14 min read

This Week's [in]Security - Issue 249

Picture of CG Blogger CG Blogger : Jan 9, 2022 7:59:00 AM

[in]security cryptography COVID-19 bluetooth Log4shell

Welcome to This Week’s [in]Security. Skimmers, Training, Payments. Big-Hacks: Log4shell, EOL impediments, prevention, Log4-like vulns. New breaches: DatPiff, FlexBooker, Uscellular, McMenamins, healthcare. New Ransomware, Follow-ups & Fall-out. Privacy. Laws & Regs – US, World, Standards. Defense: cryptography, zero-day-repository, anti-extremism. Vulnerabilities, copied commands, Y2K22, android, vm ware, Bluetooth crypto. Cybercrime - Trends: Malsmoke, BadUSB, cyber-mercenaries, fake shut-downs. Supply chain sabotage. Nation States. Crime & Enforcement. Other Risks: Norton crypto-miner inside, Signal, AI & algorithms, false-positives. Health, Safety & Environment. Covid-19: Spread, Curves, Waves, and Variants; Response; Treatments; Immunity; Learned; Impact; Covid Compliance. Innovation and more.

News and announcements relating to Payment Security, PCI, Card Brands, Payments, Payment Malware and Fraud, and Payment Related Compliance.

Payment skimmers/malware/fraud:
- Data Skimmer Hits 100+ Sotheby's Real-Estate Websites https://threatpost.com/data-skimmer-sothebys-real-estate-websites/177347/
- Hackers use video player to steal credit cards from over 100 sites https://www.bleepingcomputer.com/news/security/hackers-use-video-player-to-steal-credit-cards-from-over-100-sites/
Other educational events, webinars, courses:
- PCI Training Update for 200: Instructor led, Informational and Certification training in 2022 SSF https://www.pcisecuritystandards.org/program_training_and_qualification/secure_software_assessor
- Multi-Cloud Virtual Events: DevSecOps & ZTA for Cloud-Native Applications (Training January 26 12:00 PM – 2:30 PM EST, Conference Jan 27 11:00 AM – 5:00 PM EST) https://content.govdelivery.com/accounts/USNIST/bulletins/3040ec2
Other payment related:
- The 51% Attack: Crypto's Double-Spending Achilles Heel https://www.pymnts.com/cryptocurrency/2022/51-percent-attack-crypto-double-spending-achilles-heel/
- Crypto platform ARBIX flagged as a rugpull, transfers $10 million https://www.bleepingcomputer.com/news/security/crypto-platform-arbix-flagged-as-a-rugpull-transfers-10-million/
- Federal documents warn of sweeping implications if ‘digital loonie' adopted https://globalnews.ca/news/8486052/digital-loonie-cryptocurrency-canada/

Breaches / Ransomware / Leaks

Covering breaches, leaks, data exposures, ransomware (as potential breach), and their fallout.

