D&D Daily Mobile Edition

The D&D Daily Mobile Edition
LP, AP & Cybersecurity's #1 News Source

12/14/23

D-Ddaily.net

Solink® Brings Forward Vision to Redefine the Future of Video Surveillance with Generative AI

Solink’s Sidekick AI™ to unlock the value of generative AI for video surveillance

FOR IMMEDIATE RELEASE OTTAWA, ON, December 14, 2023 – Solink®, a leading physical security company for businesses, today brings forward its vision to redefine the future of video surveillance through generative artificial intelligence (GenAI). At a time of rapid global innovation, Solink is at the forefront, helping customers unlock the potential to provide powerful insights, and drive efficiencies with GenAI technology. AI has the power to transform the physical security industry by allowing users to get real-time insights within their camera network – it’s like having a dedicated team watching every camera all the time. The economy of scale of AI will allow businesses to create custom use-cases without the need for programmers or proprietary cameras.

Read more in the Vendor Spotlight column below

Retailers share how they use face matching AI for workplace violence prevention, store safety

FaceFirst helps you comply with new workplace violence laws and provide safer stores

California recently joined a growing number of states requiring employer workplace violence programs. At FaceFirst, that's our focus every day! Whether you're facing violent ex-employees, violent ex-spouses, or violent day-to-day thieves, our face matching software provides active threat management. We send immediate alerts when known threats enter. Our real-time notifications help you provide safer stores for your employees and customers.

Senior retail LP experts shared their real-world store safety experiences from the 2023 APEX stage in Nashville. Here are two examples from one session:

"We've partnered with FaceFirst for five years. They've really helped us enhance the efficiency of our store management and asset protection teams. With real-time alerting, we know who's walking into our stores within three to five seconds. It gives us situational awareness for threats of violence, for those individuals we don't want our people to approach. It helps reduce law enforcement's response time to our stores, too. It's been absolutely great for us."

"When we went to the organization about the need for this [face matching] technology, our first priority was life safety. The majority of C-suite discussions today are: How do we keep our stores, our customers, and our associates safe? I don't know of a better tool that helps us be more proactive and mitigate threats in our stores. This technology has advanced so much, and you're going to see it grow exponentially. If you're interested in this tool, I would tell your organization: You're going to be way behind the curve without it."

Another APEX session focused specifically on workplace violence. FaceFirst can help you comply with laws that require companies to implement workplace violence programs. California's new law takes effect July 1, 2024. At least nine states now require employers to provide workplace violence programs.

The human tragedies of workplace violence are incalculable, but there are other costs to consider. After a former employee killed seven people in January 2023, California fined the two employers involved for failing to have a workplace violence notification system in place. They also cited one of the two employers for failing to address previous workplace violence incidents.

FaceFirst has seen significant market adoption driven by in-store violence and theft. Our face matching technology delivers vital life safety, loss prevention, and investigative benefits.

Calculate the risks of being caught unaware when a known offender enters your store. If you knew there was a proven solution to keep your valued employees and customers safer from violent offenders, would you implement it? The real risk is answering no.

FaceFirst's solution is fast and accurate-take action today at facefirst.com.

Workplace Violence Continues to Impact the Retail Industry
Gruesome crime at Loring Park grocery shocks and saddens a neighborhood

Robert Skafte was a friendly face at the Oak Grove Grocery for decades and performed on stages all across the Twin Cities. A suspect is jailed.

The brutal killing of a grocery store cashier and Loring Park neighborhood fixturehad friends and neighbors mourning the victim Saturday, while the suspect with a history of mental illness who allegedly impaled him with a golf club is now jailed after a police standoff.

Officers responded just before 1 p.m. on Friday to reports of a stabbing inside the store at 218 Oak Grove St. They found a man behind the counter with a golf club through his torso, Minneapolis Police Chief Brian O'Hara said at a Friday night press briefing.

First responders provided aid until the cashier was transported to HCMC, where he later died. Early investigation found that the 44-year-old suspect had gathered some items in the store and went up to the counter before attacking the victim, O'Hara said.

Other than a drunken-driving arrest, records show no criminal history for the suspect in Minnesota. He was ordered civilly committed for mental illness in Anoka County in January 2021, with a provisional discharge the following March. Court records show that at the time of the killing, he lived in a unit at the Minneapolis address and was issued an eviction summons in November after his lease was not renewed. On Nov. 30 he failed to appear at a housing court hearing and was ordered evicted.

Torres, the next-door neighbor, said she saw the suspect in the store in previous instances, alleging that he would complain about different things to workers, such as not being able to use EBT credits there. startribune.com

The U.S. Crime Surge
The Retail Impact

Congressional ORC Hearing Makes More Headlines

Lawmakers Call for Clear Data to Help Fight America's Theft Surge
Member of Congress calls for better data on organized retail crime & other theft

In testimony endorsing a bill that would have the Department of Homeland Security tackle organized retail crime, the National Retail Federation left out its previous statistics on its impact.

David Johnston, NRF vice president of asset protection and retail operations, appeared before the House Homeland Security Committee’s Subcommittee on Counterterrorism, Law Enforcement and Intelligence to endorse the “Combating Organized Retail Crime Act,” which has been introduced in both the House and the Senate. Among the bill’s provisions are expansion of the federal enforcement of criminal offenses related to organized retail crime and of the scope of conduct that qualifies as an offenses; latitude for prosecutors under federal money laundering statutes; and the establishment of an Organized Retail Crime Coordination Center “within the Department of Homeland Security to coordinate the federal law enforcement activities related to organized retail crime.”

Johnston’s oral testimony and the group’s written statement to the committee didn’t include statistics specific to organized retail crime or other kinds of theft. The lack of certainty, which includes confused terminology as well as numbers, may be a sticking point for lawmakers.

“We’ve got to figure out some solutions there, but, you know, smash and grab, organized crime, retail theft — it’s hard to figure out which is which,” Lou Correa (D-California) said during the hearing. “But if you don’t know which is which, then it’s even harder to come up with a good solution. And I look forward to working with all of you and trying to figure this out. Get some real data, so that, based on that data, folks up here can come up with good public policy with the administration and come up with real solutions in real time.”

