This Week's [in]Security - Issue 218 | insecurity | Control Gap

Welcome to This Week’s [in]Security. PCI & Mobile, Fraud. New breaches: Pizza, Deleted Buckets, Olympics. New Ransomware: Food Supply Chain, Transportation, Obstructing Justice. Follow-ups & Fall-out: Policy, Pipeline, Azusa, Accellion. Privacy: Sidewalk Mesh, WhatsApp caves, TikTok & biometrics. Laws & Regs - Canada: C-10. US: Breach liability, Ransomware. The world: EU filters, India. Standards: Post-quantum, Biometrics. Defense: Cyber & the Board, Computing Reserve. Webinars, Browser, Teams. Vulnerabilities: Home grown, Git & POCs, CodeSys, OpenPGP. Cybercrime - Trends: vCenter, WordPress. Nation States. Crime. Other Risks: Residential School Deaths. Health, Safety & Environment: Flu, Ordinance, Bears, Zombie Fires. Covid-19: Spread, Curves, Waves, and Variants. Response. Immunity. Learned. Covid Compliance. And more.

PCI Compliance and Payments

News and announcements relating to Payment Security, PCI, Card Brands, Payments, Payment Malware and Fraud, and Payment Related Compliance.

• The Future of PCI SSC Mobile Standards https://blog.pcisecuritystandards.org/the-future-of-pci-ssc-mobile-standards
• Visa and American Express ramp up fraud detection initiatives https://www.businessinsider.com/visa-amex-double-down-on-fraud-prevention-2021-6
• With Credit Card Fraud Facing Extinction, ID Theft Looks To Fill The Void https://www.pymnts.com/news/security-and-risk/2021/with-credit-card-fraud-facing-extinction-id-theft-looks-to-fill-the-void/

Breaches / Ransomware / Leaks

Covering breaches, leaks, data exposures, ransomware (as potential breach), and their fallout.

• New Breaches:

  • Dominos India - 22,527,655 breached accounts https://haveibeenpwned.com/PwnedWebsites#DominosIndia
  • 20/20 Eye Care Network and Hearing Care Network notify 3,253,822 health plan members of breach that deleted contents of AWS buckets https://www.databreaches.net/20-20-eye-care-network-and-hearing-care-network-notify-3253822-health-plan-members-of-breach-that-deleted-contents-of-aws-buckets/
  • British Gas software vendor exposes 3.6 million customer email addresses on the web without a password: report https://www.comparitech.com/blog/information-security/british-gas-leak/
  • Tokyo Games organizers hit by data breach and info leak https://www.databreaches.net/tokyo-games-organizers-hit-by-data-breach-and-info-leak/
  • UK Special Forces soldiers' personal data was floating around WhatsApp in a leaked Army spreadsheet https://www.theregister.com/2021/06/02/uk_special_forces_data_breach_whatsapp/
  • Apache Pizza announce data breach associated with details of delivery customers https://www.databreaches.net/apache-pizza-announce-data-breach-associated-with-details-of-delivery-customers/
  • Ca: More than 1,000 NWT residents' student loan information breached https://www.databreaches.net/ca-more-than-1000-nwt-residents-student-loan-information-breached/
  • More than 11k people's personal information released in Anchorage Police Department data leak https://www.databreaches.net/more-than-11000-peoples-personal-information-released-in-anchorage-police-department-data-leak/

• New Ransomware and "Incidents":