Major incidents:
- FTC to Go After Companies that Ignore Log4j https://threatpost.com/ftc-pursue-companies-log4j/177368/
- EoL Systems Stonewalling Log4j Fixes for Fed Agencies https://threatpost.com/eol-systems-stonewalling-log4j-fixes-for-fed-agencies/177475/
- Log4j Highlights Need for Better Handle on Software Dependencies https://www.darkreading.com/application-security/log4j-highlights-need-for-better-handle-on-software-dependencies
- Microsoft Sees Rampant Log4j Exploit Attempts, Testing https://threatpost.com/microsoft-rampant-log4j-exploits-testing/177358/
- NHS Warns of Hackers Targeting Log4j Flaws in VMware Horizon https://thehackernews.com/2022/01/nhs-warns-of-hackers-targeting-log4j.html
- Log4Shell-like Critical RCE Flaw Discovered in H2 Database Console https://thehackernews.com/2022/01/log4shell-like-critical-rce-flaw.html
New Breaches:
- DatPiff - 7,476,940 breached accounts https://haveibeenpwned.com/PwnedWebsites#DatPiff
- 3.7M FlexBooker Records Dumped on Hacker Forum https://threatpost.com/flexbooker-records-dumped-hacker-forum/177460/
- FlexBooker - 3,750,176 breached accounts https://haveibeenpwned.com/PwnedWebsites#FlexBooker
- NY OAG: Hackers stole 1.1 million customer accounts from 17 companies https://www.bleepingcomputer.com/news/security/ny-oag-hackers-stole-11-million-customer-accounts-from-17-companies/
- UScellular discloses data breach after billing system hack https://www.bleepingcomputer.com/news/security/uscellular-discloses-data-breach-after-billing-system-hack/
- Grass Valley discloses 2021 data breach https://www.databreaches.net/grass-valley-discloses-2021-data-breach/
- Fired University of Utah researcher exposes breaches in student data https://www.databreaches.net/fired-university-of-utah-researcher-exposes-breaches-in-student-data/
- Shopping Platform PulseTV Discloses Potential Breach Impacting 200,000 People https://www.securityweek.com/shopping-platform-pulsetv-discloses-potential-breach-impacting-200000-people
- McMenamins Data Breach Affects 12 Years of Employee Info https://threatpost.com/mcmenamins-data-breach-employee-info/177336/
- Cyberattackers Hit Data of 80K Fertility Patients https://threatpost.com/cyberattackers-data-80k-patients-fertility-centers-illinois/177467/
- Jefferson Surgical Clinic notifies 174,769 about June, 2021 data breach https://www.databreaches.net/jefferson-surgical-clinic-notifies-174769-about-june-2021-data-breach/
- Online Pharmacy Service Ravkoo Discloses Data Breach https://www.securityweek.com/online-pharmacy-service-ravkoo-discloses-data-breach
- Saltzer Health Says Patient Data Exposed in Cyberattack https://www.securityweek.com/saltzer-health-informs-patients-personal-information-exposure
New Ransomware and "Incidents":
- Hackers Hit Major Portuguese Media Group, Take Down Websites https://www.securityweek.com/hackers-hit-major-portuguese-media-group-take-down-websites
- New Mexico's Bernalillo County Investigates Ransomware Attack https://www.darkreading.com/attacks-breaches/new-mexico-s-bernalillo-county-investigates-ransomware-attack
Follow-ups and fall-out:
- The Biggest Data Breaches, Hacks Of 2021 https://packetstormsecurity.com/news/view/32955/The-Biggest-Data-Breaches-Hacks-Of-2021.html

Privacy

Articles about privacy related news, risks, and trends.

WebSpec, a formal framework for browser security analysis, reveals new cookie attack https://www.theregister.com/2022/01/08/webspec_browser_security/
US counterintelligence shares tips to block spyware attacks https://www.bleepingcomputer.com/news/security/us-counterintelligence-shares-tips-to-block-spyware-attacks/
6 Ways to Delete Yourself From the Internet https://www.wired.com/story/delete-yourself-from-internet/

Laws, Regulations, Platforms, Standards, and Public Policy

News about laws, regulations, platform rules, and standards affecting security, privacy, technology, and public interest.

