The D&D Daily Mobile Edition
LP, AP & IT Security's #1 News Source

Submit Your New Corporate Hires/Promotions
or New Position 

Top Industry News
 

Rethinking Security Surveillance with Intelligent Analytics

Rethink security surveillance with video and audio analytics for real-time monitoring and greater customer insights.

Video surveillance has long been deployed for safety and security purposes, but until recent years most installations were analog-based. These systems were severely limited, often generating grainy, blurry video that could slow down response time to incidents and bog down investigations.

But that’s the past. Today, the industry recognizes the value that IP solutions bring in terms of delivering high-quality video that can be useful for real-time monitoring and fast, efficient post-incident investigation. Advanced network cameras can offer excellent low-light performance, and they can be used to alert security personnel of potential problems, providing real-time situational awareness that can guide fast, effective and often proactive response.

One technology that has changed how IP video surveillance solutions are utilized is video analytics. This technology analyzes video captured by the camera for specific events that may indicate a potential security issue. These include cross line detection, object left behind detection, object counting and more. Advanced analytics add intelligence to cameras while opening up a number of potential security and business applications for video surveillance.

Going Beyond Security into Business Optimization

The benefits of video and audio analytics extend beyond security, allowing video to be used for wider purposes including business optimization. The additional intelligence that can be gleaned from existing cameras can contribute to improved operations and result in a greater return on investment.

The retail industry is a prime example of a market that has embraced “beyond security” applications. This should come as no surprise considering most retailers already have cameras installed at entrances, above cash registers and in other locations throughout their stores. More likely than not, these were installed for security purposes, such as monitoring people as they enter and exit, watching to detect theft and keeping a close eye on POS transactions. Advanced analytics, however, can turn surveillance video into cross-functional video that can be used for marketing, merchandising, customer service and other general business purposes. Integration with other systems further expands the use cases for video surveillance.

Read More Here

U.S. Government Sides With Apple & Amazon
Denying Bloomberg 'Spy Chip" Report
Homeland Security has said it has “no reason to doubt” statements by Apple, Amazon and Supermicro denying allegations made in a Bloomberg report published earlier this week.

It’s the first statement so far from the U.S. government on the report, casting doubt on the findings. Homeland Security’s statement echos near-identical comments from the U.K.’s National Cyber Security Center.

Bloomberg said, citing more than a dozen sources, that China installed tiny chips on motherboards built by Supermicro, which companies across the U.S. tech industry — including Amazon and Apple — have used to power servers in their datacenters. The chip can reportedly compromise data on the server, allowing China to spy on some of the world’s most wealthy and powerful companies.

Apple, Amazon and Supermicro later published statements on their websites. Bloomberg said it’s sticking by its story. And yet, this latest twist isn’t likely to leave anyone less confused, days after the story was first published.

It’s rare for the government to issue a statement on an apparent threat which, according to Bloomberg, is a classified matter that’s been under federal investigation for three years.

The reality is that days after this story broke, it seems many of the smartest, technically minded, rational cybersecurity experts still don’t know who to believe — Bloomberg, or everyone else.

And until someone gets their hands on these apparent chips, don’t expect that to change any time soon. techcrunch.com

"Personal Data"
"The New Oil of the Internet & Currency of the Data World"
GDPR requires unprecedented view of data flows
Why is it important to know where data flows, with whom it's shared and where it lives at rest, and what is the best way of achieving this?

It would be unacceptable for a company not to know where its physical assets were stored, how they got there and who had access to them. So why should it be acceptable for companies to have no visibility over where their data assets live and who can access them?

With the General Data Protection Regulation (GDPR) now in play, there is growing recognition that companies must have better oversight and control over their data. This requires the ability not only to secure data and prevent mishandling and misuse, but also to ensure it is only used or processed according to the permissions granted by the law. Achieving such control requires an unprecedented and granular level of understanding of how data flows through organisational processes across the entire business ecosystem.

