Johanna Agudelo named Corporate Asset & Profit Protection Manager for Burberry Johanna was previously an Operations Manager, NYC for St. Moritz Security Services, Inc. Prior, she worked at Louis Vuitton for over three years as Maison Manager and LP Manager,  Bloomingdale's for nine years as LP Manager, Nordstrom as Human Resources Assistant and at Forever 21 as Assistant Store Manager. She earned her Bachelors of Science in Criminal Justice from Saint John's University. Congratulations Johanna!

Submit Your New Corporate Hires/Promotions or New Position

Through rough seas and smooth sailing alike, Dunn and Mattschull have assembled an ever growing team of military veterans and highly skilled civilians that is second to none in the security industry. And because of this operational military environment, S-Tron customers enjoy Respect, Reliability and a high-level of Communication.

"No customer left behind" is not just the S-Tron mantra, Pete Mattschull says "it's our way of life".

ABOUT S-TRON
S-TRON is an electronic security integrator for national and regional retailers with thousands of installation locations and headquarters in Melville, New York. S-TRON provides outstanding customer service for national retail, grocery stores, restaurants and C-stores.

Major Fraud Spike in 'Replay Attacks'
Amazon Files Patent for Replay Attack Detection
Security Step Inside Voice Authentication Systems
A patent filed by Amazon for a replay attack detection technology for biometric voice authentication systems has been published by the U.S. Patent and Trademark Office.

The filing for "Detecting replay attacks in voice-based authentication" describes a system in which a "watermark signal" is included by the device in the captured audio of a voice authentication factor spoken by the user.

"When a user speaks a voice authentication factor, a unique watermark is played in the environment in which the user is speaking," the inventors write in the application. "Accordingly, the watermark should be captured by any surreptitious recording equipment that is recording at a relative fidelity that is high enough to accurately reproduce characteristics of the speaker's voice."

If a previously-used watermark is detected in the audio of an authentication attempt, the system recognizes the audio as a recording, and can optionally demand another factor, such as a PIN or fingerprint scan. In the various embodiments presented, the watermark could alternatively be used once, in effect marking the transaction as current, and never again, or could be produced at a low frequency to distinguish between a current and previous watermark.

Research from Pindrop indicates that the rapid increase in voice interactions is being accompanied by a major spike in fraud through the voice channel as criminals leverage new technology for advanced fraud techniques like replay attacks. biometricupdate.com

Largest GDPR Fine To Date
France Hits Google with $57 Million GDPR Fine
Record Privacy Fine Sends Strong Signal to Data Processing Technology Companies

France on Monday imposed a 50 million euros ($57 million) fine against Google for violations of the EU's General Data Protection Regulation, sending a strong to message to the technology giant that its privacy and data collection practices are inadequate.

The penalty, levied by the country's National Data Protection Commission, abbreviated as CNIL, is the largest fine handed out so far under GDPR, which is intended to better protect Europeans' personal data.

"The amount decided and the publicity of the fine are justified by the severity of the infringements observed regarding the essential principles of GDPR: transparency, information and consent," CNIL says. It has also published a longer penalty notice, written in French, outlining in full the fine against Google.  govinfosecurity.com

Battling bot-driven gift card abuse
It's a serious and growing problem - and one many retailers fail to recognize until they or their customers have suffered significant losses.

It's gift card fraud, one aspect of a bot-enabled deception called credential stuffing: botnets attempting to log into a site to assume an identity, gather information or steal money, gift cards and/or other goods. Fraudsters use lists of usernames and passwords gathered from security breaches.

In the case of gift card fraud, customers frequently blame the retail site or store they were patronizing when their gift cards or gift card account values were stolen, damaging the store's brand image and customer loyalties.

Patrick Sullivan, global director of security for intelligent edge cloud platform Akamai, says over 30 billion malicious credential stuffing login attempts were made from the beginning of November 2017 until the end of June 2018. These covered a broad range of attacks on all industries, not just retail.

From approximately 3 billion credential attacks per month in the fourth quarter of 2017, the amount rose to some 8 billion attacks per month in the second quarter of 2018. stores.org

2018's Most Common Vulnerabilities Include Issues New & Old
Open Source & Rapid-Fire Development & Deployment (Easy & Fast)
WhiteHat Security put together this list of the most common web exploits used by malicious hackers in 2018, and their list contains both new vulnerabilities and "classics" that continue to haunt the waking dreams of security professionals.