US:
- US Supreme Court scrutinises Biden vaccine mandates https://www.bbc.co.uk/news/world-us-canada-59916467
World:
- France fines Google and Facebook over cookies https://www.bbc.co.uk/news/technology-59909647
- UK data watchdog seeks talks with Meta over child protection concerns https://www.theguardian.com/technology/2022/jan/09/uk-data-watchdog-seeks-talks-with-meta-over-child-protection-concerns
- SlimPay fined €180k after 12 million customers' bank data publicly accessible for 5 years https://www.theregister.com/2022/01/04/slimpay_breach_fine/
- Australian Parliamentary security committee review backs the operation of controversial TOLA Act https://www.zdnet.com/article/parliamentary-security-committee-review-backs-the-use-of-controversial-tola-act/
- Chinese Regulators Going After Algorithms, Big Tech's Secret Sauce https://www.pymnts.com/news/regulation/2022/chinese-regulators-going-after-algorithms-big-techs-secret-sauce/
Standards News:
- NIST recently released three draft items related to the Workforce Framework for Cybersecurity (NICE Framework), NIST Special Publication 800-181, Revision 1 open for comments until January 31 https://www.nist.gov/itl/applied-cybersecurity/nice/nice-framework-resource-center
- Cybersecurity Considerations for Open Banking Technology and Emerging Standards: Draft NISTIR 8389 Available for Comment through March 3 https://csrc.nist.gov/publications/detail/nistir/8389/draft

Defense / Techniques / Solutions

Covering developments and opportunities that may help improve security.

What you need to know about how cryptography impacts your security strategy https://www.microsoft.com/security/blog/2022/01/04/what-you-need-to-know-about-how-cryptography-impacts-your-security-strategy/
Google Project Zero Repository for 0-Days Exploited In-The-Wild https://googleprojectzero.github.io/0days-in-the-wild/
Salesforce mandates MFA by default https://www.theregister.com/2022/01/07/salesforce_mandates_mfa_by_default/
Swiss army bans all chat apps but locally-developed Threema https://www.bleepingcomputer.com/news/security/swiss-army-bans-all-chat-apps-but-locally-developed-threema/
Detecting Evasive Malware on IoT Devices Using Electromagnetic Emanations https://thehackernews.com/2022/01/detecting-evasive-malware-on-iot.html
Extracting Cobalt Strike Beacons from MSBuild Scripts, (Sun, Jan 9th) https://isc.sans.edu/diary/rss/28200
Toward a Best-of-Both-Worlds Binary Disassembler https://blog.trailofbits.com/2022/01/05/toward-a-best-of-both-worlds-binary-disassembler/
University of Winnipeg educator working on anti-extremism tool-kit https://globalnews.ca/news/8490022/university-of-winnipeg-educator-anti-extremism-tool-kit/
Defense Contractors Must do More to Conceal Their Attack Surface https://www.securityweek.com/defense-contractors-must-do-more-conceal-their-attack-surface
If it looks like a duck, swims like a duck, and QWACs like a duck, then it's probably an EV Certificate https://scotthelme.co.uk/looks-like-a-duck-swims-like-a-duck-qwacs-like-a-duck-probably-an-ev-certifiacate/

Bugs / Design Flaws / Vulnerabilities / Research

Articles about newly discovered vulnerabilities and research.

Don't copy-paste commands from webpages — you can get hacked https://www.bleepingcomputer.com/news/security/dont-copy-paste-commands-from-webpages-you-can-get-hacked/
SonicWall: Y2K22 bug hits Email Security, firewall products https://www.bleepingcomputer.com/news/security/sonicwall-y2k22-bug-hits-email-security-firewall-products/
Older Honda and Acura models hit by Y2K22 bug that resets clocks 20 years in the past https://www.theverge.com/2022/1/8/22873403/honda-acuras-y2k22-bug-clocks-reset-2002
Mitigation of Supply Chain Risks in Microsoft 365 https://blog.qualys.com/product-tech/2022/01/05/mitigation-of-supply-chain-risks-in-microsoft-365
Google Patches 48 Vulnerabilities With First Set of 2022 Android Updates https://www.securityweek.com/google-patches-48-vulnerabilities-first-set-2022-android-updates
Unpatched HomeKit Vulnerability Exposes iPhones, iPads to DoS Attacks https://www.securityweek.com/unpatched-homekit-vulnerability-exposes-iphones-ipads-dos-attacks
VMware Plugs Security Holes in Workstation, Fusion and ESXi https://www.securityweek.com/vmware-plugs-security-holes-workstation-fusion-and-esxi
Rapid window title changes cause ‘white screen of death' https://www.bleepingcomputer.com/news/security/rapid-window-title-changes-cause-white-screen-of-death-/
Password Hash Cracking in Amazon Web Services: Burning Your Way to Success https://www.sans.org/blog/password-hash-cracking-amazon-web-services
An algebraic attack to the Bluetooth stream cipher E0, by Roberto La Scala and Sergio Polese and Sharwan K. Tiwari and Andrea Visconti https://eprint.iacr.org/2022/016

Hacking / Malware / Cybercrime / Exploitation

News covering active trends, alerts, events.

