GOLD SPONSOR

ADT/Protection 1 has the breadth and depth of experience along with the latest technologies that can serve retailers' needs to protect their physical locations that range from burglary protection and fire monitoring to access control and state-of-the-art event triggered video solutions.

With the recent acquisition of Data Shield and the formation of its ADT Cybersecurity division, Les Paul Vernon, VP of Enterprise Solutions, talks about their new services in endpoint and network security and monitoring, email security and monitoring, and Managed Detection and Response solutions that can help organizations identify and remediate cyber threats in minutes instead of months.

Les Paul Vernon - ADT/Protection 1 - Quick Take 7

Amber and Joe take flight in this LPNN Quick Take with former fighter pilot Les Paul Vernon. ADT's VP of Enterprise Solutions shares what his call sign was as a pilot, gives Amber and Joe one, and tests his "Top Gun" movie quote trivia.

Yesterday, California Governor, Jerry Brown signed AB 1065 into law. For the first time in California, the new law creates and recognizes the crime of organized retail theft and creates specific penalties for those who commit such crimes. Attached is a copy of the final bill and also attached is a legislative analysis that highlights what this bill will do.

Highlights of the bill include:

● Change the threshold for highest penalty from 3 or more convictions within 12 months to 2 or more convictions within 12 months
● Bolster misdemeanor arrest and bench warrant sections
● Mandate that courts consider issuing a stay away order for violators
● New CHP/State Taskforce
● New misdemeanor supervision program
● New deferred entry of judgement diversion program
● 2021 sunset

Here is an LA Times article from earlier this year that reported about this bill as it was being considered.

Governor Brown Helps Keep CA Retail Workers Safe
by Cracking Down on Organized Theft
The United Food and Commercial Workers (UFCW) Western States Council today applauded Governor Jerry Brown for signing AB 1065 (Jones-Sawyer) to make organized retail theft a crime and strengthening local law enforcement's ability to arrest and prosecute perpetrators. The following statement may be attributed to James Araby, Executive Director, United Food and Commercial Workers Western States Council:

"A National Retail Federation survey found that 95% of merchants were the victim of coordinated theft, resulting in $30 billion in estimated losses per year. These sophisticated criminal enterprises put retail workers represented by UFCW in dangerous situations on a daily basis. AB 1065 will improve safety in California's retail stores.

"In addition to strengthening local law enforcement's ability to hold criminals accountable, AB 1065 also creates risk-based rehabilitation programs to minimize recidivism and incarceration. UFCW applauds Governor Brown for embracing AB 1065's holistic approach to the pervasive problem of organized retail theft and approve this common-sense criminal justice reform." ufcwwest.org

Justice Department Hosts Cybersecurity Industry Roundtable With Private Sector
Revised Guidance Released:
Best Practices for Victim Response & Reporting of Cyber Incidents
In February of this year, Attorney General Jeff Sessions established a Cyber-Digital Task Force, which published its first report in July. The report provides a comprehensive assessment of the cyber-enabled threats confronting the nation, and catalogs ways in which the Justice Department combats those threats, including by partnering with the private sector.

The Justice Department's Criminal Division hosted a cybersecurity roundtable discussion yesterday on the challenges in handling data breach investigations. Assistant Attorney General Brian A. Benczkowski of the Criminal Division delivered opening remarks and served as moderator for the event. Deputy Attorney General Rod J. Rosenstein, Assistant Attorney General John C. Demers of the Department's National Security Division and officials from the FBI, U.S. Secret Service, the White House's National Security Council and U.S. Department of Homeland Security also delivered remarks at the event. The audience included many of the nation's leading private-sector practitioners in the field of data breach response and representatives from premier cybersecurity and incident response firms in the country.

The Department continues to exchange ideas with and look to the private sector's expertise and insight about how to improve cooperation between law enforcement agencies and data breach victims.

"Public-private partnerships addressing cybercrime play a critical role in our efforts to hold criminals accountable for data breaches," said Deputy Attorney General Rosenstein. "We depend on the private sector to help us maintain the rule of law in cyberspace at every stage of our work. That includes working together to obtain critical evidence for investigations and trials, and collaborating on developing the legal authorities needed to protect our 21st century economy. Today's discussion aims to share best practices, common challenges, and emerging threats, and identify how the Department of Justice and our law enforcement partners can help private industry to protect Americans from harm while safeguarding privacy. Through roundtables like this and the continuing collaboration they fuel, we will meet emerging threats, protect America's technological innovations, and preserve public safety and security."