The majority of the breaches on the list come from one of two "epicenters" in software development. The first is in the wide use of open-source tools, functions, and applications in projects. "Developers can use public APIs to quickly deliver application functionality that is creating or opening a new set of vulnerabilities that that customers and the industry have to deal with," he explains.

The other vulnerability epicenter, Kulkarni says, is the rapid-fire develop/deploy cycle exemplified by DevOps. "Devops, micro services, and open source are also contributing a new set or a new kind of vulnerability into the mix because developers have now more power to push code into production," he says. darkreading.com

Shadow IT, IaaS & the Security Imperative
Organizations must strengthen their security posture in cloud environments. That means considering five critical elements about their infrastructure, especially when it operates as an IaaS.

Shadow IT, the use of technology outside the IT purview, is becoming a tacitly approved aspect of most modern enterprises. Yet, with the vast adoption of software-as-a-service and infrastructure-as-a-service (IaaS) approaches, shadow IT presents increased security challenges that can create major risk. To further complicate things, because organizations aren't centrally controlling these solutions and tools, their vulnerabilities often go undetected for far too long. If individuals and internal teams continue to introduce outside tools and solutions into their environments, enterprises will have to adopt a smart path to ensure they operate securely. darkreading.com

Navigating the Cyber Crime Scene
Companies in the throes of fighting a cybersecurity incident sometimes corrupt or destroy digital evidence. After an incident, investigators must use logs, network activity and other electronic clues to decipher what happened and decide whether to pay insurance claims or pursue criminal cases. The CISO, working with internal and external lawyers, should set rules about what kind of evidence should be preserved, experts say.
 
Technology staff should practice, too, says Kip Boyle, chief executive of consulting firm Cyber Risk Opportunities LLC. "Policy is important -- and training."

Preserving Digital Evidence in the Heat of a Cyberattack
Companies fighting a cyberattack must collect digital evidence quickly before it disappears, either erased by the intruder or overwritten during the company's typical operations.

Good response in the midst of a cyberattack requires clear policies created during calm times well before an incident occurs. Companies should have a plan with specific technological steps to preserve digital clues for insurance claims and criminal cases that might be filed later, experts say.

At a physical crime scene, the first police officer who arrives knows to secure the area and avoid contaminating the scene by, say, touching objects.

In a cyber incident, first responders should take similar care.

Attackers and their tools must be isolated, he said. Abruptly shutting down a server or turning off a network could destroy systems logs or eliminate the chance to capture details about the state of the equipment during the attack.

Laying out a clear order of operations, with thresholds for certain actions, will help technologists stay cool in an attack, Mr. Melendres said. cybersecurity.cmail20.com

Director of IT Security Posted for Peets Coffee in Emeryville, CA
The Director of IT Security is responsible for establishing and maintaining a corporatewide information risk management program to ensure that information assets are adequately protected. peets.icims.com

172 Cos. of S&P 500 Haven't Disclosed How They Manage Cybersecurity Risks
As Requested By SEC - of Public Companies

First AI Diamond Buying Tool Lets Consumers 'See' True Diamond Quality Online Before They Buy

How to Check What Programs Are Draining Your Laptop's Battery

Is your laptop battery dying too fast? Here is how to determine the cause, if you have Windows 10. You will need to open your Task Manager. Just right-click the Start button or taskbar and click Task Manager. In Task Manager click on the Processes tab where you will see a section called Power Usage and Power Usage Trend. (If you don't see these columns listed, right-click in the header and click on them.) Keep in mind you must have the latest version Windows 10 with the October 2018 update. For some users, it may take 60-90 second to the data in this section to populate. You will then be able to see what programs are draining your battery so that you can uninstall or end them to increase your battery potential.

Graeter's Tells Online Customers Credit Card Info May Be Compromised
Graeter's, the Cinncinnati-based ice cream chain, is telling thousands of customers that their credit card information might have compromised in a data breach.

WLWT reports that the company sent notices to 12,000 customers who purchased goods on its website in 2018, tellng them unauthorized charges have been reported.