Trends, Alerts, and Events (other than major breaches):
- Hackers Are Exploiting a Flaw Microsoft Fixed 9 Years Ago (but fix was optional) https://www.wired.com/story/zloader-microsoft-signature-verification-hack
- ‘Elephant Beetle' spends months in victim networks to divert transactions https://www.bleepingcomputer.com/news/security/elephant-beetle-spends-months-in-victim-networks-to-divert-transactions/
- ‘Malsmoke' Exploits Microsoft's E-Signature Verification https://threatpost.com/malsmoke-microsoft-e-signature-verification/177363/
- FBI: Hackers use BadUSB to target defense firms with ransomware https://www.databreaches.net/fbi-hackers-use-badusb-to-target-defense-firms-with-ransomware/
- The Week in Ransomware - January 7th 2022 - Watch out for USB drives https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-january-7th-2022-watch-out-for-usb-drives/
- Facebook says 50K users were targeted by cyber-mercenary firms in 2021 https:// www.technologyreview.com/2021/12/16/1042652/facebook-says-50000-users-were-targeted-by-cyber-mercenary-firms-in-2021/
- iOS malware can fake iPhone shut downs to snoop on camera, microphone https://www.bleepingcomputer.com/news/security/ios-malware-can-fake-iphone-shut-downs-to-snoop-on-camera-microphone/
- Beware of Fake Telegram Messenger App Hacking PCs with Purple Fox Malware https://thehackernews.com/2022/01/beware-of-fake-telegram-messenger-app.html
- More Client-side Attacks Seen in the Wild https://sourcedefense.com/resources/more-client-side-attacks-seen-in-the-wild/
- Sophisticated iLOBleed Rootkit Targets HP Servers https://www.securityweek.com/sophisticated-ilobleed-rootkit-targets-hp-servers
- Trojanized dnSpy app drops malware cocktail on researchers, devs https://www.bleepingcomputer.com/news/security/trojanized-dnspy-app-drops-malware-cocktail-on-researchers-devs/
- Code Reuse In the Malware Landscape, (Wed, Jan 5th) https://isc.sans.edu/diary/rss/28216
- Open source developer corrupts widely-used libraries Github NPM faker.js and colour.js, affecting tons of projects https://www.theverge.com/2022/1/9/22874949/developer-corrupts-open-source-libraries-projects-affected
Nation State Actors:
- More Russian Cyber Operations against Ukraine https://www.schneier.com/blog/archives/2022/01/more-russian-cyber-operations-against-ukraine.html
- North Korean Hackers Start New Year with Attacks on Russian Foreign Ministry https://thehackernews.com/2022/01/north-korean-hackers-start-new-year.html
Crime & Arrests, etc.:
- Russian national named in $82M hacking scheme denied bail https://www.databreaches.net/russian-national-named-in-82m-hacking-scheme-denied-bail/
- 70 investors lose $50 million to fraudsters posing as broker-dealers https://www.bleepingcomputer.com/news/security/70-investors-lose-50-million-to-fraudsters-posing-as-broker-dealers/
- F.B.I. Arrests Man Accused of Stealing Unpublished Book Manuscripts https://www.nytimes.com/2022/01/05/books/publishing-manuscripts-phishing-scam-filippo-bernardini.html

Other Security / Risk

Articles covering other types of risks.

