10/11/19

LP, AP & IT Security's #1 News Source

2019 GLPS - Group LP Selfies
Your Team - Your Pride - Our Industry
Building Industry Pride - One Team Selfie at a Time
 

It was a great day for hundreds of 7-Eleven employees in Dallas volunteering at 7 different charities on October 10th. Several members from the Asset Protection team volunteered at Minnie's Food Pantry in Plano, Texas. #7elevencaresday #7elevenassetprotection #minniesfoodpantry

Thanks to Byron Smith, Corporate AP Manager for 7-Eleven, for submitting this GLPS

PROTOS SECURITY

Giving LP Professionals the Data To Succeed

In a large company, routing the right information to the right person can be a challenge. Protos Security account managers work with you during the onboarding process to ensure managers, directors, and everyone else gets exactly the data needed for maximum efficiency.

The Protos Client Portal provides schedule information, real-time status, reports on-demand any time and through any device.

Custom Data Pathways Includes:
  ● Store/site managers tardy alerts
  ● Geographically separated data for regional/division directors
  ● Complete budget data for the VP of Loss Prevention
  ● Serious incident reports by several levels immediately and archived for the lawyers

Need a custom solution? We can handle that too!

Contact Protos Security at 866.403.9630 or sales@protossecurity.com

NICCS
National Initiative for Cybersecurity Careers and Studies
National Cybersecurity Awareness Month (NCSAM)
Held every October, National Cybersecurity Awareness Month (NCSAM) is a collaborative effort between government and industry to raise awareness about the importance of cybersecurity and to ensure that all Americans have the resources they need to be safer and more secure online.

This year's overarching message - Own IT. Secure IT. Protect IT. - will focus on key areas including citizen privacy, consumer devices, and ecommerce security.

The NCSAM 2019 Toolkit is a comprehensive guide to make it easy for you and your organization, regardless of size or industry, to engage and promote NCSAM. Use the guide and the resources below to help you engage your stakeholders and promote positive, lasting cybersecurity habits. niccs.us-cert.gov

Fighting Cybercrime in a Connected Future
Europol-INTERPOL Cybercrime Conference examined latest cyber threats, trends and strategies
More than 400 experts from law enforcement, the private sector, and academia have gathered this week at Europol's headquarters in The Hague for what is one of the world's biggest platforms of exchange on cybercrime.

Under the theme of 'Law enforcement in a connected future', the 7th Europol-INTERPOL Cybercrime Conference looked at ways how to effectively combine the expertise, resources and insights of law enforcement, the private sector and academia to make the internet a more secure environment, especially in a society, which is becoming increasingly dependent on digital capabilities.

Over the course of three days (9-11 October), 50 experts elaborated on the most pressing cyber threats of today and tomorrow. Key themes included the benefits and challenges of Artificial Intelligence for police; the potential impacts of 5G technology; cross-border access to electronic evidence; obstacles to international cooperation on cybercrime investigations; the importance of cyber capacity building; cryptocurrency trends and challenges; the use of open-source intelligence and privacy considerations.

This year's conference saw the participation of over 100 organisations and more than 70 different law enforcement agencies engaging in fruitful and solution-oriented discussions on how to tackle the challenges at hand head-on in a collective manner. europa.eu

Dark Web Development Trend
Recent Shutdowns Scattered the Hackers
Hackers hiding out in smaller online marketplaces
Police struggle to investigate splintered dark-web forums as hackers get better at covering their tracks.

Recent law-enforcement shutdowns of major dark-web marketplaces are pushing criminals onto smaller forums for illegal services, making it difficult for authorities to investigate and stop them.

Law enforcement might struggle to connect their sales on different venues, according to Europol officials. Authorities also face challenges in closely following activity on such forums, where criminals often communicate in other languages, as they turn away from large marketplaces where transactions often occurred in English.

