The D&D Daily Mobile Edition
LP, AP & IT Security's #1 News Source

Dave Harben, CFI promoted to Director, Asset Protection (Western US) for Ascena Retail Group
Previously, Dave was the Enterprise Leader of Asset Protection for the retailer. During his over 8 years with Ascena Retail Group, Dave has held such roles as Senior Regional LP Manager and Regional LP Manager. He was also a Regional LP Manager for Charming Shoppes, LP Field Auditor and Market Investigator for Nike, AP Manager for Saks Fifth Avenue, AP Technician and Senior AP Specialist for Target, LP Investigator for Von Maur and LP Detective for Parisian. Dave earned his Bachelors Degree in Criminal Justice and Criminology from Ball State University. Congratulations Dave!

See All the Executives 'Moving Up' Here   

Submit Your New Corporate Hires/Promotions or New Position 
 

DINNER IS ON US!

Join NuTech NaTional for dinner during NRF PROTECT at McCormick and Schmick's Grill Anaheim on June 12. Space is limited.

You Must RSVP to: melissa@nutechnational.com or 407-709-3360.

Visit us at Booth #625

3rd Party Payment Processor Backdoor
Testing Companies Being Singled Out by 1 Hacker
7.7M LabCorp Records - Same Hack Hit Quest
LabCorp is the latest laboratory testing giant this week to confirm it’s affected by the same third-party data breach.

The Burlington, North Carolina-based medical giant said 7.7 million patients had their personal and financial data stolen by hackers, which hit the payment pages of the American Medical Collection Agency, a third-party vendor that processes payments for LabCorp and other companies.

The admission comes a day after Quest Diagnostics around 11.9 million patients had their data stolen.

The total number of patients affected by the AMCA payments page breach stands at just shy of 20 million. Given the company provides payment and bill collection services to a broad range of businesses, we may see similar notices dropping in the near future. techcrunch.com

Cybersecurity: One in three breaches are caused by unpatched vulnerabilities
Software vendors are constantly publishing new patches to fix problems in software that they have sold. It's then up to the users of the software to apply the patches -- or else risk leaving themselves open to attack via the backdoors that the vendors failed to spot when building the product in the first place.

But the sheer volume of patches, with many vendors publishing new fixes on a monthly basis, and the need to test those patches to ensure that they don't cause other unexpected problems, means that there's often a delay in getting systems secured. That leaves a gap that hackers can exploit.

One in three IT professionals (34%) in Europe admitted that their organization had been breached as a result of an unpatched vulnerability (higher than the average of 27%) according to a survey by security company Tripwire.

Finding the stuff that needs patching can be a challenge: 59% of respondents said they can detect new hardware and software on their network within hours, but it's a difficult manual effort for many, with 35% saying less than half of their assets are discovered automatically. zdnet.com

How Today's Cybercriminals Sneak into Your Inbox
Between Oct. 2018 and March 2019, researchers with the Cofense Phishing Defense Center analyzed 31,429 malicious emails. At 23,195, credential phishing attacks fueled the bulk of emailed cyberattacks, followed by malware delivery (4,835), BEC (2,681), and scams (718). Subtle tactics like changing file types, or using shortened URLs, are giving hackers a hand.

"We do continue to see them evolve with simple adjustments," says Cofense co-founder and CTO Aaron Higbee. Credential-phishing emails using fake log-in pages are tough to stop at the gateway because often associated infrastructure doesn't seem malicious. Some campaigns, to disguise malintent, send emails from genuine Office 365 tenants using already compromised credentials or legitimate accounts – and a fake login page hosted on Microsoft infrastructure is "nearly impossible" to distinguish. darkreading.com

Shoppers reluctant to swap passwords for biometrics, Paysafe
53% of UK shoppers are worried that the shift to biometrics to authenticate online payments will dramatically increase the amount of identity fraud, according to research by Paysafe.