Norton's Antivirus Product Now Includes an Ethereum Miner https://www.schneier.com/blog/archives/2022/01/nortons-antivirus-product-now-includes-an-ethereum-miner.html
500M Avira Antivirus Users Introduced to Cryptomining https://krebsonsecurity.com/2022/01/500m-avira-antivirus-users-introduced-to-cryptomining/
Here's the truth about the crypto miner that comes with Norton Antivirus https://www.theverge.com/2022/1/7/22869528/norton-crypto-miner-security-software-reaction
How Signal is playing with fire https://www.theverge.com/22872133/signal-cryptocurrency-payments-encryption-invite-regulator-scrutiny
Codex Exposed: Exploring the Capabilities and Risks of OpenAI's Code Generator https://www.trendmicro.com/en_us/research/22/a/codex-exposed--exploring-the-capabilities-and-risks-of-openai-s-.html
The World Is Increasingly Controlled and Transformed by Algorithms https://www.darkreading.com/operations/the-world-is-increasingly-controlled-and-transformed-by-algorithms
Why We Need To Reframe the False-Positive Problem https://www.darkreading.com/attacks-breaches/why-we-need-to-reframe-the-false-positive-problem
Tips on how to prevent (or deal with) frozen pipes https://globalnews.ca/news/8495482/winnipeg-how-to-prevent-frozen-pipes-tips/
US Army journal's top paper from 2021 says Taiwan should destroy TSMC if China invades https://www.theregister.com/2022/01/05/taiwan_should_destory_tsmc_paper/
Internet shut down in Kazakhstan amid unrest https://blog.cloudflare.com/internet-shut-down-in-kazakhstan-amid-unrest/
Ford's e-scooter company is pulling out of any city that doesn't limit competition https://www.theverge.com/2022/1/7/22872768/ford-e-scooter-company-spin-pulling-out-cities-limit-competition-open-vendor
Ontario driver frustrated when car insurance goes up after postal code changed https://toronto.ctvnews.ca/ontario-driver-frustrated-when-car-insurance-goes-up-after-postal-code-changed-1.5727675
Health, Safety & Environment:
- Antibiotic-resistant superbug evolved on hedgehogs https://www.bbc.co.uk/news/science-environment-59883336
- Drone carrying a defibrillator saves its first heart attack patient in Sweden https://www.theverge.com/2022/1/5/22868777/everdrone-drone-defibrillator-health-tech-sweden
- How AI Could Prevent the Development of New Illicit Drugs https://www.scientificamerican.com/article/how-ai-could-prevent-the-development-of-new-illicit-drugs/
- Now we Know why Spaceflight Affects Your Eyes https://www.universetoday.com/153959/now-we-know-why-spaceflight-affects-your-eyes/
- Brain Signals Associated With OCD Discovered by Scientists For First Time https://www.sciencealert.com/scientists-discover-brain-signals-associated-with-ocd-for-the-first-time
- When will COVID-19 end? Here's what happened with other pandemics https://www.ctvnews.ca/health/coronavirus/when-will-covid-19-end-here-s-what-happened-with-other-pandemics-1.5726037
- Girl dies, 8 children injured after wind gust lifts bouncy castle in Spain https://globalnews.ca/news/8489912/girl-dies-bouncy-castle-mislata-spain/
- Teen loses license after officers see him doing doughnuts in school lot: Guelph police https://globalnews.ca/news/8489430/teen-donuts-school-parking-lot-police/
- Verizon, AT&T agree to delay 5G network rollout in U.S. after aviation safety concerns https://globalnews.ca/news/8486624/5g-us-verizon-att-aviation/
- FAA lists 50 airports that will have 5G buffer zones ahead of C-band expansion https://www.theverge.com/2022/1/8/22873765/faa-verizon-att-airport-5g-carriers-buffer-zone
- How scientists know the New Year's Day boom over Pittsburgh was an exploding meteor https://www.cbc.ca/radio/asithappens/as-it-happens-the-monday-edition-1.6302923/how-scientists-know-the-new-year-s-day-boom-over-pittsburgh-was-an-exploding-meteor-1.6302926
- Why the climate-wrecking craze for crypto art really is beyond satire | John Naughton https://www.theguardian.com/commentisfree/2022/jan/08/why-the-climate-wrecking-craze-for-crypto-art-really-is-beyond-satire
- California power utility blamed for causing Dixie wildfire, 2nd largest in state history https://globalnews.ca/news/8489191/california-dixie-wildfire-cause/
- The Blue Technology Barometer (environmental metrics) https://www.technologyreview.com/2022/01/05/1040367/the-blue-technology-barometer/
- 2 founders are introducing 100 million oysters to New York to help fight flooding https://www.businessinsider.com/how-millions-of-oysters-are-helping-new-york-fight-flooding-2022-1