Johnston described organized retail theft as a serious and growing problem. “Employees, consumers communities, we are all victims of organized retail crime,” he said. “Our retailers have reported, as I eluded in my oral testimony, many of them have seen increases of 100% or more over last year ... Those were all time highs to begin with last year. Injuries, deaths, so employees are fearful. No employee should wish to go to work in fear for their job. No employee should have to quit or leave a job for fear.” retaildive.com

Cooperation, Communication, and Collaboration Key to Fighting ORC
Rising ORC: Congressional hearing highlights need for national action
The House Homeland Security Committee's Subcommittee on Counterterrorism, Law Enforcement, and Intelligence held a hearing Tuesday entitled, “From Festive Cheer to Retail Fear: Addressing Organized Retail Crime.” The hearing lasted for more than two hours and included seven witnesses.

“You think having a billionaire like George Soros spending $40 million of his own money, supporting leftist prosecutors, and DAs who are soft on crime might have something to do with it?” Rep. Eli Crane, R-Ariz., questioned three of the witnesses. "Any trends there?"

The three law enforcement witnesses and Democratic lawmakers did not agree with the Republicans' assessment that the issue of ORC is because of Democrat policies on crime and the border.

There was shared disappointment when it came to the safety concerns these criminals pose. The witnesses shared some store workers have even lost their lives.

A bipartisan group of lawmakers and retail industry leaders are pushing for the passage of the Combatting Organized Retail Crime Act. The proposed legislation would establish coordination between several agencies to stop the wide-scale theft.

A recurring theme throughout the hearing was the need for more cooperation, communication, and collaboration between law enforcement agencies. wpde.com

NRF's Wrap-Up of Congressional ORC Hearing
ICYMI: NRF Expert Testifies Before House Hearing on Retail Crime
WASHINGTON, December 13, 2023 – Yesterday, the House Homeland Security Committee Counterterrorism, Law Enforcement, and Intelligence Subcommittee held a hearing titled “From Festive Cheer to Retail Fear: Addressing Organized Retail Crime.”

NRF Vice President of Asset Protection and Retail Operations David Johnston testified on behalf of the retail industry. A copy of his written statement for the record can be viewed here and a recording of the full hearing is available here.

On ORC's Alarming Growth: “Despite some recent press articles that look to downplay ORC or argue about data, it is abundantly clear from retailers’ experience with ORC that the criminal activities we witness in stores across the nation and the incidents of violence tied to them are on the rise.”

On the Widespread Impact of ORC: “Retail theft is not a victimless crime. It impacts jobs, consumers and communities in several ways. Increased violence involving theft has caused injury to employees and consumers, the unfortunate death of some retail associates, and a fear of working or shopping in high-crime locations. This makes it difficult for retailers to retain or find labor to support consumers.”

On the Need for Federal Support: “We need government at every level to take actions that curtail the ability and opportunity for these criminal organizations to profit from stolen merchandise, and to send the signal that this type of criminal activity will no longer be tolerated.”

As the leading authority and voice for the retail industry, NRF has long advocated for policy solutions, including the Combating Organized Retail Crime Act, to stifle the threat of retail crime in stores large and small across the country. homeland.house.gov

Shoplifting Losses Outweigh Any Savings from Self-Checkout Machines
With Theft on the Rise, Dollar General, Walmart, and Other Retailers Ditch Self-Checkout Machines

Retailers hoped to cut employee wages with self-checkout machines. It turns out they can't catch shoplifters.

Small retail businesses owners looking to cut costs should learn from the mistakes of their large corporate competitors, many of which are walking back their investments in self-checkout technology. Walmart, Target, and most recently Dollar General are all rethinking their DIY checkout systems, as losses from increased shoplifting have come to outweigh savings from reduced employee headcount.

Dollar General CEO Todd Vasos told investors during the company's third quarter earnings call last week that it plans to boost its employee wage budget over the next year in order to expand human supervision around self-checkout areas. A main reason for the move, Vasos said, was the rising rate of "shrink"--an industry term for shoplifting--that's eaten into Dollar General's bottom line.

So how do you combat the spreading sticky-hands epidemic if new technology appears to facilitate that very theft? For Dollar General, the effort starts with redeploying staff to keep an eye on the thousands of self-checkout units it's introduced across its 19,000 stores, in part to cut labor costs. In that way, company leadership hopes that having people watching the machines will keep customers honest.

Lowes CEO Marvin Ellison, however, thinks there's an easier and better solution. Ellison believes the secret to the home improvement chain's success in limiting 2022 losses from theft to just one percent of total sales lies in having maintained--and even increased--staff levels in stores in the first place, but not just at checkout.

Investing further in floor associates training and salaries, he adds, not only results in better service for customers, but also inspires employees to be eagle-eyed in their shared defense of Lowes' interest. Meaning, even in the battle against shrink, you only get what you pay for. inc.com

Ranking the Most Dangerous & Safest States
Safest and Most Dangerous States in the U.S.: Annual Ranking Updated

WalletHub ranks the safest and most dangerous states using 52 key indicators, including personal, residential, financial, roads and more.

Vermont is the safest state in the U.S., while Louisiana ranks as the most dangerous, according to the 2023 Safest States in America report by personal finance website WalletHub.

The annual rankings look at 52 key metrics grouped into five major categories: personal and residential safety; financial safety; road safety; workplace safety; and emergency preparedness.

New Hampshire, Utah and Massachusetts round out this year’s top five safest states. This is the third consecutive year Vermont has taken top honors in WalletHub’s Safest States rankings.

Connecticut ranked highest in personal and residential safety on this year’s list, while Utah topped the rankings in financial safety, New Hampshire topped the list for road safety, Vermont led the way in workplace safety and Alaska earned top honors for its emergency preparedness.

This Year’s Most Dangerous States

Louisiana ranked 50th on this year’s list at 32.99 overall, about two points lower than Mississippi (34.86). Arkansas, Texas and Florida are the other three states at the bottom of this year’s list.

It’s the third straight year Louisiana has ranked at the bottom of this list. Alabama escaped the indignity of being in this year’s bottom five, dropping Florida into the group. The other four states at the bottom of the list remained unchanged from 2022. securitysales.com

Deadly surge: Looking for solutions to the cycle of violence
From 2016 to 2021, 1,550 people in Memphis lost their lives due to homicide, and another 362 have died through Dec. 1 of this year. Between 2016 and 2019, juvenile homicides hovered between 15 and 19 a year. In 2020, the number jumped to 40 juvenile homicides — more than double any of the four years prior. That number dropped in 2021 to 33. dailymemphian.com

The Progressive View: Theft is not driving chain stores out of San Francisco

Strong Security Measures Key to Retail Success
Peace of Mind in the Retail Sector: Facility Security

Implementing strong facility security measures, for both products and personnel, is essential to the longevity and success of any business

Product: Organizations have to protect their assets, both tangible and intangible, to produce revenue. From expensive equipment to intellectual property, these valuable assets are the bread and butter of any organization.