  • Attack on meat supplier came from REvil, ransomware's most cut-throat gang https://arstechnica.com/gadgets/2021/06/attack-on-meat-supplier-came-from-revil-ransomwares-most-cut-throat-gang/
  • Meat Processing Grinds to Halt After 'Cybersecurity Attack' https://www.databreachtoday.com/meat-processing-grinds-to-halt-after-cybersecurity-attack-a-16773
  • Ransomware Hits a Food Supply Giant and Underscores Dire Risk https://www.wired.com/story/jbs-ransomware-attack-underscores-dire-threat
  • Shortages loom as ransomware hamstrings the world's biggest meat producer https://arstechnica.com/gadgets/2021/06/ransomware-striking-the-worlds-biggest-meat-producer-threatens-shortages/
  • NY: The M.T.A. Is Breached by Hackers as Cyberattacks Surge https://www.databreaches.net/ny-the-m-t-a-is-breached-by-hackers-as-cyberattacks-surge/
  • Steamship Authority hit by ransomware attack https://www.databreaches.net/steamship-authority-hit-by-ransomware-attack/
  • EpsilonRed ransomware group hits one of India's financial software powerhouses https://www.databreaches.net/epsilonred-ransomware-group-hits-one-of-indias-financial-software-powerhouses/
  • UNC2447 SOMBRAT and FIVEHANDS Ransomware: A Sophisticated Financial Threat http://internal-www.fireeye.com/blog/threat-research/2021/04/unc2447-sombrat-and-fivehands-ransomware-sophisticated-financial-threat.html
  • Are Ransomware Attacks Impeding Criminal Prosecutions? https://www.databreachtoday.com/are-ransomware-attacks-impeding-criminal-prosecutions-a-16781
  • DOJ Vows To Prioritize Ransomware Investigations https://www.pymnts.com/news/security-and-risk/2021/doj-vows-prioritize-ransomware-investigations/
  • How to Negotiate with Ransomware Hackers https://www.databreaches.net/how-to-negotiate-with-ransomware-hackers/
  • Why the ransomware crisis suddenly feels so relentless https://www.technologyreview.com/2021/06/03/1025679/explainer-is-ransomware-getting-worse/
  • On the Taxonomy and Evolution of Ransomware https://threatpost.com/taxonomy-evolution-ransomware/166462/

• Follow-ups and fall-out:

  • Are We Waiting for Everyone to Get Hacked? https://www.nytimes.com/2021/06/05/business/leon-panetta-cyber-attacks.html
  • Hackers reportedly used a compromised password in Colonial Pipeline cyberattack https://www.theverge.com/2021/6/5/22520297/compromised-password-reportedly-allowed-hackers-colonial-pipeline-cyberattack
  • The Colonial Pipeline Attack Is Your Boardroom Wake-Up Call https://www.darkreading.com/risk/the-colonial-pipeline-attack-is-your-boardroom-wake-up-call/a/d-id/1341153
  • Azusa officials hid 2018 cyber attack, used insurance to pay $65K ransom to hackers https://www.databreaches.net/azusa-officials-hid-2018-cyber-attack-used-insurance-to-pay-65k-ransom-to-hackers/
  • Report: Accellion Failed to Notify Customers of FTA Zero-Day https://www.securityweek.com/report-accellion-failed-notify-customers-fta-zero-day
  • Scripps begins notifying more than 147,000 people of ransomware records breach https://www.databreaches.net/scripps-begins-notifying-more-than-147000-people-of-ransomware-records-breach/
  • Scripps Health Attackers Stole PHI of 147,000 Patients https://www.databreachtoday.com/scripps-health-attackers-stole-phi-147000-patients-a-16797
  • Sweden Shut Down Infectious Disease Database After Intrusions https://www.databreachtoday.com/sweden-shut-down-infectious-disease-database-after-intrusions-a-16777
  • JD - 77,449,341 breached accounts https://haveibeenpwned.com/PwnedWebsites#JD

Privacy

Articles about privacy related news, risks, and trends.

• Amazon Sidewalk Poised to Sweep You Into Its Mesh https://threatpost.com/amazon-sidewalk-to-sweep-you-into-its-mesh/166581/
• Deadline draws near to avoid auto-joining Amazon's mesh network Sidewalk https://www.theregister.com/2021/06/02/amazon_sidewalk_mesh/
• How to opt out of (or into) Amazon's Sidewalk network https://www.theverge.com/22463257/amazon-sidewalk-privacy-how-to-opt-out
• Ring will require video requests to be public in Neighbors app starting next week https://www.theverge.com/2021/6/3/22465295/ring-public-agencies-request-for-assistance-feed-neighbors-app
• Google is making it harder for Android apps to track you once you've opted out https://www.theverge.com/2021/6/3/22466531/google-android-ad-traking-advertising-identifier-id
• Google to Let Android Users Opt-Out to Stop Ads From Tracking Them https://thehackernews.com/2021/06/google-to-let-android-users-opt-out-to.html
• WhatsApp caves in: Won't limit features if you reject privacy changes https://www.bleepingcomputer.com/news/technology/whatsapp-caves-in-wont-limit-features-if-you-reject-privacy-changes/
• TikTok Quietly Updated Its Privacy Policy to Collect Users' Biometric Data https://thehackernews.com/2021/06/tiktok-quietly-updated-its-privacy.html