COVID-19 updates.

COVID related articles. We have been following coronavirus risks since https://controlgap.com/blog/this-weeks-insecurity-issue-147.

The spread, curves, spikes, waves, reinfection, and variant strains:
- Covid: US reports record 1m cases with peak still to come https://www.bbc.co.uk/news/world-us-canada-59867536
- Omicron makes up 95.4% of U.S. COVID cases as of Jan. 1, says CDC https://globalnews.ca/news/8487256/omicron-us-cdc-variant-cases-january/
- All of the 91 US cruises currently at sea have confirmed or suspected COVID-19 on board, the CDC says https://www.businessinsider.com/cruise-ships-covid-outbreaks-cdc-norwegian-carnival-caribbean-disney-2022-1
- Covid: UK records more than 150,000 deaths https://www.bbc.co.uk/news/uk-59923936
- Ontario reports 13,578 new COVID cases, more people admitted to hospital and ICUs https://globalnews.ca/news/8485089/ontario-covid-cases-january-3-coronavirus/
- Quebec reports 15,293 COVID-19 cases as major hospital postpones half of surgeries https://globalnews.ca/news/8485343/quebec-covid-jan-3-2022/
- A Cyprus researcher reportedly identified the 'Deltacron,' a COVID-19 strain that's a combination of the Delta and Omicron variants (other researchers suspect sample contamination) https://www.businessinsider.com/cyprus-reportedly-identifies-the-combined-deltacron-covid-19-strain-2022-1
- 'Flurona' Is a Great Example of How Misinformation Blooms https://www.scientificamerican.com/article/flurona-is-a-great-example-of-how-misinformation-blooms/
Guidance, Response, and Recovery:
- America's COVID Rules Are a Dumpster Fire https://www.theatlantic.com/health/archive/2022/01/cdc-new-isolation-guidelines-confusing/621192/
- COVID Isolation Is a Lot Like … Muffin Baking https://www.theatlantic.com/health/archive/2022/01/covid-isolation-muffin-baking-cdc/621209/
- Travelling during Omicron? Canadians who tested positive for COVID-19 abroad urge caution https://globalnews.ca/news/8495286/positive-covid-pcr-test-while-on-vacation/
- Amid Omicron surge, 10-day quarantine still ‘ideal' but not always possible: Tam https://globalnews.ca/news/8490168/covid-quarantine-time-cut-omicron/
- 140M rapid tests, enough pediatric COVID-19 doses for all second shots coming this month: feds https://www.ctvnews.ca/health/coronavirus/140m-rapid-tests-enough-pediatric-covid-19-doses-for-all-second-shots-coming-this-month-feds-1.5728512
- Ontario expecting to receive up to 119M rapid antigen COVID-19 tests in January https://toronto.ctvnews.ca/ontario-expecting-to-receive-up-to-119m-rapid-antigen-covid-19-tests-in-january-1.5730383
- Ontario to expand use of rapid COVID-19 antigen tests amid surge in Omicron cases https://toronto.ctvnews.ca/ontario-to-expand-use-of-rapid-covid-19-antigen-tests-amid-surge-in-omicron-cases-1.5729848
- Thousands of rapid test results already reported to made-in-Sask. online database https://globalnews.ca/news/8496162/covid-rapid-test-saskatchewan-online-reporting/
- Quebec physicians order asks for harsher measures against the unvaccinated https://globalnews.ca/news/8498328/covid-quebec-physicians-order-unvaccinated/
- Ontario will not reopen schools for in-person learning for two weeks, teachers' unions respond https://toronto.ctvnews.ca/ontario-will-not-reopen-schools-for-in-person-learning-for-two-weeks-teachers-unions-respond-1.5726228
- Toronto preparing for up to 60 per cent of its frontline workers to be absent due to Omicron https://toronto.ctvnews.ca/toronto-preparing-for-up-to-60-per-cent-of-its-frontline-workers-to-be-absent-due-to-omicron-1.5727358
