3/15/21

LP, AP & IT Security's #1 News Source

Capitol Riots Exposed IT Security Risks
Compromised devices and data protection: Be prepared or else
Authorized device users within the Capitol abandoned their devices (understandably) quickly and, unfortunately, while still logged into credentialed sessions, thus neutralizing any password and encryption protections. The rioters posted photos of computer screens with emails clearly displayed.

This event serves as a reminder that any of our devices can be lost or stolen instantly and absolutely unexpectedly, and that the only way to protect data is through the security processes that were previously put in place. It is critical that organizations truly recognize that hardware is now cheaper than ever, and that data has never been more valuable. Hardware loss by an organization is ultimately acceptable and survivable, but data loss may not be.

Implementing effective layers of protection to prevent data breaches stemming from compromised hardware requires vigilance across several fronts, from encryption to remote access controls to more effective employee training.

A single layer of encryption simply isn't enough
While encryption alone isn't fully sufficient to secure data, it's also the case that multiple layers of encryption are often necessary to ensure that any exposed data is rendered unreadable and unusable. For example, an encryption tool like Bitlocker, if used on its own, can leave data vulnerable in certain scenarios such as if a power failure interrupts the encryption process, or if a system administrator's credentials are compromised.

Remote data deletion and data quarantine capabilities are essential
Businesses require security solutions that enable remote oversight of sensitive data, even when that data is accessed and stored across countless employee-used devices in myriad locations. This necessity has been made all the clearer by the widespread adoption of work-from-home policies accelerated by the COVID-19 pandemic.

Enforceable employee training is the single most important security measure
It is often said that employees and their behavior are the greatest threat to data security - and it's never been truer. Employees are ultimately the caretakers of their devices and the data access they're entrusted with. They therefore have many opportunities to make attackers' lives easier: leaving devices unattended and unsecured, being careless with their credentials, clicking on phishing emails, etc. helpnetsecurity.com

Microsoft investigates potential ties between partner security firm,
Exchange Server attack code leak

Updated: Exploit tools used in widespread attacks reportedly are similar to PoC code privately distributed by Microsoft to vendors.

Microsoft is reportedly investigating a potential partner leak that could have exacerbated the current wave of attacks against Microsoft Exchange servers.

The Redmond giant is examining whether potentially "sensitive information" required to conduct the attacks was obtained through "private disclosures it made with some of its security partners," according to the Wall Street Journal.

On March 2, Microsoft issued emergency patches to tackle four zero-day vulnerabilities in Microsoft Exchange Server which were being actively exploited in the wild.

The critical bugs were disclosed privately in January, and since then, exploit usage has gained traction to the point researchers estimate that tens of thousands of businesses worldwide have been impacted.

The suspected state-sponsored Chinese hacking group Hafnium was originally attributed to exploitation of the zero-days. Now, however, proof-of-concept (PoC) code has been released and more advanced persistent threat (APT) groups are attempting to capitalize on the situation. Ransomware, too, is now being deployed in some attacks. zdnet.com

3 Security Issues Overlooked By the NIST Framework

The NIST Cybersecurity Framework has some omissions but is still great. It should be considered the start of a journey and not the end destination.

NIST is not a catch-all tool for cybersecurity. There are a number of pitfalls of the NIST framework that contribute to several of the big security challenges we face today. In this article, we'll look at some of these and what can be done about them.

Log files and audits
The most glaring omission from NIST is the fact that the framework says that log files and systems audits only need to be kept for thirty days. When you think about the information contained in these logs, how valuable it can be during investigations into cyber breaches, and how long the average cyber forensics investigation lasts, it's obvious that this is far too short a time to hold these records.

The cloud
Another issue with the NIST framework, and another area in which the framework is fast becoming obsolete, is cloud computing. Or rather, contemporary approaches to cloud computing.

The problem with RBAC
Our final problem with the NIST framework is not due to omission but rather to obsolescence. One of the outcomes of the rise of SaaS and PaaS models, as we've just described them, is that the roles that staff are expected to perform within these environments are more complex than ever. NIST, having been developed almost a decade ago now, has a hard time dealing with this. networkcomputing.com

Just Released: Version 3.1 of the PCI PIN Security Standard
In this post we talk with PCI SSC SVP and Standards Officer Emma Sutcliffe about the revised Standard.

What are the PCI PIN Security Requirements and Testing Procedures?