Employees: Assets may be the items that bring in revenue, but employees are the wheels of the organization. Without employees, of course, there would be no one to ensure that products are being handled correctly and orders are being carefully fulfilled. Providing a safe environment for employees is foundational to successful business by allowing employees to focus on the tasks at hand, rather than on unnecessary concerns about personal safety.

Community: It is important that there is a synergy between the organization and its neighbors. Installing proper security measures throughout the facility, and therefore reducing the business as a target for criminal activity, increases trust and improves the reputation of the business.

Liability: Implementing proactive facility security can protect an organization against legal consequences and financial burdens.

Compliance: Failure to adhere to these standards can result in legal actions, fines, and reputational damage. Businesses that follow proper security regulations demonstrate their integrity and their commitment to full compliance.

Threats: Security threats are dynamic, and businesses must be proactive in their response. This requires being in a network that keeps you in the loop with new and evolving information about threats and their corresponding security solutions. Being prepared with foundational, state-of-the-art facility security allows businesses to face unexpected challenges with confidence. sapphirerisk.com

The Hayes Report on Loss Prevention
Quarterly - Winter 2023-2024 - Vol. 39 No. 1

Topics: 2023 NRSS - Trends in Shoplifting Statistics - The LP Basics = Increased Profits - Testing For Success - The Bulletin Board

Mark Doyle Talks --- Let’s Make 2024 a Great Year

Goodbye 2023, Hello 2024! For many retailers 2023 was a difficult year with a stagnant economy, increased inflation which slowed consumer buying, and increases in organized retail theft, where many of these incidents were displayed in the media. When I look to 2024, I think preparation will be one of the keys to shrinkage improvement. Hopefully you have already begun your YE shrink program review and have started to make adjustments or corrections for 2024. Upon receiving and analyzing your 2023 YE shrink results, final program adjustments should be made, Target/Focus locations selected, and programs promptly rolled out (within 3-4 weeks of receiving YE shrink results). Let’s make 2024 an awesome year, and don’t forget to follow us on the web, LinkedIn, Facebook and X!

Click here to read the full newsletter

Keeping Stores Open Helps Online Sales Too
New ICSC Study Quantifies How Physical Stores Drive Online Sales

Brick-and-mortar store openings increase online sales by nearly 7 percent; closures drive 11.5 percent drop

NEW YORK, December 12, 2023: Today, ICSC released its latest report, The Halo Effect III: Where the Halo Shines, quantifying the impact of opening or closing physical stores on online sales and retailers’ overall performance. The study – the third installment in ICSC’s industry-leading research on the halo effect of brick-and-mortar retail on online sales – proves again the power of physical retail by demonstrating that a new store boosts online sales, while a closed store impedes them.

The extensive research, spanning in-store and online sales of 69 retailers and 2,103 individual stores, reveals that opening a store boosts online sales in the trade area surrounding that store by an average of 6.9 percent in the immediate weeks following the store’s opening. For emerging, direct-to-consumer (DTC) brands, the benefits are even higher - the correlating halo effect for online sales is 13.9 percent when opening a new store. Conversely, closing stores has an even greater negative impact on retailer performance, resulting in an 11.5 percent drop in sales.

Across nearly all categories, online sales increased following the opening of a store and decreased when a store closed.

Conversely, when closing a location, home stores and department stores took the biggest hit to their online sales, declining by 32.2 percent and 26.1 percent, respectively – emphasizing the importance of a space where consumers can test, browse, and shop for products in those categories especially.

To view The Halo Effect III report, click here. The first report in ICSC’s series can be viewed here, and the second report here. icsc.com

Average U.S. Store Size Smallest in 17 years
The American Store Is Shrinking

Evolving shopping habits, rise in e-commerce soften demand for department stores, other big-box space

The average store size in the U.S. is the smallest it’s been in at least 17 years, reflecting profound changes in the way Americans now shop. The rise in e-commerce and a growing distaste for giant emporiums are softening demand for department stores and other big-box space.

The end result: Retailers signed leases averaging 3,200 square feet during the first three quarters of 2023, the smallest size since data firm CoStar Group began tracking this metric in 2006.

“A shopping center today looks very different than it did 10 years ago,” said Brandon Svec, CoStar’s national director of U.S. retail analytics. “The focus is much more on experience, much more on food and beverage.”

Despite these changes in retail’s landscape, overall demand for store space is robust. Nationwide, the rate of available retail space was 4.8% in the third quarter, the lowest level in the 18 years the data has been tracked by real-estate-services firm CBRE.

Rather than filling sprawling department stores with an array of merchandise, many retailers have started using data from online orders, social-media and foot-traffic analytics to customize smaller inventories to the local population. They have also bolstered store infrastructure to make it easier for customers to pick up and return items bought online.

This allows them to keep fewer items in stores and shrink their footprints to fit into the open-air shopping centers where customers are increasingly shopping. wsj.com

'Self-Screening Terrorist Stations'
US tries travelers as airport security; DIY indifference
The good news: The U.S. government has a plan for replacing some airport security staff with self-screening terrorist stations.

The bad news: Travelers in the near future could be shucking their shoes, belts and keys while speed-walking through a see-through security tunnel.

Twenty-three years after convincing travelers in the U.S. their lives depended on partially undressing for strangers in public facilities, the Department of Homeland Security wants to see if people will do the same thing on their own.

The innovation is available to members of the biometric-based PreCheck program. Comparing the idea to ordering hamburgers at kiosks, DHS says a pilot for the Screening at Speed Program will be tried at Las Vegas’ Reid International Airport next month.

It’s not a biometric system. Just automated radiation exams either in tunnels or booths. biometricupdate.com

The Big Wins by Unions in 2023

A sector-by-sector look at this year’s work stoppages and what some labor groups have gained

Union workers across America flexed their collective muscle this year, using strikes, strategic walkouts and picket lines large and small to elicit concessions from their employers.

