8/2/19

LP, AP & IT Security's 1 News Source

Visit us at Booth #407 at RLPSA, Aug 5-6

The first-ever Cybersecurity Women of the Year Awards - August 5th, 2019
The awards will be presented at an inaugural gala during the week of the Black Hat, DEFCON and B-Sides Las Vegas conferences. These conferences bring tens of thousands of industry analysts, hackers, designers, venture capitalists and executives together to discuss risks and threats facing enterprises and society in general. Organizers of the CSWY Awards want to "lighten the mood a bit," of these conferences by bringing together conference participants for a celebration recognizing women in the security space, doing breakthrough work and transforming the industry.

A full list of nominees and details on their work can be seen here.

"It is very rare to talk about the achievements and milestones in cybersecurity," said Carmen Marsh, the organizer of Cybersecurity Women of the Year Awards and CEO of the cyber-risk management company, Inteligenca. "We need to showcase our leaders and how they actually protect businesses and consumers from disasters every day. Those security experts who work in the darkest corners of the digital world deserve their day in the sun."

Some of the cybersecurity industry's largest companies and associations are helping Marsh put together the CWSY event including Microsoft, Intel, Adobe, McAfee, Information Security Systems Association (ISSA), Cloud Security Alliance (CSA) and Zeektek.

"We think celebrating the accomplishments and achievements in our industry will attract more talent into our field," Marsh said. "Seeing that there are already women making a difference will resonate with others who maybe have considered a change, but have been scared off for one reason or another. We need to send a powerful, clear message that women are not only welcome but invited to make distinct and meaningful contributions to the security industry." securitysystemsnews.com

Bottom Line: On Cisco's $8.6M Settlement
Failing to Patch Video-Surveillance Products
While Selling to U.S. Government
A security consultant reported vulnerabilities in Cisco's Video Surveillance Manager in 2009 - but the company ignored the issues and fired the consultant. Violating the US False Claims Act for years.

The whistleblower lawsuit, brought by law firm Constantine Cannon LLP, alleged that Cisco violated the US act when it sold vulnerable video-surveillance systems to federal agencies, state governments, and the District of Columbia. The lawsuit originated from issues in Cisco's Video Surveillance Manager that were reported in 2009 by a security consultant, James Glenn, while working for a Cisco partner. After initially listening to Glenn, the company fired him and continued selling the product, the lawsuit maintained.

The settlement is part of a trend of companies having to increasingly pay fines for their lapses in cybersecurity.

For security companies, the settlement should be seen as a warning that they could be held liable for vulnerabilities in their products if the issues are not handled in a timely manner. darkreading.com

What Security Markets Are Likely To Embrace AI?
Artificial intelligence is on the verge of changing the face of multiple industries - from healthcare to entertainment to finance, from data security to manufacturing to the cars we drive (or that will drive themselves!) In the physical security market, AI has garnered a lot of attention as a buzzword and as a harbinger of things to come. We asked this week's Expert Panel Roundtable: What security markets are most likely to embrace artificial intelligence (AI)?

David Budzinski, Global Vice President & General Manager | Technology & Consumer Products, Johnson Controls
"Integrating AI into security solutions is happening across all industries and is helping to improve operational efficiencies and to provide a more proactive approach into facility security. When coupled with machine learning, AI can identify patterns to improve predictive analytics for a better understanding of facility systems. This data equips security personnel with recommended actions based on historical information and insights from the systems. Predictive analytics also offer corrective action for maintenance needs, limits system downtime and ensures consistent occupant and asset security - a beneficial asset for many industries. For example, if systems go down in a healthcare setting, like a hospital, patient care can be left at serious risk. With more AI-based solutions, the medical staff can remain focused on providing optimal care, helping patients heal in a safe, secure environment."