Emma Sutcliffe: PIN (Personal Identification Number) data provides an authentication method to help protect payments from fraudulent use. The PCI PIN Security Standard provides requirements and testing procedures for the secure management, processing, and transmission of PIN data at ATMs and attended and unattended point-of-sale (POS) terminals.

Why is the Standard being updated?

Emma Sutcliffe: Industry feedback drove many of the changes to the Standard, which consist primarily of minor revisions and errata updates. Revisions include clarifications and updates previously released via technical FAQs and bulletins, corrections to proofing errors, and responses to stakeholder comments. blog.pcisecuritystandards.org

Password reuse defeats the purpose of passwords

Shoplifter Shoots Officer
Omaha, NE: Police Officer shot in face and head during a shoplifting incident inside JC Penney
Officer Jeffrey Wittstruck was shot in the face and on the top of his head during a theft encounter at a JC Penney store in Omaha, Nebraska. The shooting was on March 12, 2021 at the Westroads Mall. 21-year-old Kenya Jenkins allegedly fired 4 shots at Officer Wittstruck during a confrontation. The situation unfolded when JC Penney employees called police to report a shoplifting attempt.

Kenya allegedly was caught stealing a package of t-shirts, he tried to run but was detained by mall security. Omaha police say Kenya was not cooperative and initially gave a false name. Officer Wittstruck tried to arrest Kenya but he pulled away, the officer then shot a taser at Kenya but the prongs missed.

Another physical struggle ensued, and that is when authorities say Kenya pulled a gun out of his sweatshirt pocket and fired four times at Officer Wittstruck. The officer was shot in the face and on the top of his head. Kenya ran out of the mall and drove off in a white BMW. A high speed chase soon followed. Kenya ended up crashing on a railroad after his BMW stalled on the center of the train tracks. The suspect was arrested and charged with suspicion of attempted first-degree murder and use of a gun to commit a felony. Officer Wittstruck was rushed to the hospital and is in stable condition.  kpvi.com

Parma, OH: Security Guard and Patron shot and killed outside Restaurant
The Parma sports bar where a patron and security guard were gunned down early Saturday released a statement on social media Sunday morning, expressing condolences for the victims. A Facebook post from Rookies Sports Bar & Grill, on Pearl Road, says, in part, that the staff's "hearts are broken," and "we are at a loss for words!" The statement also says that Timoteo "Tim" Cruz, the bar's security guard who also worked as a Cuyahoga County Corrections Officer, was "more than just a coworker. He was family and a good friend to us all." The post describes the patron, 29-year-old Sean Acierno, as a "happy, positive person" loved by many.

Cruz and Acierno were shot about 2:15 a.m. Saturday in the parking lot of the bar, Parma police said. Acierno was shot first by an AR-15 semi-automatic rifle, police said. Cruz, while working security, shot at the men after they shot and killed Acierno. The suspects returned fire and fatally shot Cruz. One of the shooters was injured by a shot fired by Cruz, but police did not say which one was hurt. Parma police arrested two brothers, 27-year-old Juan Carlos Perez and 30-year-old Luis Carlos Candelairo, in connection with the shooting. cleveland.com

Phoenix, AZ: Police Release body cam footage from deadly Desert Sky Mall shooting
The Phoenix Police Department on Saturday released body camera footage of a shooting at Desert Sky Mall near 75th Avenue on Feb. 14 that left one man dead and another injured. (Warning: graphic violence) Footage showed the officer running through the Phoenix mall and being directed to the scene of the shooting where he found a man bleeding on the ground. The officer picked up the man and put the victim on his shoulder. "You're alright, you're alright," the officer could be heard telling the man as he was running to exit the mall and get him medical attention. The victim on the ground outside of the mall asked the officer if he was going to die - to which the officer said, "No dude, you're ok. I promise you you're not going to die." Phoenix police say the man was taken to the hospital and is recovering. The other gunshot victim, 17-year-old Alejandro Martinez, died at the hospital, authorities said. ktar.com

Auburn, WA: Man, 19, fatally shot during confrontation outside gas station
 

Robberies, Incidents & Thefts

Arlington, VA: Police officer stabbed by alleged shoplifter at Safeway in NE D.C
The Metropolitan Police Department is investigating after a special police officer was stabbed while attempting to stop a shoplifter at the Safeway store in Northeast Washington. Police tell ABC7 that the special police officer was treated for non-life-threatening injuries, and no arrest has been made at this time. Authorities say the incident occurred at 11:18 a.m. Saturday at a Safeway store located at 322 40th Street N.E. The special police officer employed by Safeway confronted a man who was allegedly trying to leave the store without paying for several cans of beer. According to the police report, after the special police officer asked the suspect to give him the beer or pay for it, the suspect lifted his shirt and displayed a knife. At this point, MPD says the special police officer pulled out his baton which the suspect was able to snatch away from him. The suspect then allegedly stabbed the victim in the left upper arm. wjla.com

