The D&D Daily Mobile Edition
LP, AP & IT Security's #1 News Source

Moving Up
 

In Case You Missed It

February's Moving Ups

23 New Senior LP's - 11 Appointments - 12 Promotions

ADT Cybersecurity named Jimmy Treuting SVP Sales and Marketing
BJ's Wholesale Club promoted Nicholas Spiak to Director Field Asset Protection
CKE Restaurants named Paul Jones Director of Asset Protection & Risk Management in Nashville, TN
The Fresh Market promoted Katelyn Dube to Sr. Asset Protection and Loss Prevention Manager
The Fresh Market promoted Matt Palmer to Sr. Asset Protection and Loss Manager
Genetec named Karen Valladares Business Development Manager, Signature Brands
Intellicheck Appointed Bryan Lewis President and Chief Executive Officer
Jet.com named Brodrick Williams Head of Fraud & Risk Strategy
Kroger Company named Troy Harding Director of Asset Protection
Lucky's Market named Chris De Tray, CFI Director of Asset Protection
Macy's promoted Brian Stromberg, CFI to Vice President COE (Center of Expertise) Asset Protection
Macy's promoted Tim Huff to Director of Organized Retail Crime
Macy's promoted Steve Boarman to Director of AP Operations & Administration
Macy's promoted David Rogers to Vice President COE (Center of Expertise) Asset Protection
Michaels named Jennifer Kajzer Vice President of Loss Prevention
Nike promoted Corey May, CFI to Director, World Headquarters Business Continuity
Nordstrom promoted Mike Triesch to National Loss Prevention Director
Sargent And Greenleaf Appoints Keith Deaton As COO
Sears Holdings named Phil Stegge Senior Director, APP Operations & Safety
Verizon Wireless promoted Misty Strawn to Senior Manager Corporate Security/Investigations
Village Super Markets, a Co-Op of ShopRite/Wakefern promoted Michael Rubino to Director of Loss Prevention
XPO Logistics, Inc named Michael Wahl Director Safety and Health North American Supply Chain
7-Eleven promoted Davina Stevens to Director, Asset Protection Analytics and Inventory

Submit Your New Corporate Hires/Promotions
or New Position 

News Brief
Sponsored by WG Security Products, Inc.
 

From Spotting Terrorists
to Preventing Shrink

StopLift Founder Shows How Artificial Intelligence
Helps Stop Shoplifters

CAMBRIDGE (CBS) - Theft is a huge problem for retailers, particularly in grocery stores where customers use self-checkout lanes. According to the Loss Prevention Foundation, stores that operate on a thin margin, have to sell dozens of items to make up for just one that was stolen.

In an effort to solve that problem, Malay Kundu tapped into his knowledge of visual technologies. "I used to develop facial recognition systems to look for terrorists in airports," he told WBZ-TV.

But instead of terrorists, Kundu is now looking for un-scanned items at grocery checkouts and other retail stores. His Cambridge Company is called StopLift and the owner of Vicente's grocery store in Brockton is a big fan.

"It has saved us a good amount of money," said Brian Vincente. Vicente's store has a loss prevention room filled with dozens of cameras watching every checkout aisle and the entire store. It would be impossible for the human eye to keep a close eye on all of them at once. That's where the computers come in.

"Our software is analyzing the video and it is also looking at what's actually being rung up on the checkout. It's comparing those and it can tell when you are trying to give yourself a deal," Kundu said.

The program can catch a number of different ways both self-checkout customers and cashiers cheat the system. Kundu pointed to video of a woman ringing up bags of potato chips using the produce lookout system, paying just the price of loose carrots, which is considerably cheaper than the chips.

According to Kundu, when stores spot an issue they will approach the customer and politely ask if they need help using the self-checkout system. StopLift is used at hundreds of checkouts in stores across Massachusetts and thousands around the world.

Read the full story by WBZ-TV (CBS Boston) here.