According to the news station, purchases at the chain's brick-and-mortar stores were not affected.

Company officials said the problem on an "unauthorized code" added to the checkout page from June 28 through Dec. 17 of last year.

"We do not know if the notice recipients' card numbers were in fact compromised, but to be safe, we are notifying anyone who made a purchase during the time that the malicious code was present," Graeter's President and CEO Richard Graeter said in a statement. "We have no information about any other breaches. This breach only involved our online store graeters.com. lex18.com

Bots, Specialization Supercharging ATO Attacks
Over the past several years, fraudsters have increasingly targeted merchants by using stolen login credentials to take over customer accounts. Account takeover has become all too common for e-commerce businesses, but, a new report says criminals have found a way to supercharge this already thorny problem: botnets.

Account takeover attacks grew by 31 percent from 2017 to 2018, according to antifraud technology provider Forter. Considering the number of stolen login credentials circulating and how easily they can be obtained, this is unsurprising. Just today, security researcher Troy Hunt unveiled one cache (called "Collection #I") uploaded to cloud service MEGA containing nearly 773 million unique email addresses and more than 21 million unique passwords that have been aggregated from multiple breaches. Dumps like these are common and are the fuel enabling ATO to explode.

Only a select group of fraudsters, however, are engaging in this type of fraud. By aggregating and analyzing the data of its clients, Forter found that 80 percent of the ATO attacks on a typical website are launched by only 10 percent of the fraudsters attacking each site. Using bots, a relatively small number of bad actors are able to automate the process of trying stolen login credentials to gain access to accounts at scale. cardnotpresent.com

Amazon Fights Image as Retail Goliath
Amazon wants to change its image as a retail goliath and have people think of it as a platform for supporting small businesses. On Friday, it issued a press release to support that notion.

Amazon particularly wants to be seen by lawmakers and regulators as being pro small-business and as contributing to job-growth, two areas politicians are especially keen on. "In 2018, Amazon introduced the Small Business Impact Report. According to the report, small and medium-sized businesses selling in Amazon's stores are estimated to have created more than 900,000 jobs worldwide," Amazon bragged. ecommercebytes.com

Philadelphia, PA: Court documents detail alleged $130,000 credit card scam at Kmart stores in South Jersey and beyond
Even as the Kmart chain lost stores and customers, the struggling discounter could count on one group of customers at its Delaware Valley stores. But those shoppers were scammers, federal authorities allege. A criminal ring allegedly used stolen identities to obtain credit cards in the names of unsuspecting victims, then sent its members into area Kmarts to make purchases of more than $130,000.

Two of the group's members, including a woman charged this month, are accused of making fraudulent purchases worth more than $11,000 at four South Jersey Kmarts. According to court records, ring members allegedly obtained CitiBank Sears credit accounts with ID information stolen from unsuspecting consumers. Other participants, called runners, had their names added to the fraudulent accounts and were sent on shopping trips to the Sears-owned Kmarts. courierpostonline.com

West Brandywine Township, PA: 11 brand-new motorcycles stolen from dealership; valued at nearly $80,000
Police were dispatched to Cycle Max on Horseshoe PIke, early Friday morning shortly before 4 a.m. for a burglar alarm activation. Police discovered the front door smashed and 11 brand-new dirt bikes (Honda, Yamaha and Kawasaki) stolen from the show room. Police say the description of the suspect's vehicle is a red pick up truck, possibly a Chevy or Dodge, with a gray enclosed box car hauler type trailer. dailylocal.com

Lehi, UT: Multiple Grab & Run robberies of AT&T, Verizon stores prompt chase
Groups of men rush stores
An attempted robbery of a cellphone store in Lehi prompted a police pursuit on I-15 Sunday afternoon, and officials said multiple jurisdictions may be investigating similar incidents. Police were alerted to an instance of suspicious activity at the AT&T store. A group of men had tried to enter the store, but the store was closed. Call said similar incidents had previously been reported by other police departments, including West Jordan and South Jordan. Scanner traffic also indicates incidents may have taken place in Taylorsville and Sandy, with the men either attempting to enter or entering stores such as AT&T and Verizon, grabbing multiple phones, and fleeing. Officials have not yet released a description of the suspects or the suspect vehicle. Gephardt Daily will have more on this developing story as information is made available. gephardtdaily.com

