Christopher Holbert promoted to Director, Supply Chain Loss Prevention and Safety for Ross Stores
Christopher was previously the Sr. Manager Operations - Supply Chain LP and Safety for the retailer for over a year before this promotion. He's held various other loss prevention leadership positions including Regional Asset Protection Manager for Stage Stores, District LP Manager for Sears Holdings Corporation, Regional LP and Safety Director for Lowe's, LP Manager for LDI Computer Superstores and LP Manager for May Department Stores. Congratulations Christopher!

Submit Your New Corporate Hires/Promotions or New Position

San Antonio warehouse raided in suspicion of $500k
fencing scheme involving eBay

One man is facing charges in connection to a half-million dollar fencing scheme police discovered Wednesday afternoon.

Authorities said stolen items including tools, weed eaters and fixtures were discovered in a Northwest Side warehouse in the 7100 block of Eckhert Road on Wednesday morning.

Investigators were tipped off to the business operating under the name Guero Tools. While registered with the state, the business didn't pay federal or state taxes, according to San Antonio Police Department spokesman Carlos Ortiz.

Detectives from the Repeat Offenders Program said the group operated online through eBay, Facebook and Craigslist for some time. buying stolen items and making money by selling those items. Read more

For further information on PROACT, email inquiries to PROACT@eBay.com.

An INVITATION ONLY NETWORKING EVENT for Asset Protection, Loss Prevention and Safety Leaders in the Retail Industry.

The most memorable and must attend event(s) is held annually at major industry trade shows.

Join us when The CRAZE returns to RILA's 2018 Retail Asset Protection Conference in Orlando Florida.

Monday, April 30th
Andretti Indoor Karting & Games
9299 Universal Blvd, Orlando, FL 32819, USA

Watch Out For Your Invite or Visit the Event Website to See if You Qualify!

The CRAZE at RILA 2018 is made possible by these sponsors:

U.S. DEPARTMENT OF HOMELAND SECURITY
Secretary Kirstjen M. Nielsen to Speak at RSA Conference
Secretary of Homeland Security Kirstjen M. Nielsen will speak at the 2018 RSA Conference on Tuesday, April 17 at 1:05PM EDT/10:05AM PDT. Secretary Nielsen will lay out the Department of Homeland Security's cybersecurity priorities and policies in addition to addressing the cyber threats affecting the United States today. Following her remarks, Secretary Nielsen will also participate in a fireside chat on cybersecurity issues.
 
You can watch the livestream of Secretary Nielsen's remarks here. dhs.gov

NSA calls for cyber security community collaboration
Through collaborative action, the cyber security community can have an effect on the adversary, according to Dave Hogue, technical director of the NSA's Cybersecurity Threat Operations Center (NCTOC).

"By tackling the adversary at the top of the 'pyramid of pain' where their behaviour sits, we can force them to reinvent themselves. So for the cyber security community, if we can work together, unify our results and build those layers of defences, we can have an effect on the adversary," he told the CyberUK 2018 conference in Manchester.

"Adversaries are getting into networks using very non-technical means, taking advantage of hardware and software that is not patched up to date and bad security practices such as using applications that are no longer supported."

The "most disturbing" thing, said Hogue, is that adversaries are taking advantage of things that would be blocked by following best practice advice that has been available for months and even years such as implementing application whitelisting, role-based access controls, and two-factor authentication.

He said cyber defenders have to work together, underlining the theme of collaboration as a community and with government, industry and academia to enable thorough, sustained defence campaigns that make it costly for cyber attackers to operate. computerweekly.com

2.6 Billion-Plus Data Records Breached Last Year
Most exposed data records caused by human error
Every minute, nearly 5,000 data records are lost or stolen somewhere around the globe: that's more than 7.1 million a day.

New data from security firm Gemalto's annual Breach Level Index calculated more than 2.6 billion data records were compromised in 2017 - either lost, stolen, or left exposed online - an 88% increase from 2016.

The good news is that the number of publicly reported data breaches dropped by 11%, to 1,765 last year. Even so, there were more data records compromised than ever before, many of which (1.9 billion) were the result of human error such as misconfigured databases and negligent handling or disposal of records. Human error-borne incidents rose an eye-popping 580% last year over 2016.

One trend driving the human error problem is the wave of organizations misconfiguring their online server instances, as well as incorrectly assuming the cloud provider handles all of their data security. "They automatically assume since they are going to the cloud, things are secure. Well, they're not," says Jason Hart, vice president and CTO for data protection at Gemalto. "You still need to configure it properly, and see that your data is secured. It's not AWS [Amazon Web Services] that's the custodian of the data." darkreading.com

Cross-channel fraud detection
How performing behavioral analysis across silos can help detect sophisticated attacks.