- GO Transit to reduce train, bus service due to COVID-related staffing shortages https://globalnews.ca/news/8490276/go-transit-train-bus-service-staff-shortages-covid/
- Many gyms ‘doing everything right,' but top doctor says COVID-19 still spreads within their walls https://globalnews.ca/news/8488419/bc-gyms-stay-closed-covid19/
- England scraps pre-departure Covid travel tests https://www.bbc.co.uk/news/business-59876063
Treatments, Testing, Triage, Trials, and things we Learned:
- Simple pH adjustment may enable a preventative Covid-19 nasal and throat spray https://scienmag.com/simple-ph-adjustment-may-enable-a-preventative-covid-19-nasal-and-throat-spray/
- When should you take a COVID-19 rapid test if you only have one? Experts suggest waiting for symptoms or your next big party. https://www.businessinsider.com/when-to-take-at-home-rapid-covid-test-2022-1
- Swab Your Throat First? Rapid Tests May Need Saliva to Detect Omicron, Early Data Find https://www.sciencealert.com/throat-swabs-may-be-needed-to-detect-omicron-in-rapid-tests-study-finds
- Why testing sewage for COVID-19 could be more useful than ever https://www.cbc.ca/news/science/wastewater-covid-19-teting-1.6306202
Immunity and Vaccinations:
- Canada pushing ahead with COVID-19 vaccine mandate for cross-border truckers https://globalnews.ca/news/8499014/trudeau-canada-covid-vaccine-international-truckers/
- COVID-19 vaccine and booster tracker: How many Canadians are vaccinated? https://globalnews.ca/news/8492863/covid-19-vaccine-and-booster-tracker-coronavirus-canada/
- Things we learned:
- COVID-19 vaccination associated with a small, temporary increase in menstrual cycle length, suggests NIH-funded study https://scienmag.com/covid-19-vaccination-associated-with-a-small-temporary-increase-in-menstrual-cycle-length-suggests-nih-funded-study/
Impact:
- GTA hospital network declares 'code orange' to address hospital capacity, staffing challenges https://toronto.ctvnews.ca/gta-hospital-network-declares-code-orange-to-address-hospital-capacity-staffing-challenges-1.5726723
- Situation in Ontario hospitals expected to worsen amid Omicron as doctors isolate, admissions rise https://globalnews.ca/news/8495023/ontario-hospitals-expected-worsen-covid/
- Tens of thousands of non-urgent procedures expected to be delayed in Ontario in coming weeks https://globalnews.ca/news/8485621/thousands-non-urgent-medical-prodecures-delayed-ontario/
- COVID-19 cases fill hospitals in Ontario, Quebec and New Brunswick https://globalnews.ca/news/8499421/covid-19-canada-hospitalizations-jan-9/
- Nearly 5,000 layoffs at Cineplex after Ontario closes movie theatres https://toronto.ctvnews.ca/nearly-5-000-layoffs-at-cineplex-after-ontario-closes-movie-theatres-1.5730174
Masks, anti-maskers, distancing, compliance, defiance, and repercussions:
- A paramedic stole coronavirus vaccine cards, then sold them to unvaccinated buyers, prosecutors say https://www.washingtonpost.com/nation/2022/01/05/paramedic-stole-covid-vaccine-cards-sell-unvaccinated/
- Passengers on Sunwing party plane could face jail time, thousands in fines https://www.cbc.ca/news/canada/montreal/sunwing-cancun-flight-1.6304854
- Sunwing plane party organizer slams airlines, some passengers catch COVID https://globalnews.ca/news/8492951/sunwing-party-flight-organizer-accusation/
- Some gyms say they'll open with disablity exemption under Ontario's COVID-19 restrictions https://globalnews.ca/news/8497428/some-gyms-claim-exemption-ontario-restrictions/

