9/10/20

LP, AP & IT Security's #1 News Source

Johnson Controls releases mask detection, intelligent person search and more in victor/ VideoEdge 5.6 update
Johnson Controls, the global leader for smart and sustainable buildings, introduces the latest generation of the Tyco American Dynamics victor/ VideoEdge solution, which introduces powerful features such as Intelligent Person Search, Area Occupancy, new Event Management hub, 64-bit client, and NVR Network Interface Card bonding for increased bandwidth.

New victor/ VideoEdge AI features give security operations an advantage over potential threats with shortened response times and more accurate intelligent search capabilities. These AI capabilities equip customers with a comprehensive, intelligent solution for high accuracy, and far greater power, giving their business a superior advantage against potential threats. Read More

Johnson Controls introduces Tyco Software House iSTAR Edge G2 for powerful, cyber-hardened, standalone physical access control
iSTAR Edge G2 offers an optional Power over Ethernet (PoE) module that provides ample power for two doors, while also allowing the controller to leverage existing network infrastructure to reduce installation costs. Additionally, iSTAR Edge G2's firmware provides users an advanced access control feature set, including OSDP and peer-to-peer clustering and allowing a local database of up to one million cardholders. Read More
 

US: Over 6.5M Cases - 195K Dead - 3.8M Recovered
Worldwide: Over 28.2M Cases - 911K Dead - 20.2M Recovered

Private Industry Security Guard Deaths: 186   Law Enforcement Officer Deaths: 101
*Red indicates change in total deaths

What does it take for companies to survive in today's fast-changing landscape? The secret: balancing consumers' often competing desire for privacy, security and convenience.

That's no easy task. Technological innovations have now made it possible to keep consumers safer than ever before, while offering brands never-imagined insight into consumer behavior. And yet, data breaches and privacy scandals undermine consumer confidence on a daily basis.

It's time for a new model. In The New Rules of Consumer Privacy: Building Loyalty with Connected Consumers in the Age of Face Recognition and AI, FaceFirst CEO and author Peter Trepp has devised a set of rules that will help companies uphold consumers' privacy without sacrificing their security and convenience. By following these rules, brands can create a win-win scenario that will maximize revenue, reduce crime, provide consumers with the best experience possible and ensure that consumers' privacy is reasonably protected.

Included in The New Rules of Consumer Privacy:

● The Five Privacy Principles every company must follow
● The new rules of responsible data handling, according to leading academics and visionaries
● How technology adoption has forever changed our expectations of privacy
● How to deliver security, privacy and convenience at the same time
● Why transparency matters to brand loyalty
● The global legislative landscape
● The future of Artificial Intelligence

This book is a must-read for entrepreneurs, business leaders and anyone curious about face recognition, artificial intelligence or the future of privacy. Here's how to order your copy.

About Peter Trepp
Peter Trepp is CEO of FaceFirst, a global patented enterprise-grade facial recognition software platform designed to be scalable, fast and accurate while maintaining the highest levels of security and privacy. As an executive leader, investor and entrepreneur, Peter has helped numerous technology companies achieve successful exits, including CSC's purchase of ServiceMesh, BlackLine's sale to Silver Lake Sumeru, and RedHat's acquisition of Inktank. He earned his MBA at the UCLA Anderson School of Management and BS degree in Economics from UC Irvine. Peter is a widely quoted industry expert whose thought leadership has appeared in the Wall Street Journey, New York Times, Bloomberg, Digital Journal, Education Week, Business Insider and elsewhere.

The high number of claims comes to confirm previous reports from multiple cyber-security firms that ransomware is one of today's most prevalent and destructive threats.

"Ransomware doesn't discriminate by industry. We've seen an increase in ransom attacks across almost every industry we serve," Coalition said, one of the largest providers of cyber insurance services in North America.

"In the first half of 2020 alone, we observed a 260% increase in the frequency of ransomware attacks amongst our policyholders, with the average ransom demand increasing 47%," the company added.

Among the most aggressive gangs, the cyber insurer listed Maze and DoppelPaymer, which have recently begun exfiltrating data from hacked networks, and threatening to release data on specialized leak sites, as part of double extortion schemes.

But besides ransomware incidents, Coalition said it also recorded a spike in funds transfer fraud attacks up 35% and business email compromise (BEC) events up 67%. zdnet.com

New Type of Ransom - Pay Up or Blow Up
Bomb-Threat Spammers: Give Us $20,000 Or We'll Blow Up Your Office
An insidious new type of spam email is threatening to blow up offices unless the attackers receive $20,000, according to security company Kaspersky.

The empty threats were picked up by the security company's junk mail traps in late August and signify a malevolent new twist in spam extortion.

"My recruited person hid a bomb (Tetryl) in the building where your business is conducted," reads the text of one such spam message. "It was assembled according to my instructions. It is small and covered up very well, it is impossible to damage the building structure by this explosive device, but there will be many wounded people is [sic] case of its explosion."

"My man is controlling the situation around the building. If he notices any suspicious activity or policeman [sic] the device will be blown up."