Under GDPR, this means companies must be able to anticipate where personal data may end up, and how it may be compromised. This contrasts with the previous trend of collecting data en masse in the hope that it held some enigmatic value waiting to be unlocked. computerweekly.com

Stop Social Engineering at Your Co.
Social Engineering Tester Releases 3 Yrs of Data
"Successful Scammers Call After Lunch"
Analysis of 20,000 voice phishing, or vishing, calls reveals patterns in how social engineers operate and how targets respond.

Voice phishing scams are most successful in the afternoon and least effective on Mondays, according to an analysis of thousands of these "vishing" calls over a three-year time frame.

Chris Hadnagy, founder and CEO of Social-Engineer, and Cat Murdock, a social engineer and pen tester at the company, had the idea to record vishing calls back in 2015. More than 20,000 calls later, they decided to compile the data they collected into a single report. Today, the duo took the stage today at DerbyCon to present their findings.

Of the 20,144 total calls made, 5,690 were completed, meaning the social engineer spoke with someone on the other end of the line. Of the completed calls, agents had a total of 3,017 compromises, a success ratio of 53%. Less than half (45.3%) of the calls resulted in a "shutdown," meaning they weren't able to get the minimum amount of data from their target.

Their calls dug up a total of 8,685 "flags," or pieces of information they had to obtain from their targets. This ranged from Social Security numbers, which they were able to learn 15.6% of the time, to information on internal projects (9.48%), to answers to security questions (1.1%).

Mondays Are The Worst/Fridays Are The Best
An obvious statement, to be fair, but one that very much applies to vishing calls. Monday is the day you're most likely to get someone on the phone – but the least likely to compromise them.

"Monday is a really interesting outlier," Murdock said. The first day of the workweek has a compromise ratio of 29%, which is very low compared with Tuesday (62%), Wednesday (63%), Thursday (58%), and Friday (65%). People are most likely to answer the phone on Monday, which is also the day with the lowest voicemail ratio (60%) and shutdown ratio (70%).

"Monday, I just got back from the weekend, I'm refreshed, I'm ready to rock and roll," he said. "By the time Friday hits, I've been battered like an egg in a pan, and now I just wanna give up and go back to the weekend." What's more, he continued, people are more likely to take Fridays off for long weekends. Few folks take vacation on Mondays, so most people are in the office.

Drilling down into specific times of day, vishing calls are more successful the later it gets. Afternoon seems to be the best time, Murdock said, citing the 65% average compromise ratio.

When people arrive to their desks in the morning, the rate of compromise is lower. They're alert, they're focused, and they're less likely to share sensitive information. Later in the day, the compromise ratio increases, hitting its peak just as employees are getting ready to leave.

"Highest is at 5 p.m.," Murdock told Dark Reading. "People who are potentially working a little bit late and they're really ready [to leave, they'll] tell you what you need to get you off the phone."

Is That Call Really From HR?
The analysis also touched on the pretext, or the social engineer's strategy, for convincing their targets they were legitimate. More than three-quarters (76%) of agents pretended to work with facilities, 74% said they were calling as part of their work with a training department, 72% claimed to have lost the organization's address, and 63% pretended to be calling HR.

Impersonation, a tactic in which social engineers research a specific person and pretend to be that person to elicit information, is the most difficult technique to pull off, Murdock noted.

Hadnagy and Murdock divide the most common pretexts into two themes. One is HR, which encompasses vishing calls related to healthcare, databases, financial questions, open enrollment, portals, training, and wellness. The second was IT, where pretexts relate to audits, badges, databases, security, updates, and VoIP.

Yes, both categories include database-related questions. However, HR-related database calls had a higher compromise ratio (28%) than IT (21% compromise). Open enrollment vishing calls were the most effective, with a 100% compromise ratio. If you're looking to capture key data from HR, a well-timed open enrollment angle could be effective.