Off-Topic / Science & Tech / Lighter Side

A variety of scientific, technical, historical, and more light-hearted news.

Innovations & Inventions:
- Intel announces 5.5GHz capable 12th Gen CPU https://www.theverge.com/2022/1/6/22870060/intel-announces-5-5ghz-capable-12th-gen-cpu
- Mass production of revolutionary computer memory moves closer with ULTRARAM™ on silicon wafers for the first time https://scienmag.com/mass-production-of-revolutionary-computer-memory-moves-closer-with-ultraram-on-silicon-wafers-for-the-first-time/
- 3d digital holograms on smartphones? https://scienmag.com/3d-digital-holograms-on-smartphones/
- Physicists crack unsolvable three-body problem using drunkard's walk https://www.livescience.com/three-body-problem-solution
Other:
- Throat and Nasal Passages https://xkcd.com/2563/
- AI generated New Year’s resolutions https://www.aiweirdness.com/new-years-resolutions-generated-by-ai/
- Remember those wooden playgrounds? AI doesn't. https://www.aiweirdness.com/remember-those-wooden-playgrounds/
- Don't Look Up Illustrates 5 Myths That Fuel Rejection of Science https://www.scientificamerican.com/article/dont-look-up-illustrates-5-myths-that-fuel-rejection-of-science/
- China's Rover Checks out that Weird Cube on the Moon. Surprise! It's a Rock. https://www.universetoday.com/153933/chinas-rover-checks-out-that-weird-cube-on-the-moon-surprise-its-a-rock/
- Astronomers get a photo of a record-breaking exoplanet around massive binary stars! https://www.syfy.com/syfy-wire/bad-astronomy-exoplanet-b-cen-b-orbits-massive-binary-stars
- Supergiant star explosion seen live by astronomers in unprecedented breakthrough https://www.independent.co.uk/space/star-explosion-red-supergiant-supernova-b1988069.html

The Art of Reading a PCI Attestation of Compliance (AoC)

David Gamey: Mar 22, 2023 9:00:00 AM

PCI Attestations of Compliance (AoCs) provide organizations with a tool that helps with the all-important aspects of third-party due diligence. Yet...

Control Gap Vulnerability Roundup: March 4th to March 10th

Zach Matthews: Mar 20, 2023 11:00:00 AM

This week saw the publication of 493 new CVE IDs. Of those, 58 have not yet been assigned official CVSS scores, however, of the ones that were,...

offensivesecurity Cybersecurity Certified Zero CVE

Control Gap Vulnerability Roundup: February 25th to March 3rd

Zach Matthews: Mar 16, 2023 2:32:38 PM

This week saw the publication of 442 new CVE IDs. Of those, 258 have not yet been assigned official CVSS scores, however, of the ones that were,...

offensivesecurity Cybersecurity Certified Zero CVE

This Week's [in]Security - Issue 249

The Art of Reading a PCI Attestation of Compliance (AoC)

Control Gap Vulnerability Roundup: March 4th to March 10th

Control Gap Vulnerability Roundup: February 25th to March 3rd

Services

About Us

Knowledge Base

Contact