8/13/20

LP, AP & IT Security's #1 News Source

PCI SSC Offers Informational Training via New eLearning Platform
PCI Security Standards Council (PCI SSC) has adopted a new eLearning platform to move all informational and certification programs online. With the rise of the COVID-19 pandemic, the Council took important steps earlier this year to protect the health and safety of all involved by canceling face-to-face, instructor-led training courses for the remainder of the calendar year. pcisecuritystandards.org

Security Spending Takes a Hit
Cybersecurity Spending To Reach $123B In 2020

• Spending on Cloud Security is predicted to increase by 33% becoming a $585M market this year.
• Security Services forecast to drive $64.2B in global revenue this year comprising 51.9% of total market.
• Data Security will grow by 7.2% becoming a $2.8B market this year.

Enterprises' spending on cybersecurity continues to grow, defying the pandemic-driven economic downturn impacting global IT spending. While Gartner predicts IT spending will decline by 8% this year, dropping from $3.7T in 2019 to $3.4T, security and risk management (cybersecurity) is predicted to grow 2.4%, down from a projected growth rate of 8.7% earlier this year. For additional details on Gartner's latest Update to their security and risk management spending forecast please see their recent Update here. Key insights include the following:

89% of all cybersecurity spending will be concentrated in five markets this year. Spending on Security Services, Infrastructure Protection, Network Security Equipment, Identity Access Management and consumer security software will together account for the majority of all investments in security and risk management this year.

Eight of ten cybersecurity markets are projected to grow faster than the market average, with Cloud Security growing the fastest.

Cloud-based delivery models are 12% of all cybersecurity deployments and are a pivotal factor in how resilient spending continues to be in this market

Gartner Forecasts Worldwide Security and Risk Management Spending Growth to Slow but Remain Positive in 2020, June 17, 2020 inhomelandsecurity.com

Hired Hackers Up 56%
Expanding attack surfaces leave security teams stretched thin
30% of businesses globally have seen an increase in attacks on their IT systems as a result of the pandemic, HackerOne reveals.

This is according to C-Level IT and security execs at global businesses, 64% of which believe their organization is more likely to experience a data breach due to COVID-19.

Researchers have seen a 56 percent increase in hacker sign-ups on the platform since March compared to the same time last year. With budgets and teams cut for a quarter of respondents, it's perhaps no surprise to see that 30 percent of CISOs say they would now be more open to receiving vulnerability reports from third party researchers than before the pandemic.

"Crowdsourcing security testing with hackers is the fastest and most cost-effective way to minimize the risk security vulnerabilities pose. This is a practice recommended by governments and major digital corporations and allows companies to tap into the best security researchers in the world." helpnetsecurity.com

Two Basic Flaws Make it Easy For Hackers to Break In
Ethical hackers and cybersecurity researchers at Positive Technologies perform penetration testing against organisations in a wide variety of sectors, but find common security vulnerabilities across all industries. The findings have been detailed in a new report, Penetration Testing of Corporate Information Systems. zdnet.com

Deepfakes on Steroids
Digital Clones Could Cause Problems for Identity Systems

3 fundamental technologies -- chatbots, audio fakes, and deepfake videos -- have improved to the point that creating digital, real-time clones of people is merely a matter of integrating the systems

The fundamental technologies for creating digital clones of people - text, audio, and video that sound and look like a specific person - have rapidly advanced and are within striking distance of a future in which digital avatars can sound and act like specific people, Tamaghna Basu, co-founder and chief technology officer of neoEYED, a behavioral analytics firm, told attendees at the virtual Black Hat conference on Aug. 6.

While deepfake videos that superimpose a 3D model of a specific person over another person's face have raised fears of propaganda videos, disinformation operations, and smear campaigns, successful digital clones could cause even more problems, especially for systems that use voice or facial recognition for access management or as a way to fool employees into accepting someone's identity. While the current result of Basu's experiment have numerous telltale signs that the subject is clearly not human, the relative success of project demonstrates how close we may be to successfully creating simulated people. darkreading.com

Texas Man Sentenced to Two Years in Prison for $8M International BEC Scheme
JOSHUA IKEJIMBA pled guilty and was sentenced in Manhattan federal court Wednesday for conspiring to commit wire fraud as part of a wide-ranging, international business email compromise ("BEC") syndicate. During the relevant time period, IKEJIMBA, his co-defendants, and others engaged in a fraudulent BEC scheme that deceived numerous victims, including international companies, individuals, and an intergovernmental organization headquartered in New York City, into diverting payments to bank accounts controlled by the syndicate.