While business might be less lucrative on smaller forums, there could be a lower risk of getting caught, said Mikko Hypponen, chief research officer at Finland-based cybersecurity company F-Secure Oyj. "It's a clever move," he said.

Small marketplaces have experienced an uptick in activity, including some that offer products from only one seller, according to investigators at the European Union law-enforcement agency, Europol. Many criminals use various smaller marketplaces and investigators might struggle to connect their sales on different venues. Authorities also face challenges in closely following activity on such forums, where criminals often communicate in other languages as they turn away from large marketplaces where transactions often occurred in English.

Criminals increasingly use multiple accounts with different names to sell illegal items or services on various marketplaces, Europol said in its 2019 Internet Organized Crime Threat Assessment, published Wednesday. For investigators, this means more work to identify perpetrators behind criminal activity and to connect crimes on different sites, the report said.

Mr. Amann said cybercriminals "think like entrepreneurs. Whatever they can do to minimize the risk of getting caught, they'll do."

Some law-enforcement authorities in Europe use machine learning, including Europol, which uses it on a small scale, Mr. Amann said. Authorities need staff with specialized skills to use such techniques.

"It's probably not expertise you'd naturally find in law enforcement," he said. Police forces need to hire people from different fields such as mathematicians and data scientists, he added. wsj.com

How to Think Like a Hacker
It's an Arms Race With No End In Sight Ever
In One Regard Just Like in LP/AP - Think Like the Thief
Computer security is a very unique field. Unlike other fields in which the challenge is to overcome the scale of a problem or the complexity of an algorithm, in computer security the challenge is the wit of another human being who is trying to carry out an attack in order to compromise and disrupt a computing infrastructure.

Because of its adversarial nature, computer security is in continuous evolution. As it happens in many game-theoretical models, every move from either an attacker or a defender changes the state of the game and might invalidate current defenses or foil future attacks. In this arms race, everything evolves, all the time, and anticipating the possible threats becomes of paramount importance.

Therefore, security practitioners need to always think as an adversary, or, essentially, "think like a hacker."

This mindset is necessary during the response to an actual attack, in order to understand the tools, techniques, and goals of the attacker, based on the information collected in the field. But it's also important for security pros to continuously work on the skills they need to anticipate possible new attacks in the future.

But can someone actually learn how to think like a hacker? The answer is absolutely, "yes." darkreading.com

Editor's Note: From a mindset, technology application, risk & exposure standpoint here is where cybersecurity and LP/AP converge entirely, regardless of how some care to define it or deny it. As LP executives have been doing this for over fifty years. Long before the hacker ever showed up. Just a thought that I'm sure someone will take issue with as there are no lanes in an omnichannel retail world.
-Gus Downing

Hackers Hide Behind Trusted Domains, HTTPS
Attackers attempting to dodge more advanced security defenses increasingly are adopting more sophisticated techniques to fool victims with their malicious e-mail messages and websites

A new midyear report from security firm Webroot found that one in four malicious URLs used a legitimate domain in an attempt to improve the success rate of an attack. In the vast majority of cases - 94% - the attacker used an URL shortener to mask a malicious domain in order for it to appear legitimate. In the first half of the year, the company found 1.5 million phishing URLs, accounting for about one in 50 URLs encountered by its customers.

"Attackers' tactics are reducing (consumers') ability to tell the difference between what is a scam and what is not," he says. "Attackers know that many consumers do a mental check on any domain, and they are trying to fool them." darkreading.com

Blackhat Webcast: Leveraging Red for Defense
Tuesday, October 15, 2019, 11:00AM - 12:PM PDT // 60 Minutes. Including Q&A
There's no question that defense has gotten better when it comes to identifying threats early on in an attack. Companies still struggle beyond traditional attack avenues and have a difficult path into understanding how to progress when it comes to identifying unusual behaviors.

This talk will dive into red team tactics and the best methods for leveraging red to identify the best path to building your monitoring and detection capabilities. Going purple helps companies get better while having some fun with understanding attack techniques.