The message goes on to demand $20,000 in the cybercriminals' currency of choice, Bitcoin, to "call off my mercenary".

The threats are, of course, fake - and spectacularly badly timed given that many offices are now almost deserted because of the ongoing Coronavirus pandemic. inhomelandsecurity.com

Ransomware-as-a-Service Business Booming
Meet the Middlemen Who Connect Cybercriminals With Ransomware Victims
Ransomware operators looking for victims can find them on the Dark Web, where initial access brokers publish listings containing vague descriptions of businesses they've managed to breach.

Initial access brokers, the "middlemen" of ransomware attacks, have noticed demand for their services surge as ransomware-as-a-service (RaaS) gains popularity. Their listings have steadily increased over the past two years, with a significant spike in the past six months, according to Digital Shadows researchers who today published an analysis of these threat actors.

The job of an initial access broker is to handle the initial requirements of an attack and streamline the process so RaaS operators can launch a successful infection. The growing reliance on RaaS has created a market for initial access brokers to flourish, explains threat intelligence team lead Alec Alvarado.

"There is a lot of pressure placed on ransomware affiliates to feed ransomware developers with victims to generate cash flow," he says. "If an affiliate does not meet the developer's needs, they will be booted from the affiliate program, losing money." darkreading.com

More Ransomware News- Another Study Shows 7-Fold Increase
Ransomware: Huge rise in attacks this year as cyber criminals hunt bigger pay days
Researchers warn of a seven-fold rise in ransomware attacks compared with last year alone - and attackers are continually evolving their tactics.

Ransomware attacks have been on the rise and getting more dangerous in recent years, with cyber criminals aiming to encrypt as much of a corporate network as possible in order to extort a bitcoin ransom in return for restoring it. A single attack can result in cyber criminals making hundreds of thousands or even millions of dollars.

It's something that cyber criminals have been capitalising on despite the changing working circumstances with more people working remotely during 2020, with Bitdefender's Mid-Year Threat Landscape Report 2020 claiming a 715% year-on-year increase in detected - and blocked - ransomware attacks. zdnet.com

State Data Breach Notification Laws - September 2020
While most state data breach notification statutes contain similar components, there are important differences, meaning a one-size-fits-all approach to notification will not suffice. What's more, as data breaches continue to rise, states are responding with increasingly frequent and divergent changes to their statutes, creating challenges for compliance. Organizations must make it a priority to monitor these changes to prepare for and respond to data breaches.

For a summary of basic state notification requirements that apply to entities who "own" data, download Foley's State Data Breach Notification Laws Chart. This chart is current as of September 1, 2020, and should be used for informational purposes only because the recommended actions an entity should take if it experiences a security event, incident, or breach vary depending on the specific facts and circumstances. jdsupra.com

A First for a Supermarket Chain
Ball's Price Chopper in Kansas City opens CBD store-within-a-store
A Ball's Price Chopper supermarket in Kansas City, Mo., has partnered with CBD manufacturer and retailer American Shaman to create the first CBD store located within a multi-store grocery franchise in the country, according to the two companies. The 500-square-foot store-within-a-store opened in early August.

Ball's Food Stores operates 26 supermarkets under the Hen House Market, Price Chopper, Sun Fresh and Payless Discount Foods banners in Kansas City and surrounding markets. The Ball's Price Chopper location with the American Shaman store is at 500 NE Barry Road in Kansas City. supermarketnews.com

Hemp industry struggles with federal regulations
Hemp - and the CBD products that can be made from it - may have been legalized by the 2018 federal farm bill, but members of the nascent industry say new federal rules make it almost impossible to make hemp products without breaking the law.

An alphabet soup of federal and state agencies oversees the growth, processing and distribution of hemp and its byproducts. The US Drug Enforcement Agency now has released its interim rule for hemp products, joining the U.S. Department of Agriculture, which has had an interim rule in place for nearly a year. cannabisbusinessexecutive.com

Oregon's marijuana businesses face threat from devastating wildfires;
1 in 5 under some evacuation level statewide
Statewide, an estimated 20 percent of state-licensed marijuana businesses - roughly 408 - face some level of evacuation, the Oregon Liquor Control Commission said Wednesday. That includes stores, marijuana processors and producers.

Of those, the agency said 73 marijuana producers, most of them outdoor farms, have been ordered to evacuate. cannabisbusinessexecutive.com

(Meaningless?) Federal Vote on Marijuana Legalization is on the Horizon

Greenstop launches its cannabis vending machine in California dispensaries

The pandemic has Maine medical marijuana business owners rethinking recreational sales

Member Exclusive Event
RH-ISAC Organized Retail Crime (ORC) Working Group Meeting
- Fri, September 11 at 1:00 PM EST
Please join the RH-ISAC Organized Retail Crime (ORC) Working Group for our monthly meeting to discuss best practices and mitigation methods for threats that fall under the umbrella of traditional ORC activity or fraud related activity that has both a physical and digital component.

The audience for this working group includes RH-ISAC core members who have a tactical or operational based activities associated with loss prevention or fraud. This could include analysts and fraud practitioners from either security, loss prevention, asset protection and/or other departments within the member organization.