As part of Thursday's event, the Cybersecurity Unit released a new document providing even more comprehensive guidance that reflects input the Unit received during its outreach efforts. The revised guidance addresses new issues like working with incident response firms, cloud computing, ransomware, and information sharing. It is an example of the type of assistance that the Cybersecurity Unit was designed to provide-to help elevate cybersecurity efforts and build better channels of communication between law enforcement and industry. justice.gov

Cybercriminals Spend Ten Times More Than Companies on Security Battle
$1 Trillion vs. $96 Billion
In a stunning new report by Carbon Black, "Hacking, Escalating Attacks and The Role of Threat Hunting" the company revealed that 92 percent of UK companies surveyed have been breached in the last 12 months and almost half (44 percent) have been breached between three and five times.

Perhaps the most dramatic data point shared by Carbon Black is that cybercriminals are currently spending approximately $1 trillion on developing cyberattack weapons, annually (according to the World Economic Forum), while the "defenders" (enterprises, governments, organizations) are spending about $96 billion (according to Gartner).

That's a 10:1 ratio.

"The stats clearly show that defenders are not keeping up with attackers' spending," said Tom Kellermann, Chief Cybersecurity Officer, Carbon Black. "The fact that 92 percent of UK companies have experienced a breach in the last year and nearly half have been breached multiple times is sobering. It's critical to educate UK businesses on the threats they face and how these threats can be mitigated." iotevolutionworld.com

Facebook Network Breach Affects Up to 50 Million Users
Facebook on Friday said an attack on its computer network led to the exposure of information from nearly 50 million of its users.

The company discovered the breach earlier this week, finding that attackers had exploited a feature in Facebook's code that allowed them to take over user accounts. Facebook fixed the vulnerability and notified law enforcement officials.

More than 90 million of Facebook's users were forced to log out of their accounts Friday morning, a common safety measure for compromised accounts.

Facebook said it did not know the origin or identity of the attackers, nor had it fully assessed the scope of the attack. The company is in the beginning stages of its investigation. nytimes.com

6.42 million shoppers hit by online fashion shopping giant's massive data breach
Women's online fashion store SHEIN has announced that its servers were recently breached with a sophisticated criminal cyberattack that leaked the confidential information of around 6.42 million customers.

The company confirmed the hackers managed to snag personal information including email addresses and the encrypted passwords of customers who visited its website between June 2018 and early August 2018.

However, SHEIN claims that they haven't seen evidence that credit card information was taken from their systems during the breach since it doesn't store that type of data on its servers. komando.com

Russia's Sednit Deploys First Firmware-Level Rootkit in the Wild
The advanced persistent threat group's LoJax can install malware capable of surviving both OS reinstallation and hard disk replacement. Advanced persistent threat (APT) group Sednit has deployed a rootkit capable of modifying a computer's Unified Extensible Firmware Interface (UEFI) to install malware that can survive both an OS reinstallation and hard disk replacement. darkreading.com

Explosion in fake data-stealing shopping sites
Cyber attackers are ramping up efforts to steal personal data by setting up look-alike domains that pose a phishing risk to online shoppers, researchers warn

There are more than 6,400 digital certificates for look-alike domains, which is 168% greater than the number of certificates for valid UK retail domains, research by security firm Venafi has revealed.

This puts online shoppers at risk of unwittingly handing over their username, password and even credit card details to threat actors, the researchers warn.

The research analysed suspicious domains targeting the top 20 retailers in the UK, US, France, Germany and Australia. The total number of certificates for look-alike domains across all five regions is more than 200% greater than the number of authentic retail domains, with one of the top 20 US retailers found to have more than 12,000 look-alike domains targeting its customers.

As the rate of online shopping increases, the researchers said customers are being targeted through look-alike domains which cyber attackers create by substituting a few characters in the URLs.

Because they point to malicious online shopping sites that mimic legitimate, well-known retail websites, it makes it increasingly difficult for customers to detect the fake domains. Additionally, given that many of these malicious pages use a trusted SSL/TLS certificate, they appear to be safe for online shoppers who unknowingly provide sensitive account information and payment data. computerweekly.com

The newest factor impacting chargeback losses is...
E-retailers are finding themselves being victimized by chargeback policy abuse, a form of cyber-shoplifting - even more so than their brick-and-mortar counterparts, according to "The State of Chargebacks: 2018 Report," a study from dispute mitigation and loss prevention firm, Chargebacks911.