Women Are Winning
"Women just do better at social engineering," says Hadnagy, citing the data showing how female social engineers typically outperform males regardless of the target's gender.

This finding applies across all pretexts the team studied, meaning women were more successful in obtaining key information, whether they pretended to be an employee of the target company, a reporter, a facilities worker, IT personnel, or a training manager. The only area in which men were more effective than women was in calling with questions related to a conference. darkreading.com

RFID Needs to Be Part of the Building
Throughout the past five or six years, RFID solution providers have tremendously improved their tags, readers and software. We used to hear about problems reading tags, but that is almost never an issue anymore. We used to hear about the challenges of tagging certain products, such as drill pipes, but now there are tags that work on almost any object.

We've also seen some amazing deployments. Organizations as diverse as Lululemon, BAE Systems, and Florida Fire and Rescue are using RFID to improve their operations, and we're seeing the technology being adopted around the world (see RFID Brings Lululemon's Inventory Accuracy to 98 Percent, Equipment Value Stream Management and RFID at BAE Systems and Florida Fire and Rescue Supplier Extends Visibility via RFID).

However, one area in which there has been very little progress is in RFID becoming part of an organization's infrastructure. Only on rare occasions is the technology deployed as part of a building's physical infrastructure—and that's a shame. RFID should become part of a building, just like running water, lights and heat. This would make it less costly to deploy (retrofitting involves running wires, electricity cables and sometimes conduits), less visible to those using the building, and less likely to be damaged as things move around and more.

Some companies looking at and experimenting with unmanned stores are considering RFID. Amazon has used cameras and weight sensors at its Amazon Go store (see Amazon Aims to Revolutionize Brick-and-Mortar Shopping), while at least one company in Asia is using RFID as well. If that project is successful, it could lead to many more unmanned stores and possibly unmanned areas of conventional stores.

RFID will eventually be built into factories, warehouses, hospitals and other facilities. We need to start educating architects now. If anyone has any suggestions on how to do this, I'm all ears. rfidjournal.com

California mandates manufacturers of internet-connected devices must have unique password capability
The Information Privacy: Connected Devices bill demands that electronics manufacturers equip their products with "reasonable" security features begininng on January 1, 2020, meaning that each electronic product produced in the state will be given a unique password when it is made. secuitymagazine.com

Facebook could face up to $1.6bn fine for data breach in EU Alone, Because of GDPR

e-commerce
Sponsored by The Zellman Group

Amazon employee shared email addresses with third-party seller
Sellers paying for customers' email addresses to game the ratings system
In September, Amazon started investigating reports that some of its employees in the US and China have been leaking data to third-party sellers in exchange for money. Now, the e-commerce giant has notified affected customers that an employee shared their email addresses with a third-party seller. Amazon told The Wall Street Journal that it already fired that particular employee and booted the seller who received the email addresses off the platform. More importantly, it said no other customer information other than those addresses were disclosed.

Amazon didn't clarify whether that former employee was the sole culprit or if they just happened to be the only one caught out of many. It also didn't specify where they're from and didn't reveal the real scope of the issue. engadget.com

Two Cities Get Second Looks From Amazon's HQ2 Search Committee
Amazon representatives have visited all 20 cities on the short list: Toronto, Columbus, Indianapolis, Chicago, Denver, Nashville, Los Angeles, Dallas, Austin, Boston, New York City, Newark, Pittsburgh, Philadelphia, Montgomery County in Maryland, Washington, D.C., Raleigh, Northern Virginia, Atlanta and Miami. Many experts like the odds of Amazon putting down roots in the D.C. area, and Sperling’s Best Places has put its bet on Oatlands, Va. Media reports say Amazon search committee members have made second trips to Miami and Chicago this fall. fortune.com

Online holiday spending to increase by double digits over last year
Digital holiday sales are expected to increase by 14% from last season, growing from $129 billion to $151 billion in 2018. Many of these sales will happen early in the season, and will be largely driven by promotions, according to early findings from Forrester Research’s holiday retail forecast.