Financial Cyber Threat Sharing Group Phished
The Financial Services Information Sharing and Analysis Center (FS-ISAC), an industry forum for sharing data about critical cybersecurity threats facing the banking and finance industries, said today that a successful phishing attack on one of its employees was used to launch additional phishing attacks against FS-ISAC members.  krebsonsecurity.com

Threat Breakdown - 75% Insiders vs. 25% External
Mounting Evidence Suggests The Real Threats Are Insiders
Phishing Scams & Malware Attacks Up 40% in One Quarter Alone
New report from NTT Security suggests that as many as 75 percent of all cyber security threats may be internal in nature. Only 25 percent of threats are from what the researchers deem to be "hostile" sources. Yes, that's right, the "real" cyber threats for organizations today are insider threats, which can put organizations at risk without employees even realizing it.

However, according to the new report from NTT Security ("2017 Global Threat Intelligence Center Quarterly Threat Intelligence Report"), far more prevalent are accidental and negligent activities that unwittingly lead to security breaches, data loss and sensitive information being shared with the wrong people.

Most disturbingly, the scale of these attacks appears to be increasing over time. For example from Q2 2017 to Q3 2017, the number of insider threats increased by 24 percent. The greatest culprit were phishing scams and malware attacks, both of which saw a 40 percent increase from Q2 2017 to Q3 2017.

Three common insider threats and how to prevent them

Users that bypass controls for convenience or efficiency: Examples of this problem include employees who use cloud storage solutions for sensitive corporate data instead of official corporate data storage solutions. These examples can also include the sharing of user accounts. In both cases, employees think that they have discovered a clever "workaround" that makes their daily life easier. What's needed here is stronger network-level controls to ensure this behavior doesn't happen in the first place.

Users that bring their own devices and connect to the corporate network: In the BYOD era, employees are increasingly emboldened to connect each and every mobile device they use to the main corporate network.

Users that get phished: It's all too common that employees get an email from an authoritative-looking source, and assume it's OK to open. But employees need to be educated about these scams and how they work, and that usually involves realistic user training. In addition, organizations can contact their security vendors for anti-phishing solutions.

The good news is that organizations are getting smarter about information security and insider threats, including those related to the physical security of office environments. And knowledge that once resided only with the CSO or CISO is now being pushed out to the broader organization, thanks to advanced employee training programs. For example, Carnegie Mellon University now offers a Cert Insider Threat Program Manager Certificate. It also runs an Insider Threat blog that explains some of the current threats and trends in the workforce, based on research conducted at the National Insider Threat Center (NITC) that is part of the university's Software Engineering Institute. cpomagazine.com

Deception Technology: Worth the Investment?
Interest in deception technology is growing because it can play a valuable role in improving intrusion detection, says Anton Chuvakin, a research vice president at Gartner.

The technology is "a bit of a niche," Chuvakin says in an interview with Information Security Media Group. "It isn't something that's going to be adopted at the same scale as anti-virus and firewalls or even log analysis or SIEM. But it's a growing niche with a lot of very avid fans."

Some organizations see deception technology as an alternative to analyzing big data to identify threats. And it can play an important role in detecting intruders' lateral movements, he says.

"Deception gives us a very crisp signal ... with low noise ... for detecting lateral movement by an attacker, and that's where it shines," Chuvakin says.

In the interview (see audio link below photo), Chuvakin discusses:

● The role machine learning plays in deception technology;
● How deception technology can help in the fight against ransomware;
● What special skills are needed to roll out the most advanced applications of deception technology. careersinfosecurity.com

81 Percent of Retail Organizations Lack Comprehensive Management of SSH Keys
Back to Basics - SSH Key Security Controls - Rotation - Auditing - Lacking in Retail
Venafi, the leading provider of machine identity protection, today announced the results of a study of how retail organizations manage and implement Secure Shell (SSH). Over one hundred IT security professionals from the retail industry participated in the study, which reveals a widespread lack of SSH security controls.