The company surveyed 6,197 consumers from the US, UK, Canada, Germany, Austria and Bulgaria. 79% still favour passwords. 68% expressed concern about paying for goods or services without being asked for a password, and only 40% believe that biometrics are more secure than other authentication methods. retailtechinnovationhub.com

Over 90% of data transactions on IoT devices are unencrypted

2.8 Billion US Consumer Records Lost in 2018

Manitoba liquor thefts drop 23% since security measures introduced in March
55% reduction in shrinkage, 20% increase in theft-related arrests
Manitoba Liquor and Lotteries says its plan to combat rampant liquor store thefts is working. The Crown corp announced sweeping changes to the way it handles security in its stores in late March, a move MBLL president and CEO Peter Hak said Thursday has resulted in a 23% reduction in theft and robbery incidents.

“While these are still early results, we are cautiously optimistic they are trending in the right direction,” Hak said, adding that the increased security efforts have also produced a 20% uptick in theft-related arrests made and a 55% reduction in shrinkage, or costs to Liquor Marts because of bottle theft.

Liquor stores across the city saw more than a 300% increase in thefts — some 2,600 incidents — in 2018, a drastic increase from the roughly 650 the year prior. This drew criticism from both police and the Manitoba Government and General Employees’ Union. winnipegsun.com

LCBO robbery raises red flags about alcohol privatization: OPSEU
"This is a matter of life and death"
OPSEU President Warren (Smokey) Thomas is raising red flags about the privatization of alcohol after a security guard was injured during a robbery at a Thunder Bay LCBO this week.

"LCBO employees keep our communities safe," said Thomas. "They are professionals who take social responsibility seriously. If folks think alcohol thefts are bad now, just imagine the dangers when there's booze on the shelf at your corner store, but no security; just an untrained clerk behind the counter."

"It's why the government should focus its efforts and invest in properly-trained security. This guard was trying to do his duty, but no employee should be asked to put their health and safety – or even their life – on the line without the appropriate resources."

"This is a matter of life and death," said OPSEU First Vice-President/Treasurer Eduardo (Eddy) Almeida. "We need to invest in a steady and highly-trained workforce within the LCBO, not dump this security disaster off to the private sector, where employers often cut corners in order to cut costs. newswire.ca

Firms in Canada targeted with increasingly sophisticated phishing techniques
Canadians are three times more likely to download malware
Fraudsters have become creative in disguising email that contains dangerous links and attachments and Canadian firms may be falling for the scams more often than those in other countries.

A recent Proofpoint analysis found nearly 100 criminal cyber campaigns that targeted Canada between Jan. 1 and May 1 this year, in addition to thousands of other generic campaigns that reached Canada through the internet. One type of malware noted by Proofpoint was DanaBot, which has been used to send out Canada Post-themed lures.

The danger for people who get such emails is that they may download software that could grab passwords, or send more fraudulent spam messages to reach more victims, or lock out access to system files. David Masson, the Canada country manager for Darktrace — a cybersecurity firm — agrees that spoofing scams that hijack well-known brands are quite common internationally and Canada’s experience is similar.

But Masson said a Darktrace analysis last year found its Canadian clients were about three times as likely to download malware compared with clients in other countries.

Once fraudsters have figured out a key person’s password, they can wreak havoc on a company by impersonating a supervisor and instructing a staff member to redirect the payroll or other payments to a different account. financialpost.com

In Case You Missed It: Canada's Not Prosecuting
"Shoplifting and other petty-crime cases are being dropped by courts"
'Our justice system is crumbling both on a federal level and provincial level'

Across Canada, people accused of petty crimes like shoplifting, minor assault and fraud are walking free - because the justice system doesn't have time to deal with their cases, as it struggles to move more serious crimes through the courts.

"At some point, we have to make a decision: what crimes do you want us not to prosecute?" said Rick Woodburn, president of Canadian Association of Crown Counsel, whose organization represents 7,500 Crowns across the country.

"And as you can see, it starts falling off the bottom. And sooner or later, we're going to decriminalize, because we're not prosecuting certain types of offences." cbc.ca

Chief Operating Officer for Canadian Cyber Threat Exchange (CCTX) in Ottawa
The COO will report to the Executive Director and will have executive responsibility for the CCTX’s operations including operational performance, sales/marketing and finance, member services, development of products and services, and supplier management.