Contact membership@rhisac.org if you'd like to join this meeting or have any questions.

 

Fairfield, CT: Two men stole $2,000 in Apple Watches from a T-Mobile store during business hours
The incident occurred just before 5 p.m. at the retailer in the 500 block of Tunxis Hill Road, police said. A man entered the store and asked an employee if T-Mobile carried a specific item, according to police. Then, while one worker was in the back room looking for the item and another employee was at the counter, the man ripped the security sensors off four Apple Watches and handed them to his accomplice as the pair left the store, police said. Later Tuesday, law enforcement reported two young men matching the description of the Fairfield thieves had tried to steal watches from a T-Mobile in Westport, according to police, who added T-Mobile stores in Hamden and Branford had similar thefts Tuesday. patch.com
 

Update: Lincoln, NE: Thousands in merchandise stolen from Gateway's Finish Line Over 2,000 dollars worth of merchandise was stolen from the Finish Line in Gateway Mall, 6100 "O" St. The theft took place on Sunday, Aug. 2, around 2:10 p.m. Security cameras caught four women on camera stuffing bags with store products and merchandise, before exiting the area without paying. Finish Line provided Lincoln police with the security footage, which identified the four suspects. klkntv.com

Murfreesboro, TN: Assault and Shoplifting of over $1,600 in Perfume
from Ulta Beauty
It happened at the ULTA Beauty Store in The Avenue on Medical Center Parkway in Murfreesboro... Now, Murfreesboro Detectives need your help identifying the woman accused of assaulting the store manager and stealing more than $1600 in designer perfume and cologne from the store. The female (pictured) is accused of entering the store and filling a hand-basket with well over $1,000 in perfumes. When a store manager approached the female at the front doors of ULTA to confront her before leaving, the unknown female shoved the manager out of the way and ran out of the store with the merchandise in hand, according to MPD. Again, the unknown woman is accused of assaulting the manager of the ULTA store and then stealing over $1,600 in fragrances. The incident unfolded on September 2, 2020. wgnsradio.com

Fairlawn, OH: Man busted with $1300 of clothing in a Duffle Bag at Summit Mall
Employees of a mall store reported Sept. 2 a man took a duffle bag from a display, filled it with clothing items and attempted to leave the store without paying $1,338 for the merchandise. The Turner Street man was arrested for felony theft, banned from all stores in the chain and released with a court summons. akron.com

Montrose, OH: Man steals $500 Tv with an Empty Box, and Repeats across town
Employees of a store reported Aug. 29 a man entered the store carrying a box and stated he was returning a TV. A sticker was placed on the outside of the box, and he was admitted to the store, where he placed a $459 TV inside the box, which employees didn't realize had been empty, and left without paying for it. Employees stated he did the same thing at the business' Canton store. akron.com

Richfield, MN: Theft was reported on the 1000 block of 78th Street West (Best Buy/ Ulta Beauty Plaza)
Three suspects took $4,300 in merchandise over the course of eight days before fleeing in vehicles. hometownsource.com

Submit Your New Hires/Promotions or New Position

Featured Job Spotlights

 

	Area Loss Prevention Manager Pittsburgh, PA - posted September 10 Our Area Loss Prevention Managers ensure safe and secure stores through the objective identification of loss and risk opportunities. Our Area Loss Prevention Managers plan and prioritize to provide an optimal customer experience to their portfolio of stores. They thrive on supporting and building high performance teams that execute with excellence...
	Manager of District Loss Prevention Seattle, WA - posted August 28 Will be responsible for driving company objectives in profit and loss control, sales performance, customer satisfaction, and shrink results. District Loss Prevention Managers are responsible for leading Loss Prevention functions within a specific operations district and for collaborating with Store Operations and Human Resources in an effort to prevent company loss...
	District Loss Prevention Manager Fort Wayne, IN - posted August 24 The District Loss Prevention Manager ensures shrinkage control and improves safety in the stores through proper investigation and training. This position is responsible to provide feedback, guidance and protection for our Team Leaders and Associates. This role has oversight and responsibility for approximately 16 to 20 store locations...
	Senior Asset Protection Specialist Santa Monica, CA - posted August 6 The Senior Asset Protections Specialist contributes to REI's success by mitigating and reducing shrink (including theft and fraud by customers and employees) and increasing physical security for people and products in a specified retail store...
	Asset Protection, Retail Safety and Security Specialist Bellevue, WA - posted August 6 This job contributes to REI's success by ensuring the security and safety of your store team and members by providing a presence on REI property and at events. Activities include but are not limited to: fostering partnerships with staff and taking action to address shrink and security...

Featured Jobs

To apply to any of today's Featured Jobs, Click Here

View Featured Jobs   |   Post Your Job
 

We want to post your tips or advice... Click here

Not getting the Daily? Is it ending up in your spam folder?
Please make sure to add d-ddaily@downing-downing.com to your contact list, address book, trusted sender list, and/or company whitelist to ensure you receive our newsletter. 
Want to know how? Read Here

FEEDBACK    /    downing-downing.com    /    Advertise with The D&D Daily