Security teams have become overwhelmed by the sheer volume of data that needs to be analyzed to find evidence of fraud. To complicate matters, most online fraud detection solutions are still focused on monitoring specific channels or silos. 

Rules are running out of gas

First-generation tools for identifying fraud use rules-based architectures that only look at historical data and statistical models in a specific community or area.

Automated attacks and the speed with which fraudsters can modify their techniques - to avoid detection and find weaknesses across all channels - continue to put pressure on rules-based systems. This slows the detection of new attacks and increases false positives, as rule libraries expand in breadth and complexity trying to keep up with new fraudulent activity.

Clearly, organizations need a different approach. Specifically, one that takes a behavioral view of threats across all channels from retail to online, from mobile to legacy systems, and monitors as many transactions as possible.

The attack surface is getting bigger

Automation is needed and already used by fraudsters

These hurdles beg for a fresh perspective such as the use of the newer generation machine learning and analytics technologies that can address the challenge of cross channel fraud in a holistic manner. 

For example, one of the leading challenges associated with implementing cross-channel fraud detection is the danger of fragmentation, where detection, alerting and case management practices have historically been operated as separate silo activities, when they should be managed as one.

Combining access and transaction data from multiple channels into data lakes where both machine learning and advanced analytics can be applied to derive meaningful relationships in real or near real time is one way to avoid this problem. csoonline.com

Security Think Tank: Approaches to effective web security
My approach to keeping the web security of any enterprise up to an appropriate security level is to consider it akin to herding cats. In this scenario, the cats are my enterprise people: the employees, the consultants and the suppliers. I might think I have a good idea about their general web behaviour, but I can guarantee I will not be able to accurately predict their exact actions.

If I were to block a webmail service from the main network of a company and tell users what they should use instead, I would hope employees would do as advised. The reality, however, is that:

● Some employees will follow the rules.
● Some employees will navigate the rules. For example, they might use an alternative, more exotic webmail service that was not blocked (and is probably even less secure) - or simply jump off the network on to a public internet connection - perhaps even using their own device.
● Some employees will ignore the rules and find a way to bypass the security.

Therefore the main web security challenge is how to "herd the cats" and ensure employees follow recommended security procedures. I would recommend organisations take the following approach:

1. Respond to employee needs.
2. Provide a secure environment.
3. Track corporate technology use. computerweekly.com

Stripping the Attacker Naked
How cyber threat intelligence can help you gain a better understanding of the enemy and why that gives security teams the upper hand.

Everyone must be as prepared as possible to handle threats. Preparation requires enhancement not only of defenses but of response processes too, and to accomplish this, it's essential to gain a better understanding of the enemy.

There are a few key areas that demand our sustained focus in order to achieve these goals. First, security personnel must identify the "crown jewels" - the vital data needing protection. It's then important to understand what the motivation and profile of an attacker is. After establishing this, the next steps involve identifying who has legitimate access to those assets, then, finally, working out what the potential attack vectors are against legitimate users and the infrastructure that hosts the crown jewels themselves.

It's imperative to have a clear vision and understanding of the cyber terrain, assets being protected, and capabilities of the enemy. This enables us to better re-enforce defenses where we can and have the know-how to respond properly where we can't. Ultimately, it's about establishing a process that will eventually lead to the infusion of cyber threat intelligence information into the defense and response apparatus.

Yes, cybercriminals might want to steal credit card numbers, but this is obvious, and so it's important to think a bit more like them to work out what else they might be after. Can they lock down a part of a system using ransomware that will prevent selling products? Is this a type of bribery to keep the company out of large distributed denial-of-service attacks? Is the organization selling products delivered in unidentified brown boxes of a very personal nature to buyers, and, therefore, is the mere fact that customer names end up in the public sphere going to create problems?

Based on more specific attack scenarios, it may be easier to align defensive measures - but this brings up additional questions. For instance, if a company only sells products to US-based customers, could you block foreign connections using geolocation? It might also open questions related to legal liabilities, due care, and diligence obligations, which could drive more specific processes on how to respond to different types of incidents.

Regarding cyber threat intelligence more specifically, understanding attackers can allow for the extraction of very specific indicators of attack or of compromise from the various databases commercially available. This might enable the focus to be a little more on criminal adversaries and their modus operandi instead of going very wide and generating a ton of false positives. Then, it could be possible to study their techniques and ask ourselves if we have what we need in our infrastructure to prevent them from using their tools and techniques.