This year proved to be one of the busiest for strikes in recent years. In October, for example, there were 4.5 million days of idleness because of work stoppages nationwide, the most of any month in four decades, according to preliminary data from the U.S. Bureau of Labor Statistics.

The end of the United Auto Workers’ strike helped November’s jobs report, with roughly 30,000 jobs added back to payrolls. The unemployment rate edged lower to 3.7%, near historic lows. wsj.com

eBay rolls out in-person consignment concierge
eBay is offering its online consignment selling experience in the physical world – via bus.

Report offers a new narrative of how Starbucks landed in union trouble

5 retailers that need a strong finish for the year

Quarterly Results

Lululemon Q3 comp's up 13%, comp stores up 9%, DTC up 18%, net sales up 19%

Inditex (Zara) Q3 sales up 11.1%

Senior LP & AP Jobs Market

Executive Director, Asset Protection job posted for CVS Health in Washington, DC
As the Executive Director, Asset Protection Field Operations, you are an experienced proven leader with a deep operational knowledge of all retail store functions that could adversely impact profitability in our most complex and challenging markets. Through extensive field experience, you have an acute awareness of the drivers of shrink, how those change based on different store types, and most importantly how to mitigate them most effectively. You will help create the broader strategy and tactics but will ultimately own the flawless execution of those strategies and the expected financial outcomes. jobs.cvshealth.com

All the News - One Place - One Source - One Time

Thanks to our sponsors/partners - Take the time to thank them as well please. If it wasn't for them The Daily wouldn't be here every day for you.

Solink® Brings Forward Vision to Redefine the Future of Video Surveillance with Generative AI

Solink’s Sidekick AI™ to unlock the value of generative AI for video surveillance

FOR IMMEDIATE RELEASE OTTAWA, ON, December 14, 2023 – Solink®, a leading physical security company for businesses, today brings forward its vision to redefine the future of video surveillance through generative artificial intelligence (GenAI). At a time of rapid global innovation, Solink is at the forefront, helping customers unlock the potential to provide powerful insights, and drive efficiencies with GenAI technology. AI has the power to transform the physical security industry by allowing users to get real-time insights within their camera network – it’s like having a dedicated team watching every camera all the time. The economy of scale of AI will allow businesses to create custom use-cases without the need for programmers or proprietary cameras.

These are the 3 pillars Solink will leverage to lead this transformation for customers:

Removing day zero configuration and tuning
Historically, computer vision applications required extensive initial configuration to achieve precision. Each camera would require a level of expertise for a human to identify an area, an object or a condition to be met. Moreover, each camera would also require ongoing tuning over time. This made traditional video analytics challenging and costly to scale en-mass. GenAI revolutionizes this approach, eliminating the need for human configuration. The model can understand the scene and adapt the way a human does without machine-based constraints like trip-wires, regions of interest, etc.
Context matters
Video is a single silo of information. Enriching video with other sources of data such as third-party integrations, meta-data, and relative camera positioning, will provide meaningful context for Large Language Models (LLMs) to make more informed decisions.
Continuous training
The best learning models will drive the highest value and improve the scale at which people depend on them. Models are trained and labeled by humans. Historically, that process has been tedious and costly. Solink’s goal is to create models that are self-training, that will learn over time, and improve accuracy through both supervised and unsupervised methods.

GenAI integrated in Solink products

“Solink intends to weave generative AI technology into our platform. Customers have told us that they want to experiment without constraints. We are building a foundation to provide customers the ability to experiment through the video and integrated data already in Solink; we are aptly naming this Solink Sidekick AI™,” said Mike Matta, president and CEO, Solink.

The AI-assisted capability with Solink Sidekick AI will enable customers to ask complex questions in conversational language about their footprint and quickly receive synthesized answers saving hours of work.

This will empower users to interact with their locations in real-time through the lens of their surveillance cameras. From broad inquiries like ‘How is my business currently operating?’ to specific questions such as ‘Are my shelves adequately stocked’ or ‘Which restaurant has the busiest drive-thru?’ – Solink Sidekick AI delivers instant, actionable insights in seconds. Customers will be able to identify key risks, resolve questions, analyze video feeds, and generate powerful insights in plain language.

Solink Sidekick AI is available through an opt-in private beta. Find more information here.

Matta adds, “With GenAI, Solink is not just another Video Management System (VMS) but a partner in your business’s growth and security. With Solink Sidekick AI, there’s no longer a standard use case – customers can ask any question. The possibilities are as diverse and dynamic as the businesses we serve. Continuing to support our customers on this journey will enable them to harness this new technology as we build on the opportunities ahead.”

Mixed Response to New SEC Cyber Disclosure Rules
SEC Cyber Rules Loom Over Public Companies

Listed companies must publicly report material cyberattacks starting Monday

Security chiefs and corporate lawyers are wrestling with how much information to report about cyberattacks under new disclosure rules, worried that saying too much might invite lawsuits and more hacks.

Starting Friday, the Securities and Exchange Commission will oblige companies to disclose how they manage cyber risk in annual reports, known as 10-Ks. Companies will be expected to detail how they assess threats and protections, and to what degree their boards exercise oversight on cyber issues. Annual filings must also describe the potential material effects of a successful attack.

When hackers strike, companies must report the cyberattack to the SEC no later than four business days after they determine the incident will have a material impact on operations, using an 8-K form. That obligation comes into force on Monday.

Companies have complained about the four-day reporting window and the difficulty of determining what constitutes materiality, but some security chiefs say that larger companies should already be doing most of what is required in the rules, at least for annual reporting.

Some cyber professionals say the obligations will inject much needed transparency for investors into cybersecurity matters, while others worry that the four-day deadline for material incidents is too short to adequately disclose information on attacks. wsj.com

Threat Actors Abusing Org's Weak Authentication Practices
Attackers Target Microsoft Accounts to Weaponize OAuth Apps

After compromising Azure and Outlook user accounts, threat actors are creating malicious apps with high privileges to conduct cryptomining, phishing, and password spraying.

Threat actors are abusing organizations' weak authentication practices to create and exploit OAuth applications, often for financial gain, in a string of attacks that include various vectors, including cryptomining, phishing, and password spraying.

OAuth is an open authentication standard increasingly being adopted for cross-platform access; users would recognize it at play when logging into a website with a prompt to click on a link to log in with another social media account, such as "Log in with Facebook" or "Log in with Google." OAuth enables applications to get access to data and resources to other online services and sites based on permissions set by a user, and it is the mechanism responsible for the authentication handoff between the sites.