Chargeback policy abuse, or "friendly fraud," occurs when a consumer makes an online shopping purchase with their own credit card, and then requests a chargeback from the issuing bank after receiving - and keeping - their order. Increasingly gaining momentum, friendly fraud was three times more prevalent in 2017. It also "increased notably in terms of the sophistication of attack methods," according to the study. chainstoreage.com

Etailers' sales growth 24 times that of bricks-and-mortar retailers

The Bon-Ton department store chain is revived as an online retailer

Gap pulls the plug on subscription clothing boxes

Denis Prose promoted to Regional Loss Prevention Manager for Amazon

Sami Shaikh promoted to Loss Prevention Manager for DFS Group Limited

Submit Your New Hires/Promotions or New Position

Featured Job Spotlights

	Director Loss Prevention Irvine, CA The Director of Loss Prevention at Tillys builds and implements policies, programs, and procedures that control risk, reduce shrink and protect the employees and assets. The director is responsible for leading and developing LP team members in the corporate, retail, and distribution centers...
	Vice President, Chief Information Security Officer Grapevine, TX The Chief Information Security Officer (CISO) is the GameStop executive responsible for leading our global information security organization and will have officer level fiduciary responsibility...
	Vice President, Asset Protection Columbus, OH Oversees and directs all Asset Protection related functions for a Corporate Office, multi-state distribution centers and large retail store network. Responsible for enterprise direction and strategy as it pertains to Asset Protection with a goal of minimizing shrink, reducing loss and maximizing security and associate safety...
	Vice President, Loss Prevention Houston, TX This pyramid head position is responsible for developing and leading this company's shrinkage reduction efforts and integrating these efforts throughout the entire organization...
	Project Coordinator (LP Technology) Dublin, CA Provides support for all types of LP technology installation projects, (e.g. new stores, upgrades, remodels, maintenance/repair, etc.). Serves as the point of contact on all projects as assigned, interfacing with vendors, field management, and various corporate teams...
	Project Lead (LP Technology) Dublin, CA The Lead, Project Coordinator facilitates the development, implementation, and ongoing execution of multiple Loss Prevention technology projects, programs and systems. This is accomplished by leading projects from concept to completion, acting as a subject matter expert, and working effectively with internal partners (i.e. Store Operations, Store Planning, IT, HR, Logistics, Purchasing, etc.) and external resources (i.e. vendors, service providers, etc.) to drive results, and monitoring to ensure all projects meet scope, timeline, and budget needs...
	Regional Asset Protection Manager Harrisburg/State College, PA The Regional Asset Protection Manager will lead their region in Shrink Reduction, Asset Protection and Safety efforts through an in-depth understanding of the overall business, effective partnerships and by directing the region with integrity and professionalism...
	Loss Prevention Market Specialist Jacksonville, FL To monitor store locations to detect, investigate and resolve internal and external situations and circumstances that could lead to or result in losses to the company. All actions and conduct within the scope of the position must be performed according to performance standards set by Burke's policies, procedures and Code of Ethics...
	Loss Prevention/Asset Protection Investigator Boston, MA Responsibilities will include but are not limited to: ● Protect the assets of the store as well as the associates and visitors. ● Maintain surveillance of the store via CCTV and conduct physical inspections including perimeter checks...
	Asset Protection Analyst Norcross, GA AP Analyst based in Norcross, GA reporting to the Director of Asset Protection. This high-visibility role will be responsible for business-wide security administration, multiple fraud detection programs and functional communication...
	Regional Loss Prevention Manager Sacramento, CA ● Develops and implements shrink reduction strategies and action plans for their coverage region and for individual stores as needed ● Creates and conducts training sessions at the regional, district, and store level to educate and bring awareness to loss prevention and shrink related topics...
	Regional Loss Prevention Manager Atlanta, GA ● Develops and implements shrink reduction strategies and action plans for their coverage region and for individual stores as needed ● Creates and conducts training sessions at the regional, district, and store level to educate and bring awareness to loss prevention and shrink related topics...

Featured Jobs

To apply to any of today's Featured Jobs, Click Here

Today's Daily Job Postings from all around the net - Appearing today only

To apply to today's Internet Jobs, Click Here

Sponsor Today's Internet Jobs 

The Best Leaders Don't Worry About Being Right,
Use the Power of Laughter, and Practice Their Leadership
 

We want to post your tips or advice... Click here

Not getting the Daily? Is it ending up in your spam folder?
Please make sure to add d-ddaily@downing-downing.com to your contact list, address book, trusted sender list, and/or company whitelist to ensure you receive our newsletter. 
Want to know how? Read Here