10/29/20

LP, AP & IT Security's #1 News Source

Cloud, Mobile & Social Media Tech:
Your Company's Hidden Vulnerability?

New poll suggests enterprises should harden systems
against unconventional attack vectors
SafeGuard Cyber's Digital Risk Survey was conducted to understand how businesses rate their own security and compliance risks in the new digital reality of the workplace wrought by COVID-19 pandemic. The study revealed the need to harden unconventional attack vectors in cloud, mobile, and social media technologies. Moreover, enterprise organizations are juggling the twin demands of budget constraints and the need to drive business outcomes.

Key findings include:

● There is a significant disconnect and tension between the perceived security and compliance needs and the level of organizational planning. Despite perceived digital risk around unsanctioned apps, ransomware attacks, and securing various tech stacks, only 18% of respondents cite security as being a board-level concern.

● 57% of those surveyed cited internal collaboration platforms, like Microsoft Teams and Slack, as the tech stack representing the most risk, followed closely by marketing technologies (41%).

● 1 in 4 respondents cite Executives' personal social media as being an area of risk.

● The biggest security and compliance challenge is the use of unsanctioned apps (52%), followed by trying to monitor business communications in multi-regional environments (43%), suggesting global enterprises are seeing more friction in adapting processes to the new post-COVID digital workspace.

● When it comes to purchasing new technology, 59% cite budget as the top concern, followed very closely by "impact on business outcomes" like revenue growth and agility (56%). Enterprises are juggling the twin demands of budget constraints and the need to drive business outcomes.  securitymagazine.com

Pandemic Forces Companies to Confront Technology Ethics Questions

'Ethics by default' will become the norm for technology products,
says Salesforce.com's ethics chief

Companies trying to reopen offices during the coronavirus pandemic face ethics and privacy questions about how they screen employees for potential health problems.

Some apps and data-collection systems probe for Covid-19 symptoms, such as fever or cough, and ask about an employee's activities outside of work. But collecting and storing such detailed information can lead an organization to cross ethical boundaries, said Paula Goldman, chief ethical and humane use officer, at tech giant Salesforce.com Inc. wsj.com

Rethinking Security for the Next Normal -- Under Pressure
Whether you see COVID-19 as forcing an abrupt shift in the way organizations operate or merely accelerating trends that were already underway, it's clear that the future is unlikely to resemble much of the past. From the surge in remote work to the rapid embrace of cloud and automation technologies, the changes that have been made are enabling new levels of operational flexibility that organizations won't want to give up moving forward. What does this mean for security? That's a question that professionals throughout the industry have been trying to figure out. If you're not sure yet, you're not alone.

First, here's a little context for the changes and their implications.

● What Security Professionals Saw Coming - and What We Didn't
● Developing a Collaborative Culture Among Operations, Dev, and Security
● Making Security Accessible to Developers
● Automating Security into the DevOps Cycle  darkreading.com

'Act of War' Clause Could Nix Cyber Insurance Payouts
The indictment of six members of the Russian military for the NotPetya ransomware attack places companies on notice that insurance "is not a get-out-of-jail-free card."

Companies relying on their business interruption or property insurance policies to cover ransomware attacks and other cyber damages are running the risk of not having coverage during a major attack if insurers are successful in shielding themselves using the ubiquitous "act of war" clause, according to cybersecurity and insurance experts. darkreading.com

Business Email Compromise (BEC) Attacks Rise in 75% of Industries, Including Retail

Most companies have high-risk vulnerabilities on their network perimeter

How the Cannabis Industry Quickly Adapted to the Pandemic
COVID-19's Prolonged Impact on the Cannabis Industry
From growers, to producers and wholesalers, to retail sellers - the entire cannabis industry end-to-end has been impacted in some way by the COVID-19 pandemic. As we continue to pick up the pieces of the initial shock from back in March and look ahead to the rest of 2020 and into 2021, I'm amazed at how the cannabis industry quickly adapted and am optimistic for its future.

Why COVID-19 didn't kill cannabis sales
As it turns out, the industry saw record sales in the early days of the pandemic as consumers stocked up, fearing that dispensaries would face a long term shut down. Many expected these elevated sales trends to slow down after stimulus checks and unemployment benefits began to run out for Americans. But that didn't end up happening. We believe that new consumers who began turning to cannabis rather than pharmaceuticals as a more natural method of treating various ailments or anxiety had a great experience, and opted to continue on that path rather than reverting back to previous synthetic methods of treatment.