According to Venafi’s research, even though SSH keys provide the highest levels of administrative access, they are routinely untracked, unmanaged and poorly secured. For example, eighty-one percent of respondents acknowledge they do not have a complete and accurate inventory of all SSH keys. If retailers do not know where and how they are managing their SSH keys, they cannot determine if any have been stolen, misused or should not be trusted.

“Retail companies rely on an assortment of connected machines that most other industries don’t use,” said Nick Hunter, senior digital trust researcher for Venafi. “These machines house lucrative financial information, which makes retailers, and their transactions, prime targets for cyber criminals. Simply put, retailers face unique and significant machine identity threats. To protect their customers and their critical business data, retailers need a strong SSH governance program that provides them with complete visibility of all their SSH keys.”

35% don't actively rotate keys, even when administrators leave their organizations

38% don't restrict number of SSH administrators

32% don't enforce "no porting forwarding" for SSH

35% - SSH entitlements not part of Privileged Access Management (PAM) policies & rarely audited businesswire.com

Strategic Asset Protection

ALTO is a comprehensive collaboration program that combines technology, marketing, intelligent prosecution, and concierge-level support services to bridge the gap between retail and law enforcement to create safer store environments and enhance business profitability. Over 7,000 store locations in 100 cities in Latin America, Europe and now the United States have signed on to ALTO’s service. Karl Langhorst, Executive Vice President for ALTO US, tells us about some of their early success here in the States.
 

How Does the NRF
LP Council Work?

As a former VP of LP for the NRF, Joe LaRocca shares with Amber Bradley some of the ins and outs of the NRF LP Council, the work they do, and the value they provide to the industry.
 

Solution Providers, have a video or commercial you want to publish? Contact us.

e-commerce
Sponsored by The Zellman Group

Cyber Fraud Spurs Creative Solutions to Safeguard Shoppers
To mitigate the risks for consumers and stores, creative solutions have been cropping up to secure payments and more.

Hypr uses blockchain as a decentralized way to safeguard authentication or customer logins, ensuring that no single organization acts a single target for hacking.

What is the common theme across all of these companies and all these security breaches?’ It’s centralization. All these enterprises are centralizing the storage of personal data like biometrics, pins, passwords, credit card numbers — and when you centralize that data, you create a really high-risk, juicy target for hackers.”

With blockchain, every member or participating organization in a network holds everyone’s data, but only the user has the key to unlock it.

Avetisov’s company just revealed a new partnership with Samsung Pass, the tech giant’s identity management arm. The deal brings biometric authentication — think eye-scanning features on phones — to employee logins for workstations.

Shopin also uses blockchain to create decentralized universal shopper and payment profiles. Its concept: If no single company owns the data, then an e-commerce giant can’t have the competitive edge over other retailers.

Token’s decentralized approach differs. The company safeguards payment info by creating fake alter egos for credit card numbers that can be used online or over the phone. But the tokens must be accepted and authenticated through the company itself, as well as the merchant services or credit card processor, and ultimately the main financial institution. In this way, no single company, not even Token itself, can unlock the payment data on their own.

The principle philosophy behind Token is “if you don’t want your data stolen, don’t share it to begin with,” said Zohar Steinberg, the company’s founder and chief executive officer. “It’s not just security — it’s also quality of life. Consumers don’t have to be concerned anymore.” wwd.com

E-commerce counterfeiters flourish despite CPB, ICE efforts
Limited Information Sharing & Lack of Data-Sharing Tools
In a test conducted by the U.S. Government Accountability Office (GAO), at least 20 of 47 products sold by third party sellers online were proven to be counterfeit, according to a review of the U.S. Customs and Border Protection (CBP) and Immigration and Customs Enforcement. The seizure of counterfeit goods increased 38% between 2012 and 2016.