Let's dive into understanding how attacks work and building specific detections on them. This presentation will be a blend of technical and non-technical and go through very specific use cases around monitoring and detection as well as ways to enhance your monitoring and detection capabilities. blackhat.com

REGISTER NOW

RFID in Retail: Embrace It or Fall Behind

By Tom Bolanos, Account Executive US Sales, Nedap Retail

It has been a favorite topic in the retail industry for what seems like 15 years. A constant theme that sounds more like a Game of Thrones trailer than a true industry development; "RFID is coming." We've heard all the legendary promises of what it can do, what it will do, and the fundamental changes it will truly bring to the retail industry. Well, where is it? Is it finally here?

RFID has finally hit the retail market and is starting to make its first widespread impact for both online and offline retailers. Overall RFID technology costs have dropped, making the adoption for RFID much easier to swallow and bringing about true ROI for those who have integrated it into their systems and processes. Across the spectrum of retail, one can see a number of successful uses of this technology, such as making inventory counts faster and more accurate, using RFID for loss prevention and having true visibility into retail shrink, and making the retail environment interactive and more personal for the consumer.

Read More Here

Top 5 LPNN Videos of 2018
#1 Most Watched

Critical Incident Management - Technology - Response

Pat McEvoy, Sr. Dir of AP Administration, Hudson's Bay Company
Bryan Granata, Managing Dir of AP, Saks Fifth Avenue

With lone wolf terrorist attacks happening more frequently in the greater NYC area and active shooter incidents increasing nationwide, the need for critical incident management programs, technology and hardware has never been more important.

Pat McEvoy, Sr. Director of Asset Protection Administration, Hudson's Bay Company and Bryan Granata, Managing Director of Asset Protection, Saks Fifth Avenue, tell us about the preventative measures their stores are taking from training drills and K9 dogs to gunshot detection systems.

Episode Sponsored By
 

See our 'Live in Dallas' Top 5 and 'Live in NYC' Top 5 videos here.

How fraud prevention is costing e-commerce businesses millions
False declines lead to more loss than the fraud itself
According to a new report by Aite Group, merchant losses to e-commerce fraud are projected to grow to $6.4 billion by 2021. Fraud is a persistent and increasingly sophisticated threat to retailer profits, and that is concerning enough in itself - but merchants need to be wary that fraud-busting can also backfire and cost them even more.

How fraud prevention can cost companies more than fraud itself
If merchants are overzealous and flag legitimate transactions as fraudulent, then they are creating a whole new issue: that of false declines. The new Aite report shows that losses due to false declines will grow to $443 billion by 2021 - far outstripping the losses caused by the original issue of fraud.

The true cost of a false decline
The negative effects of false declines are both short- and long-term. In the short term, money is lost through refusing a legitimate customer the ability to complete a transaction. In the long term, and of far more concern, customers are left angry and refuse to return to that merchant in the future.

Savvy ways to deal with false declines
Firstly, monitor second attempts. If a legitimate customer is falsely declined, they will often make a second attempt to purchase the product. Secondly, use a control group. Merchants can create a control group with some suspicious-looking transactions and analyse which orders result in chargebacks. Thirdly, contact customers about suspicious orders. Have a system in place for authenticating orders, whether it is a one-time passcode texted to their phone or a human-to-human phone call. finextra.com

NY Lawsuit Claims Online Retailers Selling e-Cigs To Underage Buyers
More than 20 online eCigarette retailers are being sued by New York City for allegedly selling to children. Bloomberg is reporting that the suit follows a crackdown on vaping following an outbreak of lung illnesses tied to the practice.