By using a more practical and specific approach, organizations can gain the ability to invest precious cybersecurity dollars on things that matter most to a business model and its protection. By knowing the enemy inside out, and by being one step ahead, control is regained. What adversaries consider their attack playground is effectively our arena, and as security professionals, we rule it. It is for us to step up and - when they trespass on our turf - leave them standing naked and defenseless. darkreading.com

Miss an episode? Catch all our "Live in NYC" 2018 videos here.

Get involved in our next broadcast in June at NRF Protect in Dallas. Contact us!

Protecting Your Brand Online
Is Your Third Party Safe?
Ad Agency Group Sharpens Focus on Brand Safety with New Bureau
As advertisers become more concerned about where their messages appear online, a major trade group representing ad agencies is putting together a bureau that will create standards to protect brands. The 4A's says the problem needs an industry-wide response.

"Brand safety" may seem an odd buzzword, but in the age of digital advertising across the sprawling internet, a brand's reputation can get hit hard if an ad appears in the wrong place. With that in mind, The American Association of Advertising Agencies (The 4A's) is announcing a new initiative to keep ads out of "unsafe environments."

The Advertiser Protection Bureau (APB), announced to the group's members last month and to the public at The 4A's Accelerate conference this week, will bring together executives from a number of holding companies that represent ad agencies. The program will create a process for flagging instances of ads appearing in an environment that the advertiser might find undesirable, notifying ad agencies, and investigating what happened.

Louis Jones, The 4A's executive vice president of media and data, says the goal of the bureau is to enlist the industry to address brand safety collectively. associationsnow.com

Adidas and Reebok take action against 53 e-commerce sellers
Adidas and Reebok have filed a claim accusing 53 e-commerce sellers of trademark infringement, counterfeiting and unfair competition.

The sporting brands, which are seeking $2 million from each seller for each infringement, filed the complaint at the US District Court for the Southern District of Florida on April 9.

The individuals and entities listed as defendants are allegedly "promoting, selling, offering for sale, and distributing goods bearing counterfeits" and imitations of the sporting companies' trademarks.

Adidas and Reebok claimed that e-commerce stores and social media accounts including eBay, Bonanza, and Instagram are being used to sell the illicit products. The sellers are of "unknown make up" but allegedly reside and operate in foreign jurisdictions, directing their business towards US customers. worldipreview.com

Walmart becomes more selective about who sells on its marketplace
The retailer's website-where third-party vendors sell their own wares-is adding far fewer sellers a month compared with a year ago, according to data tracker Marketplace Pulse.

The slowdown mirrors a deceleration in growth at Walmart's e-commerce business last quarter, which spooked shareholders and renewed concerns about the investments Walmart is making to catch up with Amazon, such as its recent expansion of grocery home delivery to 100 markets.

Sellers must be pre-approved by Walmart to enter its marketplace-unlike Amazon's, which takes all comers, many of whom never end up selling a single product, Kaziukenas says. Close to 3,000 sellers join one of Amazon's global marketplaces each day, according to Marketplace Pulse, which tracks the sales performance and customer reviews of millions of online vendors. Amazon has more than 2 million sellers in the U.S. alone. digitalcommerce360.com

Online retailer ASOS reports first-half sales up 27 pct

UPS Study: Purchases From Marketplaces Nearly Universal; Retail Now Global As E-Commerce Shoppers Cross Borders

Snap is testing commerce with Snapchat Discover publishers

Bellingham, WA: SpookShop former employee arrested for theft of nearly $200,000 of merchandise, over 16,000 items posted on the internet
A former employee of the SpookShop was arrested by the Whatcom County Sheriff's Sunday after he allegedly used a key to enter the Bellingham store multiple times and stole thousands of dollars in costumes, selling them online and leaving the costume store "struggling to stay in business." The arrest of Ronald J. Bally, 59, was the result of an investigation that began after the store owner began noticing missing costumes, wigs and masks. Bally had worked at the store for 12 years, quitting in 2016. In total, 141 boxes of costumes were seized from Bally's home. Bally told detectives 45 of the boxes contained costumes he bought on Craigslist, but he had no receipts for the costumes, which reportedly were worth $10,000 wholesale. Between April 2016 and February 2018, the account had 16,341 items posted on eBay for sale. bellinghamherald.com

Houston, TX: Jewelry Wholesale Employee tried crossing TX/MX border after $50,000+ diamond heist
A 22-year-old employee of a Houston diamond wholesaler has been arrested and charged in a diamond heist. The alleged "inside job" started in southwest Houston where Delta Gems Diamond Wholesale has its office, and ended on the Texas-Mexico border at a crossing checkpoint. Aisha Garcia is charged with two counts of theft, a third-degree felony, because the value of the stolen stones is said to be between $30,000 and $150,000. According to the probable cause document, Garcia took diamonds out of the office on occasion, to deliver them to jewelers. Last month, she allegedly took two bags of diamonds, including a pair valued at about $9,000 each. abc13.com