The Canadian Cyber Threat Exchange (CCTX) is Canada’s only cyber threat collaboration forum and source of cyber threat intelligence. It was created to build a secure Canada where all organizations, both private and public, collaborate to reduce cyber security risks. cctv.ca

Canada Store Openings & Expansions
● Ulta gears up to launch stores, e-commerce in Canada
● Fashion platform Poshmark launches in Canada
● Two new Glamour Secrets Beauty Bar locations coming to Ottawa region
● Winners set to open in Victoria's Bay Centre
● Jasper, Fort McMurray and Lac La Biche to get pot shops after licence moratorium ends
● JFurla Secures 1st Canadian Store Location as it Launches Retail Expansion
● JA Popular Toronto Based Menswear Store Has Finally Opened At Square One
● JRen's Pets comes to Halifax and Dartmouth
● JCloud Nine Pajamas opens first Calgary-area store

Walmart bets on click-and-collect in Canada

Canada's Indigo to refresh general merchandise retail

Unfashionable fakes: How to protect yourself from counterfeit goods online

Retailers Among Canada’s Most Trusted Brands: Study

View Canadian Connections Archives

Brands Prioritizing Digital Trust and Safety See Growth
More than half of consumers are concerned about falling victim to payment fraud, according to the results of a new survey looking at fraud trends across e-commerce published by Sift.

Of the 2,000 U.S. consumers who participated in the study, 56 percent confessed that they are most concerned about payment fraud, while only 17 percent feel that the brands they engage with are equipped to protect against fraud. Consumer trust does have an impact on e-commerce businesses, with survey analysis showing growth for those brands that prioritize trust and safety. These e-merchants are able to leverage new revenue opportunities while providing increased customer satisfaction, without risk, according to a May 22 press release. cardnotpresent.com

82% of Consumers Shop, Review Products Online Before Purchasing in Store, Says BRP Report

Amazon to open 10 pop-up shops on British high streets
Help small start-ups expand their business

Stripe offers chargeback protection service

Multi-State ID Gang Hit 80+ Times Causing $150,000 in Losses
Central Ohio Identity Theft Ring Leader Gets 60 Months Fed. Prison
Hitting Best Buy, Elder Beerman, Buckle, Menard’s, Meijer, Cabela’s, & More
McCauley provided false identification cards containing the victims’ information but actually bearing photographs of the co-defendants who were “shoppers.” The group would travel to various clothing and electronics retail stores in the Southern District of Ohio and elsewhere, including Indiana and Pennsylvania.

The group would review the victims’ credit history reports and personal information prior to arrival at the retail stores so the defendants could answer any qualifying questions that the stores used to screen credit applicants. The group opened new and used existing lines of credit on approximately 80 separate occasions causing $150,000 of loss from the retailers.

The other defendants charged in this case include Deangelo D. Simms, 26, of Reynoldsburg, Ohio; Shirley M. Dillen, 43, of Westerville, Ohio; Julie E. Ring, 38, of Columbus, Ohio and Robert S. Tingler, 32, of Columbus, Ohio. Tingler has been sentenced to 24 months in prison and was ordered to pay approximately $7,400 in restitution. Dillen has been sentenced to five years of probation and ordered to pay approximately $4,300 in restitution. Ring has been sentenced to three years of probation and ordered to pay nearly $2,000 in restitution. justice.gov

$19 million worth of iPhones stolen in massive identity theft scam
The long-running operation was allegedly carried out by a New York-based gang who was finally caught after seven years.

Over the past seven years, a New York City-based fraud ring allegedly stole more than $19 million worth of iPhones by posing as cellphone subscribers to get new devices at little or no cost. The six people authorities say ran the ring would then sell the stolen phones on the black market, getting away with the scam for years . Associates using fake IDs and counterfeit debit cards went to mobile phone stores and posed as the legitimate account holders, looking to upgrade to new phones on their existing accounts. They would spread payments out over many months, which would come as a surprise on the actual customer’s next bill. By then, the scammers—and the devices—were already long gone.

