The D&D Daily Mobile Edition
LP, AP & IT Security's #1 News Source

See All the Executives 'Moving Up' Here   

Submit Your New Corporate Hires/Promotions or New Position 
 

Nedap extends warranty
on iSense EAS portfolio

Nedap announced as of today, warranty on all new iSense systems will be extended for up to 5 years. This applies to connected systems opted with a Fast Remote Service subscription, installed after April 1st.

It is essential for retailers to make sure their EAS systems are well-run, in order to prevent losses by e.g. theft. Nedap provides an online platform, allowing to solve 81% of the service calls remotely, without the need to dispatch a technician to the store. This keeps system downtime to a minimum, saving retailers both time and money on maintaining EAS systems.

Rob Schuurman, Managing Director of Nedap Retail explains: “Connectivity already is widely adopted amongst retailers in order to give their customers the best possible shopping experience. You can tell by the fact that data driven concepts such as Secure Mobile Payment are gaining popularity.

We decided to extend warranty on connected iSense systems in our belief that connectivity is also key in unburdening the modern retailer. Trouble-free operation enables retailers to do what they do best: serve their customers.”

Nedap iSense EAS products have a standard warranty term of 1 year. Extended Warranty will be available for new stores with connected systems for the period of a Fast Remote Service contract (3 or 5 years) from April 1 2019.

About Nedap Retail
Nedap is the Global Leader in RFID-based Retail solutions. Nedap helps retailers permanently prevent losses, optimize stock levels and simplify the multistore retail management using RFID. Nedap’s RFID software platform gives retailers real-time item-level insights into their stock levels and the exact location of each item. Using these real-time insights, retailers are able act much more agile, offer customers a better shopping experience and uplift sales.

Click here to learn more about Nedap's iSense EAS portfolio.

Equifax Response Inadequate & Neglect of Cybersecurity
Congressional Report Rips Equifax for Weak Security
The lack of a strong security culture at Equifax - especially compared its two main competitors - was a key factor contributing to its 2017 data breach that exposed the personal records of 145 million Americans, according to a 71-page Congressional report.

The newly released report from the The U.S. Senate Permanent Subcommittee on Investigations concluded, much like an earlier the Government Accountability Office report, that Equifax failed to follow its own cybersecurity policies, including those spelling out how and when to patch critical software vulnerabilities. Company executives did not prioritize security, and many key decisions were left to lower-level IT employees, the new report concludes. govinfosecurity.com

Women Now Hold One-Quarter of Cybersecurity Jobs
Cultural Change & Female Role Models
New data from ISC(2) shows younger women are making more money than in previous generations in the field - but overall gender pay disparity persists.

Women now actually make up 24% of the cybersecurity workforce – a seismic shift from the perennially static 11% number over the past six or more years. But this new data point, revealed today by ISC(2), comes with a caveat: It now counts women in IT whose daily jobs entail security responsibilities.

While one-fourth still represents a relatively low ratio of women to men, the study shows a clear female youth-movement in security: Millennial women now make up 45% of women in the industry, compared with Millennial-age men, who make up 33% of their gender sector. That's a shift from Generation X, which accounts for 25% of women and 44% of men in cybersecurity.

Mary-Jo de Leeuw, ISC(2) director of cybersecurity advocacy for the EMEA region, says the uptick in younger women entering the cybersecurity field stems from a cultural change as well as earlier exposure to technology and the presence of female role models in tech. darkreading.com

6 Secrets to CISO Job Longevity
Helping Make the Business Successful
Average Tenure 24 to 48 Months
Business focus and communication are key, say long-serving CSO's.

Chief information security officers and other enterprise security leaders often don't remain long enough with the same organization to be able to make a strategic difference. Those that do say business focus, the ability to communicate with key stakeholders and knowing how to manage expectations are key to longevity in the CISO role.

Studies show that the job tenure for most CISOs typically is between two and four years. A widely quoted 2017 survey-based report from analyst firm Enterprise Strategy Group (ESG) and Information Systems Security Association (ISSA) estimated the average tenure of a CISO to be between 24 and 48 months. A more recent Kaspersky Lab study concluded that barely half of all CISOs stay at their job for more than five years, but 64 percent percent of those that do believe they are adequately involved in business decisions compared to 36 percent of CISOs with shorter job stints.

The lure of higher compensation is one major reason why CISOs rarely stay very long in one place. CISOs, like most other security professionals, are a hot commodity. The ESG-ISSA survey showed that 38 percent of CISOs quit their current job for better salary and benefits. That's not the only reason. The same survey showed that 36 percent leave because of a corporate mismatch and 34 percent head for the exits because they feel left out of the executive decision-making process. Other frequently cited reasons included lack of budget, lack of skill and inadequate support from upper management.

CISO's often bare the blunt of the responsibility for data breaches as well.