Despite that disturbing statistic, the CBP has taken "limited steps" to protect intellectual property rights. According to the GAO's report, most of the counterfeit goods seized between 2012 and 2016 were shipped from China and Hong Kong, marking those two locations as high-risk for counterfeits.

Part of the problem is a lack of sharing information. "According to private sector representatives, restrictions on CBP's information sharing limit private sector enforcement efforts," and "CBP officials said they share information to the extent allowed under current regulations."

E-commerce has accelerated supply chains but also heightened the risk of counterfeits, and now the lack of reliable data-sharing tools to oversee supply chains are pinching manufacturers. supplychaindive.com

As Amazon Mulls HQ2, It's Hiring Big in Boston
The retailer is in talks to lease an 18-story building in the Boston Seaport giving it enough space for 2,000 or more employees. Ultimately, that could expand to a 1 million square-foot lease and 4,000 jobs by 2025. The deal is unrelated to the search for HQ2, say officials, but it does show a growing interest in the area by Amazon. News of the company's search for extra office space in Boston first surfaced in January.

Amazon is asking Boston for a $5 million property tax break for the lease and option to expand. In return, it says, the company will hire at least 2,000 employees within the Greater Boston area. fortune.com

Publisher NIS America online stores hacked & user information - credit card details stolen

129 Sellers Convicted for Selling Counterfeits on Alibaba
104 Given Suspended Penalties - China's Courts "Too Lenient"

ORC News

Montreal: Quebec couple charged with stealing about $2M worth of goods from Best Buy and other retailers
Police say a Quebec couple has been charged after allegedly stealing roughly $2 million worth of merchandise from large retail stores in six cities across the province. Police from Laval, Que., just north of Montreal, say they arrested Evens Riodin, 38, and Gabrielle De Morasse, 30, last Thursday.

The couple from Saint-Lin-Laurentides, about 50 kilometres north of Montreal, appeared in court Thursday and were charged with 11 counts of breaking and entering, one count of conspiracy and two counts of possession of property obtained by crime.

Police say the couple were allegedly involved in break-ins since 2016 at stores such as Best Buy, Bureau en gros and the SAQ, which is the name for Quebec’s government-owned liquor stores. Evelyne Boudreau, spokesperson for Laval police, says the couple allegedly entered the stores at night and stole items such as electronics, alcohol, perfumes and watches. She says some of the stolen objects were found in a Montreal warehouse. thestar.com

Pawn shops bought stolen goods, funded thieves' addictions in Bucks County; $700,000 in seized stolen merchandise
Pennsylvania Attorney General Josh Shapiro announced criminal charges against multiple people in a theft ring. Shapiro, joined by Falls Township Police officials, announced arrests in a large pawn shop theft ring that has allegedly been running out of Bucks County.

The owner of 2 Bucks County pawnshops and 4 of his employees have been arrested for their roles in a scheme to buy and re-sell nearly $700,000 worth of stolen merchandise from national chain stores. Officials are also charging 27 other “professional retail thieves” for stealing thousands of retail items which they say were continuously sold to a number of area pawn shops. The thieves operated from January 2014 until October 2017, officials said. fox29.com

Colonial Heights, VA: ORC Crew ran pet supply business by stealing inventory from PetSmart locations; nearly $100,000 of merchandise
The first heist happened in Colonial Heights, near Petersburg, according to court documents. From there, the seven-person crew went on to strike stores in North Chesterfield, Midlotian, Richmond and Mechanicsville before heading east towards Hampton Roads. By the end of the day, they'd hit at least nine businesses. Joseph Heim Jr., and Timothy B. Erb Jr, were indicted last week in connection with a shoplifting ring that targeted PetSmart locations across Virginia and North Carolina. It ended May 6, 2016, in Suffolk, where they were caught. In all, the conspiracy netted at least $38,000 worth of stolen pet supplies and possibly more than $100,000, according to court documents.