The pandemic's impact on cannabis sectors varied
Wholesale operations, especially large outdoor grows in states with lower infection numbers, have been impacted the least. Guidelines for social distancing in warehouses have changed the way people work, but higher than normal demand is forcing wholesalers to adapt quickly to the new normal.

Looking ahead to 2021 and beyond
While it's nice to think that COVID-19 will become a distant memory in January next year, that wish is looking less likely. The cannabis industry is still strong and growing, but I suspect that it will continue to grow at a slower rate until the pandemic is fully behind us. This is because the cannabis industry is highly regulated and relies on several other industries - including state and federal government - which have all been impacted in their own ways by the pandemic. cannabisbusinessexecutive.com

Halloween Checklist for Cannabis Businesses
Suppose you own a business, particularly one that deals with pricey, desirable items like jewelry or recreational cannabis. In that case, you know how important security is. Before closing up for Halloween night and the night before, follow this checklist to protect your business from crime:

● Check your security systems and fire alarm. Ensure your cameras and floodlights are working if you have them installed or consider investing in some before Halloween.

● Leave your property well-lit to discourage vandalism. 

● Remove your cash register or pricey retail items from obvious view for the night. 

● If you decorated for the holidays, make sure your décor does not obstruct any walkways or exits. If someone hurts themselves on your property, your business could be held liable even if you weren't there to witness the injury. 
 
Checking with your insurance provider to make sure you understand your coverage can give you increased peace of mind during the most violent night of the year.  sapphirerisk.com

Cash And 'Cannabis Rents':
Landlords Warming Up To Pandemic-Proof Weed Retailers
Lawyers, brokers and retailers working with and in the cannabis industry in the LA area say that sales are up and demand is strong. Cannabis was designated an essential business early on and didn't face lockdowns like the ones experienced by storefronts for retail destinations like gyms, bars or live music venues.

With cannabis tenants doing so well, some experts anticipate that it could get easier for retailers in the industry to find space as the market shifts and tenants hold more power over landlords who have space to spare.

For those looking to enter the heavily regulated industry, finding a retail space is a huge hurdle. Because cannabis is still illegal federally, the pool of available real estate is often limited to those spaces whose owners own them outright. Among those owners, the pool of landlords who are open to renting to cannabis tenants has been smaller still. Nevertheless, there is continuing traction for opportunistic investors. bisnow.com

Banks Navigate Hazy Regulations to Serve Cannabis Businesses
Many financial institutions looking to offer banking services to the expanding number of legal cannabis growers and distributors in the U.S. are still limited by spotty regulations and expensive compliance efforts.

The disparities between federal and state laws governing the use of marijuana and hemp, and the differences across states, are inhibiting banks from stepping into what has become a lucrative and legal business in many areas. Regulators have issued scant guidance and some of the existing advisories are outdated or set few clear obligations for banks, such as information that a bank should ask for from potential clients, financial institutions say. wsj.com

Cannabis Retailer Piece of Mind Focuses On Internet Security For Customers' Safety

Where recreational marijuana is legal, data show minimal impacts on teen use and traffic deaths

$500K Cargo Theft Ring
Tampa, FL: Four Individuals Plead Guilty In $500,000 Tequila Cargo Theft Ring
Each have each pleaded guilty to charges involving cargo theft of an interstate shipment of goods, and receipt and possession of stolen goods. They face a maximum penalty of 10 years in federal prison.

According to court documents, on December 30, 2018, Escobar, Ramirez, Obaya, and Estrada stole a tractor trailer that was parked near U.S. Route 301 in Tampa. The trailer contained cases of Patron tequila, with a value of more than $500,000. The tequila was an interstate shipment from Texas that was en route to a business in Lakeland, Florida. The shipment had not yet reached its final destination when the trailer was stolen.

The trailer was relocated to Thonotosassa where the defendants proceeded to move cases of the tequila from the trailer to a nearby box truck. The box truck was registered to Escobar. Deputies from the Hillsborough County Sheriff's Office were alerted to the movement of the trailer and, when they arrived on scene, the deputies observed the defendants moving the cases of tequila from the trailer to the box truck. When the deputies commanded the individuals to stop, they fled but were later arrested near the scene. The cases of tequila were recovered. justice.gov

Gresham, OR: Thieves steal $1,300 worth of equipment from electronics store
& try to sell it online
FOX 12's most wanted stole $1,300 worth of merchandise from an electronics store Tuesday, and the theft was caught on camera. The owner of the business then saw one of the stolen items listed for sale on an app. The theft occurred at Outrageous Audio, located at 19140 Southeast Stark Street. Security footage shows three suspects stealing an $800 amplifier and a $500 stereo. Shop owner Blane Hartleb told FOX 12 he believes the suspects planned the crime. In the video, two men and one woman are seen entering the store, then gathering in the back to talk. Two of the suspects then distract the store employees while the third walks out the door with the amplifier. That suspect then comes back in, grabs the stereo and leaves. kptv.com