Jean-Pierre Picard, Manager of Product Marketing, Genetec
"The markets that will embrace AI will depend on which AI techniques you consider. Today, a new generation of video analytics and automatic license plate recognition systems built on machine learning algorithms is already being used in mission-critical applications, such as law enforcement, utilities and transit. Predictive analytics, which project past data into potential future events to help prioritize actions, will likely be another AI-powered application that will gain traction. Since it requires access to large amounts of data, it is likely to be first adopted by organizations that have unified security and operations systems, such as large industrial installations, retail chains and transportation hubs, or customers with large numbers of security sensors, such as citywide surveillance. Anomaly detection is the application that stands to have the broadest adoption. Its use cases are varied, ranging from system health monitoring to dynamically detecting potential cyberthreats and identifying unusual changes in crowds." securityinformed.com

Research shows devices banned by US government lack basic security practices
It Appears the Administration Was Right After All
As the August 13 deadline looms for the US ban on Chinese surveillance cameras, the news cycle is re-engaged with the issue. The panic about banned cameras still being in operation shines a spotlight on both the severity of the issue and the dire need to find a solution.

Through our research, based on tens of millions of embedded device binaries, it's clear that the banned devices lack basic security building blocks and consequently expose users to the security threats that are alleged by the US.

One may ask - are the banned Chinese devices the only vulnerable devices in the field? The answer is surely no. Many devices from various countries also lack a proper security state, however, they were not banned for use by the US government - for example, D-Link camera, Amazon Ring, LG Hom-Bot, Cisco routers, and many more.

As part of deep research conducted by our security team, a few well-known vendors which are widely used were found vulnerable - QNAP, Synology, and many more which cannot be mentioned yet, as VDOO adheres to a responsible disclosure process.

However, the banned Chinese devices have some security issues of the highest severity that could potentially cause significant damage.

Research findings indicate a grim security state.

What can the government and end users do?

One of our recommendations for the US and any other government, as well as for the private end-user, is to use only IoT devices which are certified and standardized according to a reliable body that uses neutral technologies to assess the device's security risks. Such certification can indicate that the most important security requirements were implemented, which dramatically reduces the chances of cyber-attacks or exploits. helpnetsecurity.com

Organizations At Risk for Data Breaches: System Vulnerabilities Increase
by 92 Percent
A new State of The Crowdsourced Security in 2019 study reports a 92 percent increase in total vulnerabilities reported over the previous year. The average payout per vulnerability increased this year by a whopping 83 percent, with average payouts for critical vulnerabilities reaching $2,669.92 - a 27 percent increase over last year.

Mega-bugs like ETERNALBLUE, Double Kill, Meltdown, Spectre, and the vulnerability in Apache Struts2 - which was responsible for the Equifax breach - just a few examples of bugs that were exploited in ways that made headlines and left many systems, users and companies devastated.

In the first half of 2019, there was a 29 percent increase in the number of programs launched in versus the same time the year before and a 50 percent increase in public programs launched. Why: More companies are reaching security maturity and taking their programs public as a part of their corporate social responsibility on the Internet.

Top Five Vulnerabilities Over the Last Year
1.Broken Access Control
2.Sensitive Data Exposure
3.Server Security Misconfiguration
4.Broken Authentication & Session Management
5.Cross-Site Scripting
securitymagazine.com

70% of Orgs Will Use Security-as-a-Service by 2021
More than 70% of organizations will be using Security-as-a-Service by 2021, according to new research from Thycotic.

The privileged access management provider surveyed IT managers and technology decision makers at the KuppingerCole European Identity & Cloud conference in Munich in May, compiling its findings in the Security as a Service on the Rise report.

Two out of three respondents said their organization is already adopting Security-as-a-Service, or will be in the next 12 months, with 70% planning to do so by 2021. Those polled cited reduced costs, faster IT services delivery and greater flexibility as reasons for opting for Security-as-a-Service solutions.

Respondents also indicated they are turning to cloud-based security services to help keep up with rapidly escalating threats, costs and a lack of staff resources with cybersecurity expertise.

"In another interesting result, the survey showed the security functions most frequently moved to Cloud-as-a-Service were led by Privileged Account Management and Identity Access Management," added Carson. infosecurity-magazine.com

ROCKWOOL Chooses Nedap's Global Client Program To Secure Its Offices And Factories Worldwide

Manufacturer ROCKWOOL International A.S. has chosen Nedap's Global Client Programme to secure its offices and factories worldwide. AEOS, the physical security platform by Nedap installed during the programme, enables ROCKWOOL to establish a truly global security policy and unified work processes.