New York City requested that a Brooklyn federal judge on Wednesday (Oct. 9) stop 22 online sellers from being allowed to either market or offer eCigarettes to anyone younger than 21. Part of the request also involves a mandate that these companies put in age-verification systems, alleging that even when ages lower than the legal limit were entered, people could still purchase the vaping products. pymnts.com

3 ways to reduce the risk of selling online

U.S., China Trade War Is Impacting Ecommerce

Salt Lake City, UT: Property to be returned to Riverdale retailer after pawn shop scheme
The Utah Attorney General's Office received permission from the courts this week to return some $5,000 in property to one of the retailers following the recent pawn shop scheme. The return of the merchandise will occur Friday, at noon at the Riverdale Home Depot, at 999 W. Riverdale Road, said a news release from the Utah Attorney General's Office. In June of 2018, special agents from the Utah Attorney General's Office served search warrants on several pawn shops along the Wasatch Front that were suspected of buying large amounts of stolen property, the news release said. Investigators seized an estimated $1.2 million in brand new merchandise, still in the original packaging. gephardtdaily.com

Estero, FL: Thief at Perfumania at Miromar Outlets flees with $3,500 worth of fragrances
A theft at an Estero store left the business without a lot of scents. A man jumped the counter at the Perfumania store at Miromar Outlets and, after grabbing a multitude of boxes of men's cologne, bolted from the outlet. Southwest Florida Crime Stoppers is making a plea for information in the Sept. 17 crime. Surveillance photos show the believed thief, with an Under Armor bag thrown over his shoulder, making his getaway. news-press.com

Oak Creek, WI: Meijer Theft Suspects Caught With $1,000 In Random Stuff

North Attleborough, MA: JC Penney Shoplifter arrested with $430 of stolen merchandise

Laredo, TX: Two Young women accused of stealing $600 worth of clothes

Laredo, TX: Woman arrested with hundreds of dollars in laundry detergent, fleeing out the Garden Center
 

Click to enlarge map

Submit Your New Hires/Promotions or New Position

Featured Job Spotlights

NEW	Loss Prevention Operations Specialist Tucscon, AZ The Loss Prevention Specialist will oversee the Burglar/Fire Alarm and overall Physical Security function for stores including CCTV for all new stores, renovations, acquisitions, closing, existing stores and warehouses. In addition, this position supports the security/property control component for the Corporate Headquarters main campus...
NEW	Region Asset Protection Manager Jacksonville, FL Responsible for managing asset protection programs designed to minimize shrink, associate and customer liability accidents, bad check and cash loss, and safety incidents for stores within assigned region. This position will develop the framework for the groups' response to critical incidents, investigative needs, safety concerns and regulatory agency visits...
NEW	Region Asset Protection Manager Charleston, SC Responsible for managing asset protection programs designed to minimize shrink, associate and customer liability accidents, bad check and cash loss, and safety incidents for stores within assigned region. This position will develop the framework for the groups' response to critical incidents, investigative needs, safety concerns and regulatory agency visits...
	Brand Protection Specialist New York, NY The role of the Brand Protection Specialist is to deter shrinkage, and to assist in educating the store teams regarding the prevention / deterrence of both internal and external theft and fraud, while serving as an Ambassador to the brand and the department...
	Organized Retail Crime Manager Houston, TX Oversee organized retail crime (ORC) interactions within a defined region, execute against ORC initiatives and respond to cases involving executive protection, critical incidents, threat analysis, and threat assessments. Identify, exploit and lead investigations related to ORC and other assigned investigations...
	Manager of Loss Prevention & Security Wawa, PA The Manager of Loss Prevention and Security serves as the subject matter expert in the area of Loss Prevention and Physical Security for the Company with focus on developing and driving solutions that will create an optimum associate and customer experience in a safe and secure environment...

Featured Jobs

To apply to any of today's Featured Jobs, Click Here

View Featured Jobs   |   Post Your Job
 

We want to post your tips or advice... Click here

Not getting the Daily? Is it ending up in your spam folder?
Please make sure to add d-ddaily@downing-downing.com to your contact list, address book, trusted sender list, and/or company whitelist to ensure you receive our newsletter. 
Want to know how? Read Here