.  retail-insider.com

How Canadian Employers Address Bullying and Harassment
More than half of Canadians say they have experienced bullying at work, according to the results of a November 2018 survey by polling firm Forum Research. The survey showed that 55 percent of them reported bullying to management, senior staff, human resources, or another person or department responsible for employee conduct. Only 1 in 3 Canadian employers took action to address the bullying.

Workplace bullying and harassment can have far-reaching impacts on worker health and safety, leading to absenteeism, lower productivity, anxiety and depression.

What British Columbia Employers Can Do
To date, British Columbia is the only Canadian province that has developed policies specifically addressing workplace bullying. These steps include the following:

• Draft a policy statement that workplace bullying and harassment are not acceptable. Then distribute the statement to workers.

• Create ways workers can report incidents or complaints of bullying and harassment.

• Figure out how HR or supervisors will handle incidents or complaints of workplace bullying and harassment, including how and when to conduct investigations.

• Train workers and supervisors about what bullying and harassment are.

Policies Across Canada
Each Canadian province has different laws about workplace bullying and harassment. McFarlane explained that Ontario's approach is different from British Columbia's because Ontario has legislation that requires an investigation. Under Ontario's health and safety laws, employers must have a workplace harassment policy that includes procedures for workers to report incidents of harassment. Employers also have a general duty to protect workers from risks on the job, including physical and mental harm. shrm.org

'It can happen to anyone': Fraud on the rise in Saskatoon and nearly double the incidents reported in Regina
According to Statistics Canada, 5,957 incidents of fraud were reported to police in 2018, up from 5,503 in 2017. Many of those incidents happen in Saskatoon. Statistics Canada, in its most recent Crime Severity Index report released this month, found that Saskatoon recorded 1,739 occurrences of fraud in 2018, up from 1,459 in 2017. When it comes to identity fraud in particular, 281 incidents were reported to Saskatoon police in 2018, up from 204 in 2017. thestarphoenix.com

Canada Store Openings & Expansions
● Giant Tiger opens in Halifax
● Baskin-Robbins opens 102nd Canadian shop
● Juul opens first-ever North American store in Toronto amid teen vaping outcry
● Taiwan's Famous 'Tiger Sugar Bubble Tea' Just Opened Their First-Ever Store In Canada
● National Access Cannabis Corp. Licenses to Open Two New Retail Cannabis Stores in Alberta
● First Sylvan Lake pot shop to open Saturday

Capital One data breach hits about 6 million people in Canada, 100 million in U.S.

Some Canadian c-stores are giving the retail model a makeover

Expert tips on how to keep online identity in Windsor safe after increase in fraud

Crime Severity Index increase in Moncton area provoked by fraud: Statistics Canada

Cannabis sales jumped $11M in May as more stores open

Couche-Tard invests millions in cannabis company Fire & Flower

Canadian Security announces 2019 Lifetime Achievement Award winner
 

View Canadian Connections Archives

E-Retailers Need to Prepare For Holiday Spikes
Spike in web traffic means additional threat of cyber-attacks
Web traffic during Amazon Prime Day, in which 250 e-commerce merchants participated, reflected a significant uptick in the US, according to Akamai. The fifth annual event spanned 48 hours this year, resulting in a 14% spike in web traffic.

Interestingly, the surge in US traffic resulted in a decline in global traffic, "with the exception of LATAM, where baseline traffic increased nearly three times as much as the US," according to the research.

The report warned that retailers need to be aware of these spikes in traffic in order to prepare for future online sales and the holiday season, according to Akamai's Chris Wraight. "Also, the growing number of shoppers who use their mobile device to research means that it is vital to present images and videos quickly, regardless of device, browser or connection speed," wrote Wraight.

With a spike in traffic comes the additional threat of cyber-attacks. The report also found that "nearly 10 billion total bot attacks during the 48 hours of Prime Day is equal to the number of retail-specific bot attacks we detected from May to December 2018. Prime Day was very attractive to threat actors due to the high visibility of Prime Day and the larger number of retailers offering their own promotions. Detecting, correctly interpreting and remediating credential stuffing attacks needs to be a top priority of retailers, especially going into the Q4 holiday peak traffic season." infosecurity-magazine.com

Protecting Your Trademarks In The World Of Online Retail Platforms
In the digital age, many vendors have expanded beyond brick and mortar shops and now sell their goods and services online. While some use purpose-built websites, many rely on online retail platforms, such as Amazon, eBay, AliExpress, and Taobao. These online retail platforms have undoubtedly transformed the e-commerce space by assisting vendors to expand their customer reach and improve their bottom lines; however, these platforms have also become a hotbed for anti-competitive activities - a serious concern for any vendor.