San Francisco, CA: Merchants are at wits' end with shoplifting in Hayes Valley
Hayes Valley is a haven for shoppers and al fresco diners, but trendiness and an abundance of retail stores draws a sinister type: petty thieves. Owning a small business in a pricey city like San Francisco is challenging enough, but shoplifting "is the thing that deflates me the most," said Elizabeth Leu, the owner of Fiddlesticks, children's clothing and toy store in Hayes Valley. "It feels like someone running into your house and grabbing your throw pillows." In the span of a year, Leu estimates between $6,000 and $10,000 worth of merchandise is pilfered from her shop, with about two thefts occurring each month. Leu says she has little recourse. Often the items thieves grab are not worth enough to qualify as grand theft, which has a minimum threshold of $950, and filing petty theft claims only increases the business owner's liability insurance. Between Jan. 18, 2018 and Dec. 18, 2018, a total of four theft crimes were reported in Hayes Valley, of 420 total in San Francisco. By comparison, there were 17 reported thefts in the Tenderloin, and 24 in the Mission. sfgate.com

Berkeley, CA: Young's Backpacking hit for 89 jackets in Grab and Run; total value of $5,185

UK: Shopkeepers are being forced to lock up HONEY to stop thieves stealing it to sell for up to $470 a jar to wealthy Chinese buyers
 

Submit Your New Hires/Promotions or New Position

Featured Job Spotlights

	Asset Protection Director, Analytics & Fraud Management Pataskala, OH The Asset Protection Director, Analytics & Fraud Management will be responsible for leading teams focused on delivering insights and managing fraud risk for the enterprise through the use of advanced technology and statistical analysis. The Analytics & Fraud Management teams will serve multiple internal customers at the Ascena level and within the brands...
	District Loss Prevention Manager Eastern PA/NJ The District Loss Prevention Manager ensures shrinkage control and improves safety in the stores through proper investigation and training. This position is responsible to provide feedback, guidance and protection for our Team Leaders and Associates. This role has oversight and responsibility for approximately 15-20 store locations...
	Asset Protection Supervisor Middleton, WI An individual who is committed to safeguarding the assets of our brand through the education and training of associates, implementation of effective policies and the leveraging of existing and new technology. This position will be responsible for: ● Maintaining the safety and security and overseeing the Asset Protection offices at our Middleton and DeForest campuses...
	Loss Prevention Investigator Media, PA Wawa is looking for an accomplished Loss Prevention Investigator with an undergrad degree in Criminal Justice and previous experience in the retail industry (Multi-Unit). The Loss Prevention Investigator is responsible for utilizing proper investigative techniques and act as the primary liaison with field operations management...
	Retail Security and Safety Specialist Multiple Locations This job contributes to REI's success by ensuring the security and safety of your store team and members by providing a presence on REI property and events. Activities include but are not limited to: fostering partnerships with and training store management and staff and taking action to address shrink and security. Models and acts in accordance with REI's guiding values and mission. Apply now for positions in: Soho, NY Washington D.C. San Francisco, CA Portland, OR Bellevue, WA...
	Regional Safety and LP Specialist Miami, FL The Safety and Loss Prevention Specialist is a subject matter expert responsible for partnering with both our corporate stores and franchise store operations to improve the safety and training processes. This includes reducing motor vehicle accidents, reducing work-related injuries, and ensuring OSHA / DOT compliance through the implementation of corporate or franchisee plans in accordance with local, state, and federal rules and regulations...

Featured Jobs

To apply to any of today's Featured Jobs, Click Here

Today's Daily Job Postings from all around the net - Appearing today only

To apply to today's Internet Jobs, Click Here

Sponsor Today's Internet Jobs 

Job Search Tips: Ace Your Interview with $11, Perfect Your Cover Letter, and Get Your Resume Past the ATS
 

We want to post your tips or advice... Click here

Not getting the Daily? Is it ending up in your spam folder?
Please make sure to add d-ddaily@downing-downing.com to your contact list, address book, trusted sender list, and/or company whitelist to ensure you receive our newsletter. 
Want to know how? Read Here