Microsoft Threat Intelligence has observed a series of attacks that compromise user accounts for Microsoft services to create, modify, and grant high privileges to OAuth applications in a way that allows them to use the apps as "an automation tool" for malicious activity, researchers revealed in a blog post published this week. The attackers also leverage the OAuth authentication standard to maintain access to applications even if they lose access to the initially compromised account, they said. darkreading.com

New Way for Hackers to Abuse the Cloud
Google Cloud's 'Dataproc' Abuse Risk Endangers Corporate Data Stores

There's a new way for hackers to abuse the cloud, this time with data analysts and scientists in the crosshairs.

Lackluster security controls in one of Google's cloud services for data scientists could allow hackers to create applications, execute operations, and access data in Internet-facing environments. The issue lies with Google Cloud's "Dataproc," a managed service for running large-scale data processing and analytics workloads via Apache Hadoop, Spark, and more than 30 other open source tools and frameworks.

A so-called "abuse risk" to Dataproc, outlined by the Orca Research Pod on Dec. 12, rests on the presence of two default open firewall ports used by Dataproc. If an attacker is able to achieve initial server compromise in an exposed cloud environment (through a common misconfiguration, say), they could take advantage of missing security checks to reach connected resources, such as data scientists' reams of sensitive data. They could also toy with their cloud environments in myriad other ways.

"One can imagine that the data used for analysis is likely to contain proprietary as well as sensitive data, which, if breached could provide bad actors with customer data, business intelligence, and other data that could be used for competitive intelligence," says Roi Nisimi, cloud threat researcher at Orca Security. darkreading.com

Ransomware Gangs Use PR Charm Offensive to Pressure Victims

A closer look at LATMA, the open-source lateral movement detection tool

In Case You Missed It

How much do you know about
cannabis security?

Get your cannabis security education through My Sapphire Training or check out some of our FREE resources to learn more!

Crafted by our expert team, this FREE guide will introduce you to the three phases of opening a cannabis business - providing you with everything you need to know about cannabis security!

Starting with the application, through construction, and into operation, security remains a crucial component of a successful cannabis business.

Protect Your Cannabis Business with Security Vaults
The Importance of Cannabis Security Vaults
Why would you even want a vault in the first place? Sure, we can all agree it is prudent to protect hundreds of thousands of dollars in cannabis and cash in a vault, right? But why is this so critical?

Your worst nightmare
Imagine how busy your day is trying to run your business. Now imagine your day if a burglar entered your business, stole thousands of dollars in cash and pounds of your finest cannabis strains. Now what?

Some of your employees may quit because they may feel unsafe. Then there are the repairs and days your business is down to recover. Hopefully your cash flow will allow you to continue in your business - hopefully.

Cannabis is the latest crime target
So, back to protecting hundreds of thousands of dollars. Do you know any other industry that has that much cash and product on site? Think about it for a second. The answer is nobody.

Even pawn shops, jewelers and banks move cash out of their locations as quickly as possible. This makes cannabis shops the "It Girl" for thieves all over the country. So congratulations; you are now the hottest item for thieves nationwide. You are both overexposed and under protected. Thieves are now casing cannabis stores for these very reasons.

Security is worth the investment
Protect your business investment with a UL rated vault. Don't be severely under protected with a cinder block vault, cages, dry wall or regular concrete wall. Avoid the mess of a burglary and gain peace of mind with a UL vault investment. sapphirerisk.com

Cannabis is Legal - But Where are the Stores?
Adults can possess & grow marijuana in Ohio — but there’s nowhere to buy it
Ohioans woke up Thursday in a land of limbo for recreational marijuana use: Adults can now legally grow and possess cannabis at home, but cannot legally buy it.

On Wednesday night, Republican Gov. Mike DeWine urged lawmakers to quickly set parameters for Issue 2, the citizen initiative voters approved in November. While the state Senate pushed through an 11th-hour deal hours before the law took effect, the Ohio House adjourned without taking it up.

Rep. Jamie Callender said there’s “no drop-dead date” for implementing a legal sales scheme, and that growing marijuana at home or allowing possession can proceed according to the voters’ wishes.

He said he wants “to make sure we’re thoughtful, that we’ve had adequate time to look at it and deal with the things that don’t go into effect immediately.”

“We’re not going to pass, sight unseen, such a monstrous proposition in 48 hours. That’s nuts,” Seitz said. Lawmakers need time to work through the complexities of setting up cannabis sales, taxation and a regulatory structure, he said.

DeWine, however, worried openly about a worst-case scenario developing, saying black market sales could flourish or that fentanyl- or pesticide-laced marijuana products might become more accessible. He called the current state of affairs a “recipe for disaster.” cannabisbusinessexecutive.com

Opportunities in the Ohio (O-High-O) Cannabis Market

Tips: Streamlining Wholesale Purchasing for Cannabis Dispensaries & Retail Operations

AI's Impact on E-Commerce
Meta, Google, and Shopify Execs on How New AI Tools Will Drive Sales in 2024

AI-enhanced commerce exploded this holiday season, giving merchants new ways to sell and changing how consumers shop.

• New AI commerce tools are expected to drive $194 billion in sales this holiday season, with accelerated growth next year.

• More than 70% of U.S. consumers said they believe AI will make it easy to discover new products, and 30% said they regularly use AI to get personalized product recommendations.

• AI e-commerce tools have the potential to save small businesses time and money and help level the playing field for small companies.

This holiday season marked the beginning of a new retail era — the era of artificial intelligence (AI)-enabled commerce.

For the first time, merchants, in large numbers, used AI tools to create new connections with customers, manage inventory, and predict trends, while consumers used AI to discover products and businesses.

Heading into the biggest selling season of the year, e-commerce software company Salesforce predicted AI would drive $194 billion in online holiday sales. During the five-day Black Friday/Cyber Monday period alone, AI influenced $51 billion in global sales through targeted offers, recommendations, and AI-powered chat, Salesforce reported.

Investment firm Wedbush Securities, in a note to investors in early December, called AI “the most transformative technology trend since the start of the internet,” and said its use by businesses and consumers is exploding.