It is important to implement a pro-active trademark protection strategy so that you can capitalize on the benefits and mitigate the risks of selling your goods through online retail platforms. Here are some strategic points to consider:

1. Register your trademarks
2. Use the tools provided by the online retail platform
3. Remain vigilant and take action mondaq.com

DSS and Market Defense to Host Online Webinar:
"Solving Your Brand's Grey Market and Counterfeit Issues on Amazon, Alibaba, Walmart - What You Need to Know"

Analysis: What the data reveals about Amazon's Prime Day best-sellers

ModCloth launches outlet site

Phoenix, AZ: Man wanted for $45,000 wine theft, found in federal prison
in California
A man wanted for a $45,000 wine theft in Scottsdale was found in a federal prison in California. Court records show that Joseph Eric Hill, 52, was charged last week for theft, forgery, and identity theft after wine was stolen from Phoenix Wine in Scottsdale. Police say Hill ordered 51 bottles of wine and liquor and paid for the order with a stolen credit card. When he came to store, he allegedly provided credit card information and identification from an identity theft victim from California. After helping to load the wine bottles into his car, a store assistant took a photo of Hill. Later "Phoenix Wine received a charge back for $45,339 for this transaction." abc15.com
 

West Springfield, MA: Two wanted in $10,000 credit card/ID theft Police in West Springfield are asking for the public's assistance in identifying a pair of suspects accused of using fraudulent credit cards at various location. West Springfield Police state that the pictured individuals allegedly purchased over $10,000 in merchandise using fraudulent credit cards, all on July 15. Both individuals that are pictured may have ties in Vermont. westernmassnews.com

American Canyon, CA: Walmart cashier got kickback for allowing thefts
totaling $1,100
A Vallejo woman was arrested Monday after American Canyon police say she was paid for her help in allowing someone to come into the store and steal more than $1,100 of merchandise. Eboni Symone Green, 24, was on the job for only five days. Green was arrested on suspicion of four felonies related to theft, embezzlement and conspiracy. napavalleyregister.com

Jacksonville Beach, FL: 3 suspects sought after phones stolen from Sprint store

Bartlett, IL: Jewl-Osco reports arrest of woman who stole over $1,000 of OTC medications

Bloomington, IN: Woman reportedly steals $915 worth of hair loss products, toothbrush heads from CVS

Trussville, AL: Man arrested for toilet paper thefts at Fresh Value, using TP for janitorial business
 

Submit Your New Hires/Promotions or New Position

Featured Job Spotlights

NEW TODAY	Profit Protection Analyst Corte Madera, CA As a Profit Protection Analyst, you should have strong analytical skills, be a quick learner, and drive to innovate with both technology and processes...
	Area Loss Prevention Manager Seattle WA, Portland OR, Salt Lake City UT Our Area Loss Prevention Managers ensure safe and secure stores through the objective identification of loss and risk opportunities...
	Manager of District Loss Prevention Stockton, CA You will be responsible for driving company objectives in profit and loss control, sales performance, customer satisfaction, and shrink results...
	District Loss Prevention Manager Sacramento or Hayward, CA Proactive approach to preventing losses/injuries whether they are to our employees, third parties or customers valuables. They include cash in transit, auto losses or injuries...
	District Loss Prevention Manager Las Vegas, NV/Phoenix, AZ Proactive approach to preventing losses/injuries whether they are to our employees, third parties or customers valuables. They include cash in transit, auto losses or injuries...
	District Loss Prevention Manager Baltimore, MD/Northern VA Proactive approach to preventing losses/injuries whether they are to our employees, third parties or customers valuables. They include cash in transit, auto losses or injuries...
	District Loss Prevention Manager Rochester or Syracuse, NY Proactive approach to preventing losses/injuries whether they are to our employees, third parties or customers valuables. They include cash in transit, auto losses or injuries...
	Regional Asset Protection Manager Metro DC/Northern VA The Regional Asset Protection and Safety Manager will lead the Region in shrink reduction and profit maximization efforts...
	Regional Asset Protection Manager Ohio/Kentucky/Pittsburgh The Regional Asset Protection and Safety Manager will lead the Region in shrink reduction and profit maximization efforts...
	Security Industry Specialists, Inc. provides unique security solutions to some of the most successful names in business. Our clients include Fortune 500 companies, designer brands, international events, celebrities, and high-profile executives. We are currently looking for an experienced LP Specialist - Undercover/Plain Clothes. ● Conduct undercover surveillance to detect and apprehend shoplifters ● Recover assets and/or make safe apprehensions ● Must be able to communicate with all levels of staff and management ● Get to create your schedule with your Supervisor ● Loss Prevention Specialist - Tukwila, WA ● Undercover/Plainclothes LP Specialist - San Jose, CA ● Loss Prevention Specialist - Miami, FL ● Loss Prevention Specialist - Minneapolis, MN ● Loss Prevention Specialist - Philadelphia, PA

Featured Jobs

To apply to any of today's Featured Jobs, Click Here

View Featured Jobs
 

Click here to see all LP/AP job postings from across the web,
including single-unit, district and regional positions.

Sponsor Today's Internet Jobs
 

We want to post your tips or advice... Click here

Not getting the Daily? Is it ending up in your spam folder?
Please make sure to add d-ddaily@downing-downing.com to your contact list, address book, trusted sender list, and/or company whitelist to ensure you receive our newsletter. 
Want to know how? Read Here