According to data, more than one-third of the year’s e-commerce sales will stem from the holiday season. In addition, online holiday retail sales will account for over 32% of total United States e-commerce sales in 2018. chainstoreage.com

Costco’s e‑commerce sales jump 26.2%

Stitch Fix grows its online revenue 23.2%

Tesco chief calls for 'Amazon tax' on goods sold online
 

ORC News
Sponsored by Auror
 

$1M ID Theft & Credit Fraud Scam Hitting Sam's Club & Walmart Stores
9th & 10th Gang Members Get 5 & 2 yrs Prison
In November of 2015, a grand jury issued a true bill of indictment charging ten defendants with engaging in a complicated scheme involving the use of stolen credit information. The indictment alleged that the defendants acquired stolen credit information from overseas hackers, and then encoded the stolen credit information onto plastic gift cards. Members of the conspiracy then took the counterfeit gift cards to Walmart locations in various states and used them to buy genuine Walmart gift cards. After acquiring genuine gift cards, the conspirators took them to Sams Club stores (who accept Walmart gift cards as tender) where they used them to purchase more than $1 Million in cigarettes. The conspirators then sold off the cigarettes for cash to various black market vendors.

SALIFU JALLOW, 33, of Sugarhill, GA, who previously pleaded guilty, was sentenced to 60 months in prison on charges of Conspiracy to Commit Money Laundering and Aggravated Identity Theft. JALLOW was also ordered to serve a three year term of supervision upon release from prison.

ABDOULAIE FRANCIS LOWE NICOLAS, 30, of Raleigh, NC, who previously pleaded guilty, was sentenced to 24 months in prison on the charge of Conspiracy to Commit Money Laundering. NICOLAS was also ordered to serve a three year term of supervision upon release from prison. justice.gov

Boca Raton Man Charged in $229K Fake Amazon Accounts Purchases & Reselling Online
Joseph Sides, 24, of Boca Raton, Florida, was arraigned yesterday in the U.S. District Court in Tallahassee.

Between March 2016 and June 2018, Sides created approximately 501 Amazon accounts using false names, multiple e-mail addresses, and altered shipping addresses to place approximately 1227 orders. Sides allegedly obtained $229,391.42 in merchandise, replacements, and refunds by falsely claiming the merchandise had not been delivered or was damaged. According to the indictment, Sides sold the Amazon merchandise using online retail services, such as eBay, Craigslist, and Gameflip.

The maximum penalty for each of the mail fraud conspiracy, wire fraud, and mail fraud charges is 20 years in prison. The trial is scheduled for November 13, 2018, at 8:15 a.m. at the United States Courthouse in Tallahassee. Sides was released pending trial. justice.gov

Pasco County, FL: Deputies respond to a disturbance at Forever 21;
3 Associates assaulted
On Sept. 29 at approximately 5:46 p.m., four subjects were captured on security video inside the Forever 21 store located within The Shops at Wiregrass. The staff identified the four females from previous thefts at the store. They requested the females to leave. The four females then began throwing clothes on the floor from the store racks. Once outside the two subjects wearing shower caps came back to engage staff members. Three staff members were assaulted. One employee was battered when the female with the blanket spit in her face. facebook.com

Hamden, CT: Police search for 2 female Kohl’s shoplifter - over $1,000 in merchandise stolen
According to police, on Tuesday around 8:00 p.m., officials responded to the Kohl's located at 2380 Dixwell Avenue. During the investigation, officers learned that two women exited the store with more than $1,000 in stolen clothing. wtnh.com

Charlotte County, FL: Distraction techniques used to steal $1,000 of merchandise at Murdock Walmart
Investigators are trying to identify three women they say committed grand theft at a Charlotte County Walmart store this week. According to the Charlotte County Sheriff's Office, the women managed to steal $1,000 worth of merchandise at the Murdock store on Tuesday by using distraction techniques at the register. Similar crimes were reported last month by Southwest Florida Crime Stoppers for incidents at Walmart’s in Lee and Charlotte counties. fox4now.com