An advanced project rollout, the Global Client Programme is developed for large multinationals and offers several benefits, including standardisation across sites, shorter implementation times and cost efficiencies.

Standardizing Company's Security Measures
ROCKWOOL has 28 factories across the world. The Global Client Programme connects all of these factories and ROCKWOOL's office premises, and standardises the company's security measures throughout the world.

Read More Here

ZKTeco USA Learn How Biometrics & AI Can Reduce Shrink and Generate New Revenue Streams Larry Reed, CEO, ZKTeco USA

ZKTeco is the world's leading developer of biometric solutions. Their products are used by some of the largest retail chains in the country to help reduce shrink. Retailers use ZKTeco biometric readers most often to prevent their employees from misusing keys and badges to gain unauthorized access to inventory, cash room, computer room and other high value rooms. Larry Reed, CEO, ZKTeco USA, discusses how retailers can leverage biometric technology to help reduce shrink and create new revenue streams.

Quick Take 1 with ZKTeco USA
 

Larry Reed, CEO, ZKTeco USA with MCs Joe LaRocca and Amber Bradley

Biometrics have already reached consumers. Just look at the fingerprint reader or facial recognition camera on your phone. If biometrics are a good idea for protecting photos on your phone, Larry Reed, CEO, ZKTeco USA, tells us why it's an even better idea for retailers protecting millions of dollars' worth of product.

EBay Sues Amazon Managers Over Claims of Seller Poaching
New lawsuit followed talks with alleged whistleblower
Ebay's new lawsuit targets Amazon managers who it alleges helped coordinate a scheme to lure sellers off its own marketplace.

EBay is suing three Amazon.com employees who it claims worked to illegally recruit its third-party sellers, the latest twist in a nearly yearlong tussle between the e-commerce competitors.

EBay first raised the allegations in a cease-and-desist letter it sent to Amazon in October saying the Seattle firm had contacted EBay sellers on a platform used by many to communicate, and attempted to persuade them to leave the marketplace. The letter claimed that roughly 50 Amazon sales representatives world-wide had sent more than 1,000 messages to sellers on its platform.

David Grable, an attorney for eBay, said Thursday that the company brought its suit in part because a person with firsthand knowledge of the alleged scheme came forward with new information.

EBay's new lawsuit targets Amazon managers it believes to have helped coordinate the alleged scheme. According to the complaint, the defendants and other Amazon employees directed dozens of sales representatives and assigned quotas, in the U.S. and overseas to set up eBay member accounts to use the platform's internal messaging system to recruit sellers. wsj.com

The top 25 global e-commerce power players are...
Coresight Research, a research and advisory firm, and eShopWorld, a leading cross-border commerce company, partnered to identify and celebrate the top retailers driving global e-commerce excellence today. Each of the winners is a senior executive at a brand or retailer that offers a seamless, localized shopping experience to customers in markets across the globe.

Here is Coresights and eShopWorld's list of the top 25 global E-Commerce power players:

1. Adam Sussman, chief digital officer, Nike
2. Marc Lore, president and CEO, Walmart eCommerce U.S.
3. Andrea Cappi, group global digital director, Max Mara
4. Mary Beth Laughton, executive VP, omni retail, Sephora
5. Andrew Robb, COO, Farfetch
6. Julie Wainwright, CEO, The RealReal
7. Torbjörn Lööf, CEO, Inter Ikea Group
8. Matt Carey, CIO, Home Depot
9. Nicolas Oudinot, chief digital business and innovation officer, Gucci
10. Loren Simon, VP of Digital and Performance, Everlane

See the other 15 here: chainstoreage.com

UK Online shopping code for confusion!
New fraud rules mean you'll need a security code to buy items
but shops and banks aren't ready
Millions of online shoppers could face chaos after a security shake-up that may bar customers without mobile phones. Critics say banks have not done enough to prepare shoppers for the major changes, which are due to take place within weeks.

The new system, aimed at preventing fraud, requires customers to use an access code - typically sent to a mobile - before making purchases online. They must enter this number at the check-out to confirm payment. But Money Mail has discovered a string of issues that could leave shoppers locked out.