Serial Robbery Team in Texas
Austin, TX: APD asking for help identifying suspects in serial 7-Eleven robbery investigation
The Austin Police Department Robbery Unit is asking for the public's help in identifying four suspects that were involved in a series of robberies that occurred at three Austin 7-Eleven stores in October. APD says the first robbery occurred on October 5. The second and third robberies both occurred on October 13. APD goes on to say that the suspects committed similar acts in Missouri City on October 22 and in San Antonio on October 23. In the incidents that took place in Austin, the suspects were seen in an older-model, white Toyota Rav4. The vehicle has a tire on the back with no covering and damage or dark paint on the passenger's side front-quarter panel, according to police. cbsaustin.com

Yakima, WA: Duo busted after hitting Safeway stores repeatedly for diapers, food
Two people are facing charges after the Yakima Police say they stole boxes of diapers and other items about eight times at local Safeway stores. A store employee reported to officers the thefts took place from Safeway stores at 2204 W. Nob Hill Blvd, 205 N. 5th Ave. and 1610 W. Lincoln Ave. YPD says a man and a woman have stolen a total of $659.37 worth of diapers, food, and other miscellaneous items in October. Both of them are charged with Retail Theft with Special Circumstances 3rd Degree. kimatv.com

Palm Beach, FL: Man places fake bar code on box, buys $399 drill for 54 cents
A man and a woman went into a store, selected a $399 drill and took it to the self-checkout. When the man scanned the barcode, it came out as 54 cents for the item. He paid for it by credit card. The woman wheeled the cart outside, where they were confronted by security. A police officer spoke to the man, who said either he or his companion placed the fake bar code on the package. His female friend pleaded ignorance in the caper. Both were given trespass warnings from the store. The man was arrested and given a notice to appear in court. palmbeachpost.com

Submit Your New Hires/Promotions or New Position

Featured Job Spotlights
 

	Division Safety and Loss Prevention Manager Atlanta, GA - posted October 5 Under the guidance of the Directors of Loss Prevention (LP) and Health, Safety and Environment (HSE), the Loss Prevention & Safety Manager is responsible for overseeing and championing initiatives and company programs, processes and controls that builds a culture around continuous improvement in safety/environment incidents, loss prevention, and security outcomes...
	Regional Asset Protection Manager Emeryville, CA - posted October 2 The Regional Asset Protection and Safety Manager will lead the Region in shrink reduction and profit maximization efforts. The position will proactively seek to bring economic value to the company, promoting profitable sales and world class customer service while ensuring a safe place to work and shop...
	Asset & Profit Protection Investigations Analyst San Francisco, CA - posted September 24 You should have strong analytical skills, be a quick learner, and drive to innovate with both technology and processes. They will be personable, open to learning, collaborating with others, and apt to saying "yes" or "I'll find a way", rather than "no" or "that's impossible"...
	Area Loss Prevention Manager Pittsburgh, PA - posted September 10 Our Area Loss Prevention Managers ensure safe and secure stores through the objective identification of loss and risk opportunities. Our Area Loss Prevention Managers plan and prioritize to provide an optimal customer experience to their portfolio of stores. They thrive on supporting and building high performance teams that execute with excellence...
	Customer Success Specialists Multiple Locations - posted October 9 The role of the Customer Success Specialist is to engage, empower, and excite our community. As a Customer Success Specialist, your primary responsibility is to ensure both retailers and law enforcement, who make up our community, have great experiences and achieve real crime reduction outcomes from using our platform. Apply Here
	Sales Representatives NuTech National - posted October 13 NuTech National, an established and rapidly growing 40+ year electronic security company is expanding our National Sales Team. Seeking motivated, driven and successful sales reps to expand our national retail and governmental vertical markets. Top pay, benefits and signing bonus available. Please apply to melissa@nutechnational.com

Featured Jobs

To apply to any of today's Featured Jobs, Click Here

View Featured Jobs   |   Post Your Job
 

We want to post your tips or advice... Click here

Not getting the Daily? Is it ending up in your spam folder?
Please make sure to add d-ddaily@downing-downing.com to your contact list, address book, trusted sender list, and/or company whitelist to ensure you receive our newsletter. 
Want to know how? Read Here

FEEDBACK    /    downing-downing.com    /    Advertise with The D&D Daily