"This is very, very profitable," said Robert Moraca, a vice president with the National Retail Federation. He referred to it as "organized retail crime," and said it, along with shoplifting in general, is a growing problem. He said the industry now views it as more serious to their profits than internal theft, administrative errors and vendor fraud. Assistant U.S. Attorney Randy Stoker declined to comment on the indictment, which charges the men with conspiracy and interstate transport of stolen property. pilotonline.com

Knox County, TN: Two men arrested for buying $12,000 and 4 EBT cards
An undercover deputy sold the men more than $12,000 in beer, champagne, meat, seafood, dog food and EBT cards, which were then used to rack up more than $1,700 in charges, Tramel said. The deputy told the men the items were stolen, and the men told the deputy which items they wanted to buy, said KCSO spokeswoman Martha Dooley. Authorities seized the goods sold to the men by the undercover deputy, as well as one vehicle and $8,000 in cash, Tramel said. knoxnews.com

Chicago, IL: Northbrook woman pleads guilty to Organized Retail Thefts in Cook, Lake and DuPage
The third member of an organized retail theft ring that targeted stores across the suburbs pleaded guilty to retail theft. In exchange for her guilty plea, Natsasa Petrov, 37, was sentenced to 60 days in jail and 24 months of probation Monday. She was also ordered to pay $759 in fines. Authorities say the four-person ring targeted department and specialty stores in Arlington Heights, Bloomingdale, Downers Grove, Gurnee, Schaumburg, Vernon Hills and other suburbs. According to Arlington Heights police, who led a joint investigation into the thefts, some defendants distracted loss prevention officers and employees while others took Apple, Samsung and Lego products from a variety of stores, including Bed Bath & Beyond, Hobby Lobby, Home Depot and Toys R Us. The four, who authorities say lived in Northbrook, subsequently sold the items on an online auction site, police said. Dragan Moro Owens, 39, pleaded guilty in November 2017 to retail theft in exchange for a 4.5 year sentence. Zvanko Dobobrov, 24, pleaded guilty in 2016 in exchange for two years probation. Charges are still pending against Kochak Owens, 31. He next appears in court on April 2. dailyherald.com

Racine County, WI: Man facing charges for multiple theft in 1 hour at CVS and Walgreens; over $1,000 of merchandise stolen
A Milwaukee man is now facing several charges after police say he stole from several different pharmacies in Racine County. Police say that Joseph Cotton was arrested in connection with thefts made at CVS and Walgreens on October 22, 2017. Walgreens reported thefts from 2 store locations in Mount Pleasant. On the same day, police were also called to the CVS store in Racine for a report of a theft who stole multiple packages of allergy relief medication and Breathe Right Nasal Strips. cbs58.com

Forsyth, IL: Two people wanted for a $400 Felony Theft from Menards
The Macon County Sheriff’s Office says the manhunt involves the two people seen in the surveillance photo. They say Menards workers discovered a $400 air nailer was missing from their shelves. They notified deputies, who say security video showed the man in the photo stealing the nailer. Deputies say it happened on Feb. 24. wandtv.com

St. George, UT: Pawn shop loses $7,000 in Credit Card Fraud scheme; 2 Indiana men arrested

Arlington, TX: Arlington Police attempting to ID suspect in $1,000 the from Ulta in The Arlington Highlands last week

Retail Crime News

Shootings & Deaths

Orlando, FL: Police ID armed man fatally shot by cops near downtown Wahlburgers
Police fatally shot an armed man who came into a downtown Orlando Wahlburgers restaurant Wednesday morning, the Orlando Police Department said. Officers identified him as Qawi A. Muhammad, 48. A person in the Wahlburgers had a domestic violence injunction against him, Orlando Police Deputy Chief Eric Smith said. Muhammad came into Wahlburgers on Orange Ave. just after the restaurant opened at 11 a.m.. Witnesses said the man showed he had a handgun at the restaurant, but did not reveal any other details about his interaction with employees at the store. Patrons called 911, and employees called police as they followed Muhammad out of the restaurant. Several officers surrounded him at Hughey Avenue and told him to drop his weapon. He did not, and officers fired at him. orlandosentinel.com