1. Set and manage expectations
2. Know what you are getting yourself into
3. Decide if you want to be a disruptor or a builder
4. Know how to enlist the support you need
5. Stay on top of the technical stuff
6. Focus on embedding security across the organization  csoonline.com

DNS Monitoring: A red light for retail traffic
More Traffic in Next 4 Yrs Then in Entire History of Internet
Retail Will See More Sophisticated & Organized Attacks
The underlying reality is that the retail industry—which surely faces enough challenges in the digital era—represents a ripe and juicy target for global cybercriminals. And moving forward, as we see even more consumer-friendly technology advances and changes in buying habits, we’re going to see more dangers in the threat matrix and more sophisticated and organized attacks.

DNS is how data travels around the Internet, making it the singular medium used to communicate during coordinated criminal activities. As such, it provides heightened visibility into every threat, from malware to data exfiltration, and helps security professionals identify risks even before they become truly dangerous.

Most security executives know this. A new study of chief information security officers (CISOs) at 30 large enterprises found that a whopping 97% see the value in monitoring, threat detection, attack blocking and analytics at the DNS level to enhance security. But whether this translates into specific measures to conduct deep DNS-level monitoring is a different question.

One reason for this DNS-level security disconnect may be that with the constant emphasis on new technologies driving new capabilities, the old foundation gets the short shrift. The sheer volume is also a challenge.

To put it bluntly, we’ll get more traffic in the next four years than in the entire history of the Internet. With more traffic comes more attacks.

That makes for a lot of traffic, and being at the intersection is a serious challenge. But effective security at the DNS level is a critical weapon in the battle to avoid becoming one more entry in the long list of hacked retailers. chainstoreage.com

Protect Data From Departing Employees
Former Employees Can Expose Sensitive Corporate Data
Biggest Threats: Former IT & Terminated Employees
Former employees who have access to sensitive corporate data pose a significant risk to companies. To protect data from being exposed by outgoing employees, businesses should create an inventory of what systems employees can access, according to Avi Gesser, a partner at law firm Davis Polk & Wardwell LLP.

Former employees may inadvertently expose sensitive information when they discuss past work in personal online posts, he said. Companies need clear guidelines for what information employees can share after they leave, Mr. Gesser said.

In addition, businesses should consider hiring third-party vendors to monitor the dark web for stolen information, he said.

Is it common for companies to experience data theft or exploitation from former employees?

It’s happening more often than people imagined ... What we’ve seen lately is, especially on the IT side, to the extent that people are contractors or IT employees and they’ve written code or some pieces of software for the company, they like to use that as their resumé. They will take code that they’ve written and they will show it on a bunch of sites where people do that kind of stuff, like GitHub. They inadvertently post things that are sensitive.

Are there technological tools or procedures that could help companies protect their data from former employees?

A helpful tool is the ability to remotely wipe data from phones and laptops. If you have a circumstance where somebody gets terminated and they’re not coming into the office ... and they’re not going to voluntarily give up their company phone or their company laptop, or their email on their personal phone, the ability to remote-wipe can be quite valuable. cmail20.com

FileTSAR: Free digital forensic investigations toolkit for law enforcement
Purdue University cybersecurity experts have created FileTSAR, an all-in-one digital forensic investigations toolkit for law enforcement.

FileTSAR, which stands for Toolkit for Selective Analysis & Reconstruction of Files, combines open source tools and code wrappers to provide a tool for network forensic investigators to capture, selectively analyze, and reconstruct files from network traffic.

The toolkit collects data at the network packet level and allows investigators to reconstruct documents, images, email and VoIP sessions for large-scale computer networks.

“The current network forensic investigative tools have limited capabilities,“ said Kathryn Seigfried-Spellar, assistant professor of computer and information technology, and lead of the research team.

“They cannot communicate with each other and their cost can be immense. This toolkit has everything criminal investigators will need to complete their work without having to rely on different network forensic tools.” helpnetsecurity.com

More Universities Halt Work with Huawei Following Federal Charges

What Is A Zero-Day Vulnerability?

A zero-day vulnerability is a software vulnerability unknown to the vendor or maker of the target software. Until the vulnerability is known, hackers could exploit it. Google Chrome recently had a zero-day that was exploited by hackers. It is important to always patch or update your software regularly and address zero-days once they are discovered.

Turning a Battleship: 'One Way' That Works

Mike Lamb, Vice President,
Asset Protection & Safety,
the Kroger Company

The phrase “turning a battleship” could describe the challenge Mike Lamb faced when he joined the Kroger Co. in 2017 as Vice President of Asset Protection & Safety. Restructuring a department is no easy task. But adding the component of centralizing over 20 separate brands adds another dimension that impacts the whole company and requires an element of political maneuvering, sensitivity, sales skill, and confidence. Mike shares how he managed the change and helped move the needle for Kroger.

Episode Sponsored By:

Joe & Amber Play Their Greatest Hits

Quick Take 15

with MCs Joe LaRocca and Amber Bradley

Joe and Amber reminisce on some of their favorite LPNN topics, advice, and shticks from their Quick Takes over the years – including the “Wayne Hoover” LinkedIn test, travel tips, favorite crime TV shows, and more.