The defendants executed this fraudulent scheme by, among other things, obtaining fraudulent passports in false names, registering and incorporating shell companies, and opening fake bank accounts at various banks throughout the United States. A substantial number of victims were tricked by fake emails and fraudulent wiring instructions into sending funds to the syndicate's bank accounts, and those amounts were then withdrawn by members of the conspiracy and dissipated. During the period from about 2016 through about July 2018, it appears the defendants obtained approximately $8 million by defrauding numerous victims. justice.gov

Johnson Controls Appoints Diane Schwarz As Chief Information Officer

No Search Warrant Required for Records of Bitcoin Transactions, the Fifth Circuit Holds

How to mitigate insider threats to your cannabis enterprise

Key steps to create a program framework and protective intelligence
strategies to reduce risk

Indeed, given a large amount of cash associated with the cannabis industry, and a product that is quite easy to sell, it is not difficult to see how insider theft and diversion are a problem. However, by its very nature, the industry is in many ways like the pharmaceutical and food industries, and hybrid strains of plants and the specific recipes used to create edibles or vape cartridges are all valuable to competitors, thus rising a corporate espionage threat. Additionally, like every other company, insiders also pose a threat to commit workplace violence, embezzlement, sexual assault, and other crimes.

Mitigating the Insider Threat

The first element is a robust pre-employment screening and background check process. Another important element is security education and awareness.

Solid physical security measures to include access control and CCTV systems are also important elements to help protect against various types of insider threats. They can help limit access to sensitive material and can also help protect against workplace violence. Proper cybersecurity protocols and procedures are other critical elements, and they must go hand in glove with physical security programs.  securityinfowatch.com

Nebraska Heading Toward Legalization?
Nebraska: An Example of a Decriminalized State On The Verge of Change
Nebraska belongs to one of the first states that have put decriminalization laws in place to handle its cannabis. Decriminalization in Nebraska has delayed the legalization of cannabis but the efforts towards this direction remain persistent. There are a few initiatives with different agendas that are pushing for cannabis legalization, in particular, for medical purpose.

Leaving Decriminalization Behind

Implementing cannabis legalization also means establishing state regulations and stepping out of the "criminal monopoly" that is often associated with decriminalization of cannabis. With this step, a legal framework would be in place for medical patients so they can receive the proper medical cannabis treatment for their serious health conditions, while stable state regulations would effectively control cannabis production, market and businesses.

Efforts to get on the Ballot: sapphirerisk.com

Labor Unions At the Door
Labor Peace Agreements In The Cannabis Industry
Given the decline in private sector union membership in the United States (currently 6.2%), it should not come as any great surprise that unions view the growth of the cannabis industry as a golden opportunity to reverse this downward trend. One union in particular, the United Food & Commercial Workers, boasts on its web site that it represents tens of thousands of cannabis workers who are employed in growing and cultivating facilities, manufacturing and processing facilities and in laboratories and dispensaries. cannabisbusinessexecutive.com

New Weed Street pot shop looted in 2nd burglary in 2 weeks; Highland Park dispensary also hit

Submit Your New Hires/Promotions or New Position

Featured Job Spotlights

 

	Senior Asset Protection Specialist Santa Monica, CA - posted August 6 The Senior Asset Protections Specialist contributes to REI's success by mitigating and reducing shrink (including theft and fraud by customers and employees) and increasing physical security for people and products in a specified retail store...
	Asset Protection, Retail Safety and Security Specialist Bellevue, WA - posted August 6 This job contributes to REI's success by ensuring the security and safety of your store team and members by providing a presence on REI property and at events. Activities include but are not limited to: fostering partnerships with staff and taking action to address shrink and security...
	Division Safety and Loss Prevention Manager Houston, TX - posted July 28 Under the guidance of the Directors of Loss Prevention (LP) and Health, Safety and Environment (HSE), the Loss Prevention & Safety Manager is responsible for overseeing and championing initiatives and company programs, processes and controls that builds a culture around continuous improvement in safety/environment incidents, loss prevention, and security outcomes...
	Director of Asset Protection Madison, WI - posted August 11 The Director of Asset Protection develops long- and short-term business strategies (3-5 years) and oversees implementation of safety and security initiatives across the organization. This role manages Goodwill's Corporate Compliance Plan to assure that there are policies, procedures, audits, prevention strategies, training and reporting systems in place...

Featured Jobs

To apply to any of today's Featured Jobs, Click Here

View Featured Jobs   |   Post Your Job
 

We want to post your tips or advice... Click here

Not getting the Daily? Is it ending up in your spam folder?
Please make sure to add d-ddaily@downing-downing.com to your contact list, address book, trusted sender list, and/or company whitelist to ensure you receive our newsletter. 
Want to know how? Read Here

FEEDBACK    /    downing-downing.com    /    Advertise with The D&D Daily