This year, tech firms Meta, Shopify, and Google released new AI tools designed to help merchants sell and to help consumers shop. Merchants and consumers embraced the new tools, and their use is expected to continue to shape commerce in 2024, executives from the three tech firms told CO. uschamber.com

Cutting Online Returns Becomes Top Mission for Retailers
Major retailers use AI to slash number of clothing returns when shopping online

MySizeID has teamed up with over 100 retailers to help cut the number of online returns

One company is making a splash in the retail space by using artificial intelligence to cut the number of online shopping-related item returns. Since 2014, MySizeID has developed an algorithm that learns the habits and measurements of the consumer, saving retailers between 30 to 50% on the returns of the item.

During a recent appearance on "Varney & Co.," MySizeID CEO Ronen Luzon explains why artificial intelligence is the key to future returns, an issue that has plagued the e-commerce industry for years.

Through A.I., MySizeID informs the consumer as to what size the requested item would most likely be for their body type, helping them find the perfect fit.

"We actually recommend to the consumer what size they really need in that particular item. So if you select large, for example, and we think you need a medium, we alert you that you need a medium. And if you still order the large, we understand that the return is because of size related [sic]," Luzon explained to FOX Business' Stuart Varney. "And then we recommend you again next time, and we can alert the retailer as well of the habits of their consumers." foxbusiness.com

Amazon still sells clothes hook ‘spy camera’ used by man to watch underage girl
Amazon continues to peddle a “spy camera” embedded in a clothes hook despite the e-retailer facing a lawsuit over the gadgets after they were allegedly used to secretly ogle an underage Brazilian girl.

The motion sensor-activated “nanny cam” was used by Darrel Wells of West Virginia to spy on the foreign exchange student and aspiring actress he was hosting two years ago, according to a complaint filed this year. nypost.com

Amazon files motion to dismiss FTC antitrust lawsuit

In Seattle e-commerce clash, defunct retailer Zulily sues rival Amazon

Philadelphia, PA: Federal agents raid Philadelphia pawn shop in connection with nationwide theft ring
Federal agents spent hours raiding a South Street pawn shop in Philadelphia on Wednesday. Sources tell Action News the raid was part of a multi-million dollar retail theft ring that stretched across the country. Federal agents with Homeland Security began removing items from Society Hill Loan, a pawn shop that has been a fixture at 7th and South streets, around noon. Neighbors watched as agents hauled boxes marked as evidence out of the store and loaded them into unmarked cargo trucks. Some of the items agents carried out of the store include power tools. Sources told Action News the joint investigation involves Homeland Security and Philadelphia police and is connected to a multi-state retail theft ring that has amassed millions of dollars. Sources also confirmed that two other stores, including one on the 3100 block of Kensington Avenue and another in Wilmington, Delaware, were also visited by federal agents on Wednesday. A spokesperson for the Office of Homeland Security Investigations would not confirm if the stores' owners are facing any charges or what brought agents to the store. Society Hill Loan has remained a fixture on South Street for years and has a large online presence on eBay. By Wednesday evening, the eBay store was inactive. 6abc.com

Miami, FL: Nearly $1M in narcotics, stolen merchandise recovered from Miami home amid retail theft ring probe
Police said they made a big bust while executing a search warrant in Miami — not only involving drugs, but hundreds of thousands of dollars in stolen merchandise. Speaking with reporters on Wednesday evening, City of Miami Police Chief Manuel Morales said the discovery was part of an investigation by the department’s Special Investigation Section. Morales used a holiday season icon to describe the man they took into custody. “This guy right here is absolutely a real-life Grinch,” he said. “We’re glad that he’s off the streets.” Detectives said there was an organized drug ring as well as an organized retail theft ring being operated from inside a house in the area of Northwest 24th Avenue and 14th Street. Investigators said the officers who executed the narcotics search warrant recovered large quantities of cocaine, cash and firearms. Police believe the offender would resell the stolen material from shoplifters across South Florida. The stolen goods include products from CVS, T.J. Maxx, Home Depot and other retailers. Detectives said they are going to take truckloads filled with the merchandise and let retail stores in Miami-Dade and other counties come to the department to determine whether any of the stolen items belong to them. wsvn.com

Little Rock, AR: DEA and other agencies arrest 18 in connection with rural pharmacy pill burglaries
A group from Houston has been arraigned in federal court in Arkansas for a series of pharmacy burglaries across the state. U.S. Attorney for the Easter District of Arkansas Jonathan Ross said 18 were arrested in connection with $1.6 million in drug thefts from the pharmacies. He said the group would target a pharmacy in a rural community and drive in from Houston, Texas, in a rental car to break into a pharmacy in the early morning hours. Drug Enforcement Administration officials said the group would break into a pharmacy by breaking a window and then low-crawling through the business to avoid motion detectors. They would steal drugs, including oxycodone, hydrocodone, alprazolam and promethazine with codeine cough syrup, that they would resell in Houston. Over 96,000 pills were stolen, investigators said. According to court documents, the suspects would commit the break-ins in groups of one to five. Pharmacy locations included Atkins, Benton, Russellville, Sheridan and Truman. Officials said the investigation began in February 2022 and was completed in November of this year with the arrests. The investigation was titled “Rich Off Meds” after a hashtag the group used to brag online about their wealth. Investigators said they recovered $79,000 in cash, six guns, including rifles and $330,000 in jewelry during the Houston arrests. A great deal of the jewelry was custom-made and, in some cases, included reference to the “Rich Off Meds” hashtag, they said. kark.com

Aaron Hoster committed 160 thefts in 3 states by changing UPC codes
DOJ: Madison Man Sentenced to 33 Months for “Ticket Switching” Scam
BANGOR, Maine: A Madison man was sentenced today in U.S. District Court in Bangor for wire fraud and attempted wire fraud.

Aaron Hoster, 51, to 33 months imprisonment followed by three years of supervised release. He was also ordered to pay $57,593.19 in restitution. Hoster pleaded guilty on September 11, 2023.

According to court records, from June 2021 to April 2023, Hoster removed UPC labels from low-cost items and applied them to higher-priced items which he then purchased. Hoster defrauded multiple Home Depot and Lowe’s Home Improvement stores in Maine, cheating the retailers out of more than $51,000. In one instance, Hoster purchased a $439 cordless finish nailer kit, paying just $19.98 by scanning a price code for trimmer line. In another example, he scanned a code for an $11.36 chrome-plated plastic tailpiece despite purchasing a powered drain cleaner valued at $429. In all, Hoster, who has 29 prior criminal convictions, committed 160 thefts using his “ticket switching” scam. Most of the thefts occurred in Maine, and additional thefts took place in Maryland and Pennsylvania.