Greenwood, SC: 17-year-old dead after shooting at convenience store

Home of the Industry's Original
On the Move
 

Submit Your New Hires/Promotions
or New Position
See all the Industry Movement

Featured Job Listings
Sponsored by NuTech National
Feature Your Job Here For 30 Days -
70% Aren't On the Boards

Daily Jobs
Appearing One Day Only
View our Internet Jobs Archives here

• AP Specialist - ascena Retail Group, Inc. - Pataskala, OH

• LP Supervisor - Burlington Stores - Cleveland, OH

• AP Manager - Hudson's Bay - Saskatoon, SK, Canada

• LP Supervisor - Kohl's - Lincoln, NE

• AP Manager - Kmart - Freedom, CA

• AP Manager - Kmart - Williamsport, PA

• LP & Safety Manager -  Lowe's - Huntsville, AL

• Assistant Manager AP/LP - Macy's - Torrance, CA

• LP Specialist - Publix - Tampa, FL

• Senior Retail AP Specialist - REI - Denver, CO

• AP Manager - Sears - West Jordan, UT

• Multi Unit AP Manager - Sears - Altamonte Springs, FL

• AP Manager - Sears - Savannah, GA

• Corporate LP Manager - Sears Hometown & Outlet - Hoffman Estates, IL

• Security Strategy & Planning Program Manager - Legal & AP - Starbucks - Seattle, WA

Your Career
 

Tip of the Day
Sponsored by Vector Security Networks
 

Interacting in large networking groups can be very challenging even for the most seasoned of executives. The speed, the number of people, and the amount of information shared can be overwhelming. However, the one basic principle you can rely on is keep it simple, one person at a time and focus on that person both mentally and visually. Slow it down in your head and make sure you communicate clearly and sincerely regardless of the background you have with anyone or any group. Because at the end of the day, you're all part of the same industry, the same community, and everyone has the same objective; to help develop and represent the industry as professionals.

Just a Thought,
Gus

Post Your Tip or Advice!
(content subject to approval)

Upcoming Events

SAVE THE DATE Jeweler's Security Alliance 40th Annual Security Seminar & Expo Mar. 13-15, 2018 ISC West April 10-13 IOBSE Spring Conference Registration Now Open! April 24-26 Miami-Dade Police Departments Global Cargo Theft Symposium May 1-4 RLPSA Connect May 3 CNP Expo May 15-16 NRF Protect 2018 June 11-13 SAVE THE DATE Q2 RAM LP Committee Meeting June 13 RLPSA Annual Conference Aug. 5-8 New England LP Expo Sept. 13 SAVE THE DATE Q3 RAM LP Committee Meeting Sept. 14 - DCU Center Worcester, MA LPRC Impact 2018 Oct. 1-3 CORCA Conference Oct. 3-4 SAVE THE DATE Q4 RAM LP Committee Meeting Nov. 7th BJ's Wholesale Inc Corp. Office - Westboro, MA

See More Events

Recruiting?
Get your job e-mailed to everyone... everyday
Post on our Featured Jobs Board!

Reach your target audience in 2018 every day!
Request our 2018 Media Kit

Not getting the Daily?
Is it ending up in your spam folder?
Please make sure to add d-ddaily@downing-downing.com to your contact list, address book, trusted sender list, and/or company whitelist to ensure you receive our newsletter. 
Want to know how? Read Here

SUBSCRIBE
update account	change e-mail
unsubscribe	FEEDBACK
www.downing-downing.com
Advertise With The D&D Daily

36615 Vine Street, Suite 103
Willoughby, OH 44094
440.942.0671
copyright 2009-2019
all rights reserved globally