North Bay Village, FL: Thief makes off with $50,000 worth of sunglasses and watches while Security Guard looks on
Security cameras last weekend recorded a brazen thief making off with about $50,000 worth of designer sunglasses and Movado watches from a business -- right under the nose of a security guard. The stolen merchandise were in about 12 packages that were delivered by UPS on Friday afternoon. The packages were stolen Saturday night around 7:30 p.m., before the store owner unloaded the delivery. The store owner said package reception at Grandview Palace Marina signed and accepted the packages, but building security released them to the man without asking him to show any identification. The store owner thinks it may have been an inside job. local10.com

Lake Oswego, OR: Bike Shop Owner tracks down his $35,000 of stolen merchandise
Lake Oswego bicycle shop is in the process of recovering stolen merchandise just weeks after it was burglarized. Champoux says one of those people called the bicycle shop on the last day of March and about an hour later, he walked in asking about a road bike. The guy eventually left without buying anything, but Champoux says he returned during the overnight hours and broke inside through a back door.

Champoux says the guy stole a high-end bike, several frames, wheels, and other accessories totaling more than $35,000. He and his colleagues wasted no time trying to get their stuff back. They scoured websites like Craigslist and eBay and they spotted a bike that looked awfully familiar. "You could see the serial number of the frame," said Champoux. "We researched it and found an invoice with that serial number." That vigilante work led authorities to a home in Issaquah, Washington. Champoux says officers found a lot of Lakeside's stolen merchandise, as well as other stolen items. kgw.com


Dothan, AL: Woman stole nearly $5,000 in ink cartridges, headphones from Sam's Club
Tracy Carlino, 47, is charged with First Degree Theft for allegedly stealing the merchandise from Sam's Club in Dothan last year, she was arrested earlier this week. Evidence shows Carlino stole the cartridges and headphones during two trips to the store by concealing the merchandise in larger boxes that she paid for. Police said, "We believe Carlino sold the stolen cartridges online,", estimating the stolen property is valued at slightly more than $4,300. wtvy.com

Winchester, VA: Three face shoplifting charges on items worth about $2,500 from Apple Blossom Mall
Three people are accused of shoplifting 175 items worth about $2,500 from nine stores in Apple Blossom Mall on Saturday. Winchester Sheriff's Office Deputy Wayne Monse said he was working a private-duty security job at the mall at about 6:20 p.m. when he saw a woman and man on surveillance video shoplifting. winchesterstar.com


Des Moines County, IA: Staple's thieves lead Police on High Speed chase; ends with crash and over $500 in merchandise recovered
The suspects fled police traveling at speeds of 100 mph until the driver lost control after hitting the spike strip deployed by Deputies. No one was injured in the crash. More than $500 in stolen merchandise from Staples in Burlington was found in the car. The items stolen included headphones, mini speakers and a cell phone and a webcam among other items. wqad.com

Shootings & Deaths

West Valley City, UT: After a man shoots himself in the leg at Smith's grocery store, his bullet shatters and hits three people
Hugo Padilla calmly wheeled a cart full of groceries out from behind the police tape cordoning off the store where he and his family had been shopping Wednesday afternoon. On his yellow polo shirt, just beneath his chest, was a red smattering of his 3-year-old daughter's blood. Deputy Police Chief Matt Elson said Cervantes walked up to the store about 2 p.m., fired near the entrance area, then fled. Officers took the suspected shooter, 36-year-old Rugino Cervantes, into custody from a nearby apartment complex a few hours later. sltrib.com

Houston, TX: Argument over the price of a Slim Jim leads to shooting
A dispute over the price of a Slim Jim beef stick resulted in the owner of a gas station shooting a man in the leg. The man he shot, Cameron Carson, 25, was taken to a hospital in stable condition. Carson went inside to purchase a Slim Jim. As Carson left, the store owner emerged, saying Carson had only paid $1 and that the Slim Jim actually cost $2.15. Carson shoved the owner during the argument and it was then that the owner took out his gun and shot Carson. click2houston.com

Robberies & Thefts

Pasco, WA: Police looking for alleged Walmart shoplifter who wore a law enforcement hoodie
Police in Pasco are trying to identify a man who was seen trying to take a shopping cart with camping items from a Walmart. Police reports said the man was pictured wearing a hoodie that said "Tri-Tech Law Enforcement" during the alleged shoplift. A Pasco Police officer then saw the man walking with the Walmart shopping cart near the roadway. As the officer attempted to approach him, the man pushed the cart into traffic and ran across the street. The shopping cart contained a tent and a camp ax worth more than $300. keprtv.com