In sentencing Hoster, Judge Woodcock stated, “The defendant had a full-time job of stealing for two years." justice.gov

Riverbank, CA: 7 in custody after organized retail theft bust in Stanislaus County
Seven people were arrested in Riverbank in connection to an organized retail theft ring, stretching across parts of the state. Sgt. Luke Schwartz, spokesperson for the Stanislaus County Sheriff's Office, said the bust happened Wednesday afternoon in a shopping center with stores such as Target, Ulta and Kohl's. Deputies were able to recover around $12,000 to $20,000 in merchandise that was loaded into two different cars. abc10.com

Mount Pleasant, WI: Alleged retail theft at Kohl’s has Kenosha man facing 7 years prison
A 30-year-old Kenosha man faces four criminal charges, including two felonies, after his arrest for retail theft late last month. Darrin Farris remains in custody in the Racine County Jail on a $1,000 cash bond. Farris is charged with two felony counts of retail theft, which each carry a maximum prison term of three years, six months and a fine of $10,000. The total value of the items was listed at $1,083. Farris also faces misdemeanor charges of obstructing an officer and possession of drug paraphernalia. racinecountyeye.com

Chicago, IL: An overnight burglary crew is targeting cosmetics stores from Lincoln Park to the West Loop, police say
At least 6 stores have been burglarized so far. CPD previously linked the group to armed robberies and carjackings, too. twitter.com

Boston, MA: Theft of 4,600 gift cards in Braintree likely part of larger scam ring

Wyomissing, PA: Thieves Steal Samsung Watches From Wyomissing Best Buy

McMinn County, TN: 3 arrested in McMinn County for Walmart theft

Camarillo, CA: Three arrested for organized retail theft near Camarillo Premium Outlets

View ORC Archives

Case Goes Public?
Share it with the industry

Submit your ORC Association News

Visit ORC
Resource Center

Shootings & Deaths

Richmond, VA: Police investigating robbery, Dollar General employee killed
An investigation is underway after a reported robbery and homicide which occurred at a Dollar General in the city’s Southside Wednesday afternoon. According to the Richmond Police Department, at approximately 4:50 p.m. on Wednesday, Dec. 13, officers were called to Dollar General, located at 3301 Richmond Highway, for a report of a robbery and a person shot. Upon arrival, officers found an adult male, who was an employee of the store, with an apparent gunshot wound. The man was transported to a local hospital, where he later died of his injury. wric.com

Coos Bay, OR: Police investigating shooting homicide near convenience store; neighbors speak out
After a man was found dead from a gunshot near a convenience store in Coos Bay on Tuesday morning, police are investigating the incident as a murder. According to the Coos Bay Police Department, at about 6:24 a.m. on December 12, officers heard a 911 call that a man had been found with a gunshot wound near Umpqua Dairy in Coos Bay. Police said officers responded minutes later and found the man was dead. Police began a massive investigation that involved the Coos County Major Crimes Team and members from several other local law enforcement agencies. Police identified the victim as William Averill, 56, of Coos Bay. Police have not yet identified a suspect. Police said the killing is expected to be an isolated incident and there is no danger to the public. kezi.com

Fort Worth, TX: Sunbelt Rental Burglary suspect shoots himself after shootout with Fort Worth officers
A man shot himself after running away from officers and shooting at them during the pursuit, according to Fort Worth police. The Fort Worth Police Department said officers responded to a burglary alarm call at approximately 9:10 p.m. Tuesday in the 700 block of North Beach Street. When officers got to the scene, they found a man deemed a possible suspect at the business at 9:12 p.m. The man ran away from officers, headed northbound on Beach Street, and fired a handgun multiple times at the officers, police said. The officers returned fire at the man, according to Fort Worth police. The man fell on an embankment along the highway frontage road, and the man shot himself in the head, police said. According to FWPD, officers immediately rendered medical aid, and the man was taken to an area hospital where he was pronounced dead. wfaa.com

Hampton, VA: Update: Police look for Newport News man as suspect in deadly Rally's shooting
Hampton police are looking for a Newport News man as a suspect in the deadly shooting of a 17-year-old employee at a Rally's Drive-In restaurant last month. The Hampton Police Division said Elijah James-Sanders, 25, is facing charges of second-degree murder, burglary with the intent to commit assault, use of a firearm in the commission of a felony, discharging a firearm in an occupied dwelling and wearing a mask in public. According to police, he should be considered armed and dangerous. The shooting happened on Nov. 22 in the 1000 block of West Mercury Boulevard. Investigators think that the victim was involved in a fight with the suspect. After the altercation, police say the suspect displayed a firearm, shot the victim and got away. The Hampton Division of Fire and Rescue took the victim to a hospital with life-threatening injuries, but he later died. 13newsnow.com

Virginia Beach, VA: Update: Man found guilty of aggravated murder of 65-year-old woman at Harrie Teeter gas station
A man has been convicted in connection to the murder of a woman at a gas station at the Haywood Shopping Center in December 2021. On Tuesday, The Commonwealth's Attorney of Virginia Beach released a statement announcing that 24-year-old Darrius White of Chesapeake was found guilty by a jury on charges of aggravated murder, 2 counts of robbery causing death and 3 counts of use of a firearm. 13newsnow.com

Buena Vista Township, MI: Shots fired during armed robbery of Dollar General near Saginaw
Gunshots were fired during an armed robbery in Buena Vista Township on Tuesday evening. Police responded to the robbery at the Dollar General store at 3545 Dixie Highway a short distance south of Hess Road around 8 p.m. Investigators say two men armed with guns walked into the store and demanded money from an employee. They allegedly fired four gunshots in the store when the clerk couldn't open a cash register. Police say the gunshots were not aimed at anyone, the bullets didn't hit anyone and no injuries were reported from the incident. The two masked men allegedly grabbed some merchandise and ran out of the store. Investigators believe the two men might be connected to an armed robbery in Carrollton Township last weekend. abc12.com