San Bernardino, CA: Police find 150 stolen catalytic converters, arrest 3 believed to be part of 'large-scale catalytic theft ring'
A driver who fled a police traffic stop led San Bernardino officers to the location of 150 stolen catalytic converters, resulting in the arrest of three men believed to be part of a "large-scale catalytic theft ring," police said Saturday. Officers tried to stop the vehicle about 1:45 p.m. Friday, but the car didn't yield. Police tracked it down to N. Barton Street, where they discovered it was a sub-plated stolen vehicle, the San Bernardino Police Department said in a news release. Recovered catalytic converters are seen in a photo released by the San Bernardino Police Department on March 13, 2021. While searching the area, detectives found approximately 150 stolen catalytic converters at the home, in addition to tools used for cutting metal and more than $180,000 in cash. ktla.com

San Carlos, CA: Police Search For Smash-And-Grab Suspect In Early Morning Jewelry Store Burglary
A male suspect busted into the Emkay Diamonds store in San Carlos early Saturday, smashing display cases and escaping with $32,000 worth of high-priced jewelry, authorities said. The San Mateo County Sheriff's Office said deputies responded to an alarm at the store located at 538 B El Camino Real at about 2:47 a.m. sanfrancisco.cbslocal.com

Folsom, CA: Woman arrested, accused of impersonating officer during robbery
A woman was arrested Sunday after police say she impersonated an officer while robbing a convenience store. Just before 2 p.m., a convenience store clerk from a store on Natoma Street reported that a woman had gone into the store with a badge on her belt and a pistol in her waistband, the Folsom Police Department said. Police said the woman, later identified as 32-year-old Tiffany Winter of Antelope, reportedly stole items from the store. kcra.com

Chicago, IL: Two Men Charged In String Of South Loop Burglaries; Police Probe Whether They're Connected To More Incidents
Two men have been charged in a string of burglaries in the South Loop, amid an investigation into whether the break-ins were connected to a series of ATM thefts, burglaries, or carjackings across the city over the last several weeks. Police said 25-year-old Kenneth Maxey and 22-year-old Tyshawn Jones both face three felony counts of burglary. chicago.cbslocal.com

Reading, PA: A Berks County trio is facing theft charges for allegedly stealing merchandise valued at $24,000 from their employer, authorities said
Local police were initially dispatched to a business in the 500 block of Penn Avenue around 7:30 p.m. on Feb. 26 for a report of theft according to the West Reading Police Department. Police declined comments about the name of the business. An investigation allowed police to identify two employees, Jennifer Santiago and Lynn Evans as two suspects who allegedly stole valuable items from the business, police said. It is alleged that Santiago stole items valued at $4,000 and Evans stole items valued at $8,000, police said. dailyvoice.com