Polk County, FL: Dollar-store robbery suspect may be involved in 20 cases
Polk County deputies have arrested a serial armed robber who is suspected of robbing 20 dollar stores throughout Central Florida and the Tampa Bay area. Terell Covington, 32, of Bartow, has been charged in three robberies at Dollar General and Family Dollar stores in Polk County. Covington is also a suspect in 17 similar robberies in Orange, Osceola, Hillsborough and Manatee counties. Polk detectives worked with multiple Florida law enforcement agencies and the Bureau of Alcohol, Tobacco and Firearms in the investigation. Another man, 27-year-old Joshua Patterson of Lakeland, was arrested for being Covington's getaway driver during a few of the robberies, the release said. facebook.com

Beavercreek, OH: 10 Masked Suspects use rocks to break into Gun shop
Thousands in damages, but suspect fled empty handed. Surveillance video captured an early morning break-in at Palmer Firearms. The store's owner said the suspects got a big surprise after they got inside his gun shop. The suspects around 2:30 a.m. Wednesday parked their cars in front of the store and ran up to the front door. They finally decide to target the large window to the side, and 10 people, including three or four girls, jump and climb into the store. But they can't find any weapons because the owner of the shop, which has been at that location for seven years, removed his merchandise from display. Some of the break-in suspects then turn to vandalism, including one girl who picks up a laptop and smashes it to the floor. mydaytondailynews.com

New Haven, CT: Thief has a Bad Day; fleeing from Home Depot with stolen merchandise, the crook realize he locked the keys to his stolen BMW inside the car

Daytona Beach, FL: 8th Grade Teacher busted with $500 of Target merchandise and dozens of Pain Pills

Portland, ME: Dozens of Armed Robberies since late March

UK: Australia: Oscar-winning director Dustin Black wrongly accused of Shoplifting at Woolworth

Arson & Fire

Sacramento, CA: Fire quickly extinguished outside Sear at Arden Fair Mall; no damage

Sentencings & Charges

Wilmington, NC: Mattress Firm Armed Robber / Kidnapper will serve 72-99 Months for gunpoint robbery holding 2 employees in a back room of the store

Centralia, PA: Domino's Manager sentenced to 2 years probation and restitution for theft of $6,000

Bangor, ME: Connecticut Man Sentenced to Nine Years for Robberies

Aurora, IL: 8 years prison for man in two 2017 Aurora robberies

Submit Your New Hires/Promotions or New Position

Featured Job Spotlights

 

Featured Jobs

To apply to any of today's Featured Jobs, Click Here

Sponsor Today's Internet Jobs 

Great Mentors Make These Commitments, Listen, Share Wisdom
 

Want to Be a great Mentor? Make These 4 Powerful Commitments
According to a Deloitte survey, 60% of millennials desire a mentor. No matter your career path, a mentor can help you grow your skills, abilities and influence, but make sure they commit to these four things. Commit to your dream

Finding the Perfect Mentor To Guide You to Success
A mentor is so much more than a teacher. They help mold the qualities that make you you, and help teach you to overcome challenges, develop your skills and grow in your career. Here's what qualities the perfect mentor should possess. Wisdom is the best teacher

Why Good Mentors Don't Tell You What To Do
Good mentors won't tell their mentees what to do. Instead they will listen and ask relevant questions to bring out the best in that person. Watch this video with Pernille Lopez, former CEO of IKEA North America for more on what a good mentor does. Mentors guide

Shift Your Perspective To Get the Most Out of Mentoring
The best thing about mentorships is that you're not stuck. Building a mentor network can help you advance your career even better than just having one mentor. Here's how to make the most of a mentorship  just by understanding these 3 things. Respect time

Submit Your Group LP Selfie Today!

Success can not happen without conflict. Because success always challenges the status quo, regardless, and mandates change. And in order for change to be successful you need commitment - you need everyone to buy in totally. It's not good enough for everyone to merely agree and move forward because they'll be those that merely go thru the motions and don't believe. One can disagree and still commit but for those who don't engage - commitment is a mere phrase not reinforced by actions.

Just a Thought,
Gus

Not getting the Daily? Is it ending up in your spam folder?
Please make sure to add d-ddaily@downing-downing.com to your contact list, address book, trusted sender list, and/or company whitelist to ensure you receive our newsletter. 
Want to know how? Read Here