● Thousands of Santander customers without mobiles cannot complete purchases.
● The checks could also exclude those who do not get a mobile signal at home.
● Up to a third of purchases could fail.
● Some banks have still not yet warned their customers about the changes.
● Major banks are refusing to let customers 'whitelist' favourite retailers, which means they will always have to input the code.

Almost one in five payments to retailers are online, but under new European legislation, shoppers must soon verify internet purchases with a special code. The idea is to make it harder for fraudsters to go on a spree with credit or debit cards. thisismoney.co.uk

Online Back-To-School Could Grow 14%

Retailers to outsource more e-commerce fulfillment

Toms lets online customers pay in steps

Pinterest continues pinning hopes on e-commerce - adds two new features

Seattle, WA: FBI: Delivery drivers involved in $10M+ Amazon Theft Ring
The two contract delivery drivers working for Amazon had a clear-cut assignment: They were supposed to bring packages from a warehouse south of Seattle to a post office for shipping, or sometimes drive to Seattle-Tacoma International Airport to pick up items that were being returned to the company. Instead, the FBI said in a search warrant affidavit unsealed last month, they routinely stole the items and sold them at pawn shops.

A police detective last summer noticed that one of the drivers had dozens of pawn shop transactions, and thus began an investigation that uncovered a theft ring that sold millions of dollars' worth of stolen goods on Amazon.com in the past six years, the FBI said. According to the search warrant affidavit, two storefront businesses posing as pawn shops bought the goods from shoplifters, then had the items shipped to Amazon warehouses, where they were stored until sold online. Entities associated with the alleged ringleader did at least $10 million in sales on Amazon since 2013, FBI agent Ariana Kroshinsky wrote in her affidavit. The agency said it was awaiting further records from Amazon to determine the full amount. abcnews.go.com

Oklahoma City, OK: Camping World Employee accused of Stealing $300,000 of Property
A former Camping World mechanic is accused of stealing more than $300,000 in property from his employer, including an RV. Investigators said after several RVs went missing, the company hired a private security company who determined it was an inside job. "From RVs to batteries, to TVs, that were inside RVs," said Oklahoma City spokesman Megan Morgan. Over a span of several months, four RVS, including a 2019 Forest River Cherokee, were stolen right off the lot. Also taken were tools from the store's mechanic shop. Store mechanic Ronald Park filed a police report, "alleging several thousand dollars' worth of tools were stolen." After a security company was brought in, they spotted Park's vehicle pull in after hours. "Officers were able to go in and run the suspects name and found he had sold at least 45 RV batteries to local scrap yards," said Morgan.  news9.com

Omaha, NE: Game Store employee may be responsible for over $50,000 of merchandise theft
Omaha police are working a theft investigation spanning two cities and two video game stores. Officers said they found stolen merchandise from Omaha in Lincoln. The owners of both stores said the suspect used to work at the businesses. Omaha and Lincoln police descended on a video game shop in the Capitol City on Thursday. They had a search warrant to retrieve property that police believe someone stole from an Omaha store. "It was someone coming in in the middle of the night, with keys, and spending hours hand picking product," Gameroom owner Chris Thompson said. Thompson said it was a former employee of the location, 19-year-old Anthony Rodriguez.  ketv.com

Austin, TX: Man shoplifted over $36,000 in merchandise from Home Depot stores
A Manor man has been accused of shoplifting more than $36,000 in merchandise from four Home Depot stores in Williamson County from August 2018 through May, an arrest affidavit says. Damon Tucold Marshall, 38, was charged with third-degree felony theft punishable by up to 10 years in jail. An asset protection employee for Home Depot notified police in February about a pattern of 26 thefts at Home Depot stores in Bastrop, Hays, Williamson and Travis counties, the affidavit says. "The Home Depot has dedicated ORC investigators who work daily with law enforcement at all levels to stop crimes like these. We're grateful for the partnership with the Austin Police Department Property Crimes Task Force to make this arrest." In a separate incident, three men - two of whom were Home Depot employees - were charged in May with stealing more than $15,000 in merchandise from a Home Depot in South Austin. statesman.com