Gastonia, NC: Man and 17 year old charged with felony robbery at Target; $600 of electronics
Fred Puryear and Melissa Gleason are accused of swiping four boxes of Fitbit headphones, as well as a pair of Sony headphones, just after noon on Saturday. The merchandise was worth nearly $600. Gleason was arrested at the store. Puryear, 37, was apprehended on Main Street in Belmont, according to Gastonia police reports. Both suspects were charged with felony common law robbery for their roles in the incident. gastongazette.com

Aurora, IL: T-Mobile Burglars hit for over $12,000 in merchandise

Fenton, MI: Two women arrest for theft of over 50 DVD’s valued at $1,200

Lexington, SC: U-Haul truck leads police on early-morning chase; recovering $200 of stolen CVS merchandise

Tsawwassen, British Columbia, CN: Delta police go undercover in Tsawwassen malls for ‘Boost and Bust’

Retail Crime News
 

Home of the Industry's Original
On the Move
 

Submit Your New Hires/Promotions
or New Position
See all the Industry Movement

Featured Job Listings
Sponsored by Delta Lock
Feature Your Job Here For 30 Days -
70% Aren't On the Boards

Daily Jobs
Appearing One Day Only
View our Internet Jobs Archives here

• Store AP Manager - belk -  Roanoke, VA

• Sr Analyst AP - Investigative Analytics - Home Depot - Atlanta, GA

• AP Supervisor - Hudson's Bay - Toronto, ON, Canada

• Area AP Manager - JC Penney - Flint, MI

• Manager LP & Ops Support - Lowe's - Lees Summit, MO

• Manager, Operations & AP - Macy's - Lewisville, TX

• AP Manager - Mister Car Wash - Tucson, AZ

• Mgr LP 1 - Nordstrom - Seattle, WA

• AP District Leader - Rite Aid - Long Island City, NY

• AP Supervisor - Saks Fifth Avenue - Chicago, IL

• AP ASM - Walmart - Brooklyn, CT

• AP ASM - Walmart - Monument, CO

• AP ASM - Walmart - New Bern, NC

Your Career
 

Tip of the Day
Sponsored by Vector Security Networks
 

Sometimes when you're moving so fast and dealing with the mistakes of the day, the frustration levels peak and one can tend to forget that sometimes you've just got to stop, listen and take a breath and maybe talk to a friend about it all. If it's a good friend, they'll bring you back into focus and make sure you don't react too aggressively and make the mistakes even worst. There aren't many friends like that nor ones that you can absolutely trust. But if you've got a couple, make sure you thank them as well for taking the time.

Just a Thought,
Gus

Post Your Tip or Advice!
(content subject to approval)

Upcoming Events

NCORCA Annual Symposium Oct. 10 National Association of Bunco Investigators 2018 Conference Oct. 17-18 Florida Law Enforcement Property Recovery Unit Annual Training Conference Oct. 24-26 SAVE THE DATE Q4 RAM LP Committee Meeting Nov. 7th BJ's Wholesale Inc Corp. Office - Westboro, MA RLPSA Connect Nov. 15

See More Events

Recruiting?
Get your job e-mailed to everyone... everyday
Post on our Featured Jobs Board!

Reach your target audience in 2018 every day!
Request our 2018 Media Kit

Not getting the Daily?
Is it ending up in your spam folder?
Please make sure to add d-ddaily@downing-downing.com to your contact list, address book, trusted sender list, and/or company whitelist to ensure you receive our newsletter. 
Want to know how? Read Here

SUBSCRIBE

FEEDBACK

www.downing-downing.com

Advertise With The D&D Daily

36615 Vine Street, Suite 103
Willoughby, OH 44094
440.942.0671
copyright 2009-2019
all rights reserved globally