It’s likely that the scammers deliberately chose a payment plan for two reasons. First, because the down payment was small, it was likely to go through ok on the cloned card. Second, as the real customers wouldn’t suddenly have a large amount being debited, it would probably take them longer to spot the fraudulent transactions. The police report says that the gang traveled throughout the US to obtain the phones. Since in or around 2014, the NYPD and the FBI have been investigating a group of individuals – the “Fraud Ring” – who operated in, among other places, the Southern District of New York, including the Bronx, Manhattan, and Westchester County. From at least 2012 to the present, the Fraud Ring perpetrated a wide-ranging scheme to obtain valuable, new electronic devices, predominantly Apple iPhones.

During the course of the conspiracy, the Fraud Ring fraudulently obtained more than $19 million worth of devices. To facilitate the scheme, the Fraud Ring traveled to approximately 34 different states, but often brought or shipped the fraudulently obtained cellphones back to the Bronx, where they regularly sold them through fencing operations. qz.com

Wilmington, DE: 5 C-Stores shut down in ORC Fencing Operation; targeting CVS and Walgreens
The investigation into a string of shoplifting incidents at city-based pharmacies has led to a joint operation with L & I to disrupt criminal activity and impose sanctions on businesses for various violations, officials said on Tuesday. Over the course of several weeks, Wilmington Police detected a trend of shoplifting incidents from various Walgreens and CVS locations throughout the City. Through the course of their investigation, police learned that some individuals responsible for shoplifting incidents in Wilmington were in communication with staff from various small businesses and markets throughout the city, police said.

Officials said WPD received intelligence that some of these stores provide details about items of interest, ordinarily soap, body wash, and deodorant, to individuals who then steal those items from pharmacies and bring them to these small businesses in exchange for approximately $1 per item. Those items are then resold to customers of those small businesses at a higher price, officials added. On June 3, authorities visited each location, where police located stolen merchandise bearing Walgreens or CVS labels at each of the five locations, according to police. Those items were seized. L&I officials identified additional violations, including those related to electrical, plumbing, structural issues, lack of appropriate city licenses, health licenses, certificates, and other infractions. L & I immediately ordered the closure of all five businesses pending compliance. nbcphiladelphia.com

Myrtle Beach, SC: Five charged after Organized Retail Crime ring investigation in Horry County
Investigators with the Myrtle Beach Police Department along with the Horry County Police Department and the ATF Task Force began the investigation. Investigators secured a warrant for a home in the Conway section of Horry County. While executing the search warrant, many stolen items were recovered. Those items included: New merchandise valued at about $24,000, 9 rifles, 7 shotguns, Kawasaki side-by-side ATV, John Deere Zero-Turn Mower, Honda ATV, E-Z-Go Golf Cart and 7 trailers. wbtw.com

Winter Haven, FL: Police seek tips on shoplifting trio, hit Macy’s for over $1,000

Lower Nazareth, PA: Police seek Kohl’s shoplifter after $540 theft

Submit Your New Hires/Promotions
or New Position
See all the Industry Movement

Feature Your Job Here For 30 Days -
70% Aren't On the Boards
Post your job listing

Sponsor Today's Internet Jobs

Education is a broad term usually defined by an individual as a singular focus with an end result that oftentimes stagnates the brain and limits horizons. Reaching milestones is incredibly important, but keeping your curiosity and wonderment is the key to reaching beyond. No singular degree or certification will bring you the success – it merely opens the door to more learning and the realization that if you don't know something, you go find someone who does and learn it from them.

Just a Thought,
Gus

Post Your Tip or Advice!
(content subject to approval)

See More Events

Recruiting?
Get your job e-mailed to everyone... everyday
Post on our Featured Jobs Board!

Not getting the Daily?
Is it ending up in your spam folder?
Please make sure to add d-ddaily@downing-downing.com to your contact list, address book, trusted sender list, and/or company whitelist to ensure you receive our newsletter. 
Want to know how? Read Here

SUBSCRIBE

FEEDBACK

www.downing-downing.com

Advertise With The D&D Daily

36615 Vine Street, Suite 103
Willoughby, OH 44094
440.942.0671
copyright 2009-2019
all rights reserved globally