Submit Your New Hires/Promotions or New Position

Featured Job Spotlights
 

	ALPM - Supply Chain Chicago, IL - posted March 1 Our Distribution Center Area Loss Prevention Managers ensure safe and secure distribution centers through identification and resolution of loss and risk opportunities. Our Distribution Center Area Loss Prevention Managers plan and prioritize to provide optimal service to their portfolio of distribution centers and stores...
	RLPM - Supply Chain Chicago or Moreno Valley, CA or Dillion, SC - posted March 1 Our Distribution Center Regional Loss Prevention Manager leads teams to ensure safe and secure distribution centers through the optimization of talent, while ensuring a high level of support and customer focus. Our Distribution Center Regional Loss Prevention Manager develops and executes strategy, exercises judgement and makes good decisions...
	ALPM - Pittsburgh Pittsburgh, PA - posted March 1 Our Area Loss Prevention Managers ensure safe and secure stores through the objective identification of loss and risk opportunities. Our Area Loss Prevention Managers plan and prioritize to provide an optimal customer experience to their portfolio of stores. They thrive on supporting and building high performance teams that execute with excellence...
	Sr. Manager, Retail Asset Protection Baltimore, MD - posted Feb. 23 The Senior Manager, Retail Asset Protection is responsible for implementing strategies and training to ensure the effective execution of Protect Retail initiatives. This position will be responsible for leading a team that executes core programs and strategies relating to safety and security, theft and fraud mitigation and operational excellence in retail stores...
	Regional Manager LP, Audit & Firearms Compliance IL, WI, MN, IA, ND, SD, NE, OK, MO & KS - posted Feb. 12 The Regional Loss Prevention Manager is responsible for the control and reduction of shrinkage at the stores in their Territory. Investigate and resolves all matters that jeopardize or cause a loss to the company's assets...
	Regional LP & Safety Manager Denver, CO - posted Feb. 9 The Regional Loss Prevention & Safety Manager implements Risk Management and Loss Prevention objectives within assigned region. The position will provide assistance and training to the field operations teams to address specific Risk Management and Loss Prevention issues within an assigned span of control.  Read job description here
	Manager of Asset Protection & Safety Operations Rockaway, NJ - posted Feb. 4 The Manager of Asset Protection & Safety Operations is responsible for the control and reduction of shrinkage and safety compliance for Party City Holdings, by successfully managing Asset Protection (AP) Safety programs and reporting...
	Loss Prevention Auditor and Fraud Detection Analyst Raleigh, NC - posted Dec. 14 As a Loss Prevention Auditor and Fraud Detection Analyst for Staples, you will conduct LP operational field audits remote, virtual and in person, within a base of 60 retail stores to ensure compliance to operational standards to drive operational excellence and preserve profitability...
	Leader, Asset & Profit Protection San Fran/Chicago/NY/West Palm Beach - posted Dec. 14 As the leader of the Data/Analytics & Investigations strategy, you should have strong analytical/investigation skills, the drive to innovate, and the ability to build strong partnerships to lead through the influence of others. They will be personable, open to learning, collaborating with others...
	Customer Success Specialists Multiple Locations - posted Oct. 9 The role of the Customer Success Specialist is to engage, empower, and excite our community. As a Customer Success Specialist, your primary responsibility is to ensure both retailers and law enforcement, who make up our community, have great experiences and achieve real crime reduction outcomes from using our platform. Apply Here
	Sales Representatives NuTech National - posted Oct. 13 NuTech National, an established and rapidly growing 40+ year electronic security company is expanding our National Sales Team. Seeking motivated, driven and successful sales reps to expand our national retail and governmental vertical markets. Top pay, benefits and signing bonus available. Please apply to melissa@nutechnational.com

Latest Top Jobs
	Vice President, Loss Prevention San Francisco, CA The Vice President of Loss Prevention reports to the Company's General Counsel and is responsible for leading the organization's global asset protection and security efforts. You will collaborate effectively across the Company.  linkedin.com
	Executive Director, Asset Protection Rosemead, CA The Executive Director, AP is responsible for the company's AP function, protecting the company's integrity, people, processes, and assets from harm and loss. This position serves as the subject matter expert on a broad range of security standards and disciplines.  pandarg.referrals.selectminds.com
	Senior Director, Loss Prevention Calabasas, CA The Senior Director of Loss Prevention is responsible for setting and championing the Loss Prevention strategy for the enterprise, including retail stores, distribution centers, corporate offices and quality assurance labs.  sjobs.brassring.com
	Director, Asset Protection Solutions Deerfield, IL Responsible for developing and implementing department strategies and integrating efforts with division and company strategies, emphasizing product availability, inventory productivity, and cost productivity.  jobs.walgreens.com
	Senior Manager, Asset Protection Atlanta, GA The Sr Manager Asset Protection is responsible for ensuring that Asset Protection programs are fully implemented and are being executed per expectations within assigned distribution centers.  careers.homedepot.com
	BJ's Wholesale Regional AP Rollout - 8 New Positions The Regional AP Manager oversees AP, security, theft, fraud, investigations, and related procedures within the field. The RAPM supports and continuously interacts with club management to analyze shrink, identify profitability gaps and address issues related to protecting company assets. See all the job listings

Featured Jobs

To apply to any of today's Featured Jobs, Click Here

View Featured Jobs   |   Post Your Job
 

We want to post your tips or advice... Click here

Not getting the Daily? Is it ending up in your spam folder?
Please make sure to add d-ddaily@downing-downing.com to your contact list, address book, trusted sender list, and/or company whitelist to ensure you receive our newsletter. 
Want to know how? Read Here

FEEDBACK    /    downing-downing.com    /    Advertise with The D&D Daily