PayPal will no longer reimburse sellers for fees
when it processes refunds for buyers
PayPal Holdings Inc. is changing its seller refund reimbursement policy.

When a seller issues a partial or full refund to a buyer via PayPal, the fees paid by the seller to PayPal will no longer be returned to the seller: “We’re changing how we treat refunds. If you refund (partially or fully) a transaction to a buyer or a donation to a donor, there are no fees to make the refund, but the fees you originally paid as the seller will not be returned to you,” the amended PayPal policy says.

What this means is PayPal will keep the fees it originally charged the seller for the purchase, which ends up costing sellers—sometimes big bucks depending on the item purchased–when the buyer decides he wants a refund within the parameters of the seller’s refund policy. digitalcommerce360.com

CNBC: Amazon demotes private label ads

Microsoft reportedly planning an e-commerce competitor to Shopify

Smartphones Will Account for More than One-Third of Ecommerce Sales in 2019

Online retailer's 'horror house' sheets and 'bloody' shower curtains
are getting mixed reactions online

Study: Grocery shoppers active online, but ordering not at top of the list

Cumming, GA: $40K Worth Of Sunglasses Stolen From Sunglass Hut In 4 Minutes
The report said an alarm went off for glass breaking around 2:46 a.m. A deputy arrived at 2:50 a.m. and noticed the glass front door had been smashed in. Deputies said the business was ransacked and sunglasses were scattered on the floor. patch.com

York County, PA: Florida man and woman nabbed for $12,000 Walmart gift card theft operation
A Florida couple got to "work" quickly when they arrived in Pennsylvania earlier this month, allegedly taking more than $12,000 in gift cards and items from six Walmart stores before they were caught in northern York County. James Louis West, 25, and Tiesha Reneice Wimbush, 28, both of Tampa, Fla., were arrested Friday at the Walmart in Newberry Township. The two face charges of organized retail theft and conspiracy to commit organized retail theft. ydr.com

Wood-Ridge, NJ: Three arrested with $1,800 of stolen merchandise from CVS
A man and woman entered the CVS Pharmacy and began to fill three large bags with various types of over-the-counter medications. An alert store manager observed the shoplifting and notified the Wood-Ridge Police Department immediately as the suspects were filling the bags and eventually exited the store. Police observed the two suspects exit the store with the three large bags filled with merchandise attempting to get in a get-a-way car. Three suspects were arrested on theft and possession charges. tapinto.net

Pleasant Hill, CA: Dick’s Sporting Goods hit twice in same day by Shoplifter,
Armed Robbers
At a Dick's Sporting Goods in Pleasant Hill, what started as a $1,200 dollar shoplifting spree turned into a full-on armed robbery when one of the suspects brandished a sharp box cutter toward a store employee. This happened Sunday around 1:30 p.m. Pleasant Hill Police released still images of the three men and a woman as they exited the store with the arms loaded with stolen merchandise. A couple hours after the robbery, the same Dicks Sporting Good was hit by another pair of shoplifters. "Another organized theft of about $500 worth of merchandise at the same business,” police said. kron4.com

Glen Rock, NJ: Two men accused of stealing 63 containers of deodorant and 21 packs of gum from CVS
Police responded to the store at 5:39 p.m. after they received a call that two men were shoplifting, and a store employee was able to give police a description of the men, said Chief Dean Ackermann. Officers found Joseph Minniti, 33, and Aleksandr Voronin, were arrested. northjersey.com

Costa Mesa, CA: Man takes $5,000 bicycle on test ride, never returns

Indianapolis, IN: Three women charged with Shoplifting at multiple stores; search found gun and drugs

Submit Your New Hires/Promotions
or New Position
See all the Industry Movement

Feature Your Job Here For 30 Days -
70% Aren't On the Boards
Post your job listing

View Featured Jobs

View our Internet Jobs Archives
 

Knowing the basic interview questions is one thing. Having the answers is another. What's more important is communicating openly and honestly in a professional manner that shows thought, vision and your business knowledge. Try to apply your background to the interviewer's business and how you can impact it and add value. The key to a successful interview is bridging the gap between your background and the prospective employer's company and needs. Preparation-preparation-preparation!

Just a Thought,
Gus

Post Your Tip or Advice!
(content subject to approval)

See More Events

Recruiting?
Get your job e-mailed to everyone... everyday
Post on our Featured Jobs Board!

Not getting the Daily?
Is it ending up in your spam folder?
Please make sure to add d-ddaily@downing-downing.com to your contact list, address book, trusted sender list, and/or company whitelist to ensure you receive our newsletter. 
Want to know how? Read Here

SUBSCRIBE

FEEDBACK

www.downing-downing.com

Advertise With The D&D Daily

36615 Vine Street, Suite 103
Willoughby, OH 44094
440.942.0671
copyright 2009-2019
all rights reserved globally