Pontiac, MI: 4-Man Crew Sought In Southeast Michigan Pharmacy Burglaries
Police are searching for a four-man crew who has been breaking into pharmacies across southeast Michigan and stealing highly addictive opioid drugs. Security cameras were rolling as the four men, clad in all black clothing with gloves and their faces covered, used a crowbar to get into the store. Once inside, the crew collected bottles of oxycodone, promethazine with codeine, morphine and Xanax, put the drugs in a big bag and then fled the scene, according to police. Investigators believed the suspects have been involved in similar pharmacy break-ins throughout southeast Michigan. wwjnewsradio.radio.com

Grand Rapids, MI: Cellphone Repair Store reports thousands of dollars in merchandise stolen
Lake Effect Phone Repair is the latest of several Grand Rapids cell phone stores that have been burglarized in the past couple weeks. Security camera footage captured from inside lake effect phone repair, shows a handful of people breaking in early Thursday morning. Boost Mobile in Grand Rapids was a victim of a Burglary last Sunday. fox17online.com

Apple Valley, CA: Three wanted in $3,000 phone theft from Best Buy
 

Submit Your New Hires/Promotions or New Position

Featured Job Spotlights

	Profit Protection Analyst Corte Madera, CA As a Profit Protection Analyst, you should have strong analytical skills, be a quick learner, and drive to innovate with both technology and processes...
	Area Loss Prevention Manager Seattle WA, Portland OR, Salt Lake City UT Our Area Loss Prevention Managers ensure safe and secure stores through the objective identification of loss and risk opportunities...
	Manager of District Loss Prevention Stockton, CA You will be responsible for driving company objectives in profit and loss control, sales performance, customer satisfaction, and shrink results...
	District Loss Prevention Manager Sacramento or Hayward, CA Proactive approach to preventing losses/injuries whether they are to our employees, third parties or customers valuables. They include cash in transit, auto losses or injuries...
	District Loss Prevention Manager Las Vegas, NV/Phoenix, AZ Proactive approach to preventing losses/injuries whether they are to our employees, third parties or customers valuables. They include cash in transit, auto losses or injuries...
	District Loss Prevention Manager Baltimore, MD/Northern VA Proactive approach to preventing losses/injuries whether they are to our employees, third parties or customers valuables. They include cash in transit, auto losses or injuries...
	District Loss Prevention Manager Rochester or Syracuse, NY Proactive approach to preventing losses/injuries whether they are to our employees, third parties or customers valuables. They include cash in transit, auto losses or injuries...
	Regional Asset Protection Manager Metro DC/Northern VA The Regional Asset Protection and Safety Manager will lead the Region in shrink reduction and profit maximization efforts...
	Regional Asset Protection Manager Ohio/Kentucky/Pittsburgh The Regional Asset Protection and Safety Manager will lead the Region in shrink reduction and profit maximization efforts...
	Security Industry Specialists, Inc. provides unique security solutions to some of the most successful names in business. Our clients include Fortune 500 companies, designer brands, international events, celebrities, and high-profile executives. We are currently looking for an experienced LP Specialist - Undercover/Plain Clothes. ● Conduct undercover surveillance to detect and apprehend shoplifters ● Recover assets and/or make safe apprehensions ● Must be able to communicate with all levels of staff and management ● Get to create your schedule with your Supervisor ● Loss Prevention Specialist - Tukwila, WA ● Undercover/Plainclothes LP Specialist - San Jose, CA ● Loss Prevention Specialist - Miami, FL ● Loss Prevention Specialist - Minneapolis, MN ● Loss Prevention Specialist - Philadelphia, PA

Featured Jobs

To apply to any of today's Featured Jobs, Click Here

View Featured Jobs
 

Click here to see all LP/AP job postings from across the web,
including single-unit, district and regional positions.

Sponsor Today's Internet Jobs
 

We want to post your tips or advice... Click here

Not getting the Daily? Is it ending up in your spam folder?
Please make sure to add d-ddaily@downing-downing.com to your contact list, address book, trusted sender list, and/or company whitelist to ensure you receive our newsletter. 
Want to know how? Read Here