Robberies, Incidents & Thefts

Turlock, CA: 33 handguns stolen from gun show at Turlock fairgrounds
Officials are looking for dozens of guns stolen from the Stanislaus County Fairgrounds early Sunday morning. “I'm also from Turlock and I've never heard of something like this happening," said Turlock Police Department spokesperson Dominique Sanchez. Sanchez said the guns were part of the Turlock Gun Show that happened over the weekend. She said two unknown and armed suspects wearing ski masks and dark clothing robbed unarmed security guards at the county fairgrounds around 4:30 a.m. The robbery was called in by the security guards, who were hired by the gun show, according to Sanchez. abc10.com

Shreveport, LA: Burglar falls from ceiling while stealing guns from pawn shop
A suspect has been arrested after surveillance footage caught a burglar’s failed attempt at stealing guns from a Shreveport pawn shop earlier this week. The burglar can be seen on the footage falling through the ceiling before smashing open several glass display cases. The video shows the suspect throwing larger-caliber weapons through the hole he initially entered before shoving numerous handguns in his jeans. The suspect then attempts multiple different methods to exit back through the ceiling, falling multiple times in the process. Shreveport police say officers saw two suspects fleeing across the roof of the pawn shop when they arrived. One suspect, identified as 19-year-old James Napier, was successfully apprehended by police. Officers managed to recover 12 stolen firearms that had been abandoned by the would-be thieves at the scene. wdhn.com

Montose, CO: Walmart bomb threat was a cover for shoplifting attempt; suspect released on PR bond
Police allege a Montrose man called in a bomb threat to Walmart Sunday night as a distraction so he could steal merchandise, and later concocted a tangled story about routinely selling stolen items before admitting to making that part up. Sean Carey, 36, was arrested a few hours after the alleged threat, which caused the store to be evacuated at about 4:45 p.m., sending employees and customers alike into the cold. Police and assisting agencies searched the store and premises for about three hours, ultimately finding nothing suspicious. Carey was initially accused of robbery and other offenses. According to court records, he was charged formally Tuesday with false report of explosives, false report of an emergency/alarm/evacuate, and theft of less than $300. A judge did not find probable cause to support a robbery charge. montrosepress.com

Chicago, IL: Police work to crackdown on retail thefts at the Oak Brook Mall

Vancouver, Canada: Mounties seek suspect after $20K in jewelry stolen from store

None to report.

Submit Your New Hires/Promotions
or New Position
See all the Industry Movement

Feature Your Job Here For 30 Days -
70% Aren't On The Boards
Post your job listing

Featured Job Spotlights

An Industry Obligation - Staffing
'Best in Class' Teams

Every one has a role to play in building an industry.
Filled your job? Any good candidates left over?
Help Your Colleagues - Your Industry - Build a 'Best in Class' Community

Refer the Best & Build the Best
Quality - Diversity - Industry Obligation

Loss Prevention Manager (House of Sport)
Boston, MA - posted October 10

As a Loss Prevention Manager, you will support the Store Leadership team in achieving company objectives by managing all Loss Prevention programs and policies within the store. This key role will have the tremendous responsibility of keeping our associates, customers and our store safe...

District Asset Protection Partner
Tucson and Chandler/Phoenix Area - posted September 27

The Asset Protection (AP) Partner is a strong communicator, advisor, investigator, and compliance partner. This role is responsible for asset protection program execution at all levels and implementing methods to prevent, and control losses, in support of protecting company assets. This role collaborates with store teams, Human Resources, Supply Chain, and District Management...

Asset Protection Specialist
Newburgh, NY - posted September 25

The Asset Protection Specialist role at Ocean State Job Lot is responsible for protecting company assets and monitoring store activities to reduce property or financial losses. This role partners closely with store leadership and the Human Resources team, when applicable, to investigate known or suspected internal theft, external theft, and vendor fraud...

Security Director
Chicago, IL - posted September 7

Reporting to the VP of Corporate Security, the Director of Corporate Security is a professional security practitioner that acts as an advisor/consultant to the assigned Property Management Group. Responsibilities include monitoring security vendors' performance, evaluating for contract compliance, and serving as a program quality control manager...

District Asset Protection Manager
Washington, DC - posted August 31

The MidAtlantic Division has an opening for a District Asset Protection Manager in Northern Virginia. This person will support Fairfax, Arlington, and Loudoun counties. This is a salary role with up to 70% travel within the assigned district. District Asset Protection Manager will provide positive/proactive leadership, and instruction in the area of Security/Asset Protection...

Occupational Health & Safety Manager
Mount Horeb, WI - posted July 27

This role is responsible for examining the workplace for environmental or physical factors that could affect employee or guest health, safety, comfort, and performance. This role is also responsible for reducing the frequency and severity of accidents. To be successful in the role, you will need to work closely with management, employees, and relevant regulatory bodies...

Region Asset Protection Manager
Jacksonville, FL - posted October 24

Responsible for managing asset protection programs designed to minimize shrink, associate and customer liability accidents, bad check and cash loss, and safety incidents for stores within assigned region. This position will develop the framework for the groups' response to critical incidents, investigative needs, safety concerns and regulatory agency visits...

Regional AP Mgr - South FL Market - Bilingual required
Miami, FL - posted August 8

Featured Jobs

To apply to any of today's Featured Jobs, Click Here

View Featured Jobs | Post Your Job

Holding people accountable can be a difficult task made even more difficult if those people don't even hold themselves accountable for their own performance or actions. Rationalizing, minimizing, deflecting - some people are just incredibly difficult to develop and lead. But then again, isn't that the key to being good leaders. Learning how to manage and lead is a life-long process that's tested every day you go to work. With human nature being to take the path of least resistance, the manager has to be there making sure no one does.

Just a Thought,
Gus

Post Your Tip or Advice!
(content subject to approval)

NRF 2024: Retail's Big Show
January 13-16

Solink Secure Summit
February 12-14

2024 CRIA International Criminal Investigators Training Conference
February 13-15

RLPSA Annual Conference
March 24-27

2024 RH-ISAC Cyber Intelligence Summit
April 9-11

See More Events

Recruiting?
Get your job e-mailed to everyone... everyday
Post on our Featured Jobs Board!

Not getting the Daily?
Is it ending up in your spam folder?
Please make sure to add d-ddaily@downing-downing.com to your contact list, address book, trusted sender list, and/or company whitelist to ensure you receive our newsletter.
Want to know how? Read Here

SUBSCRIBE

FEEDBACK

www.downing-downing.com

Advertise With The D&D Daily