Laws, Regulations, Platforms, Standards, and Public Policy

News about laws, regulations, platform rules, and standards affecting security, privacy, technology, and public interest.

• Canada:

  • Liberals, NDP and Bloc Vote Down User Generated Content Safeguards as MPs Defend Deeply Flawed Bill C-10 Committee Study https://www.michaelgeist.ca/2021/06/liberals-ndp-and-bloc-vote-down-user-generated-content-safeguards-as-mps-defend-deeply-flawed-bill-c-10-committee-study/
  • Drivers who receive automated speeding tickets won't have insurance or licence affected https://toronto.ctvnews.ca/drivers-who-receive-automated-speeding-tickets-won-t-have-insurance-or-licence-affected-1.5452003

• US:

  • Ethical disclosures are being ignored: an unchecked security crisis https://www.databreaches.net/ethical-disclosures-are-being-ignored-an-unchecked-security-crisis/
  • Ruling on Landry's 2015 data breach $20M liability, no MFA contributed to breach going for appeal https://www.bizjournals.com/houston/news/2021/05/19/landrys-data-breach-lawsuit-chase-20-million.html
  • White House Puts Russia on Notice Over JBS Ransomware Hit https://www.databreachtoday.com/white-house-puts-russia-on-notice-over-jbs-ransomware-hit-a-16783
  • Van Buren is a Victory Against Overbroad Interpretations of the CFAA, and Protects Security Researchers https://www.eff.org/deeplinks/2021/06/van-buren-victory-against-overbroad-interpretations-cfaa-protects-security
  • States pass laws limiting use of DNA searches for criminal investigations https://www.theverge.com/2021/6/1/22462859/dna-genetic-genealogy-criminal-laws-maryland-montana
  • The FBI is trying to get IP addresses and phone numbers of people who read a USA Today article https://www.theverge.com/2021/6/5/22519653/usa-today-fbi-ip-address-identifying-info-request-florida-shooter

• World:

  • The EU Commission's Refuses to Let Go of Filters https://www.eff.org/deeplinks/2021/06/eu-commissions-guidance-article-17-did-not-let-go-filters
  • India reportedly warns Twitter of 'unintended consequences' if it fails to follow new rules https://www.theverge.com/2021/6/5/22520330/india-warns-twitter-rules-social-media
  • Why Indian Courts Should Reject Traceability Obligations https://www.eff.org/deeplinks/2021/06/why-indian-courts-should-reject-traceability-obligations
  • Nigeria Bans Twitter After President's Tweet Is Deleted https://www.nytimes.com/2021/06/05/world/africa/nigeria-twitter-president.html

• Standards News:

  • NIST/NCCoE draft project Migration to Post-Quantum Cryptography open for public comment through July 7 https://csrc.nist.gov/publications/detail/white-paper/2021/06/04/migration-to-post-quantum-cryptography/draft
  • NIST/NCCoE draft report NISTIR 8334 Using Mobile Device Biometrics for Authenticating First Responders open for public comment through July 19 https://csrc.nist.gov/publications/detail/nistir/8334/draft

Defense / Techniques / Solutions

Covering developments and opportunities that may help improve security.

• As cybersecurity evolves, so should your board https://www.technologyreview.com/2021/06/02/1025571/as-cybersecurity-evolves-so-should-your-board/
• The U.S. Needs a National Strategic Computing Reserve https://www.scientificamerican.com/article/the-u-s-needs-a-national-strategic-computing-reserve/
• Where Bug Bounty Programs Fall Flat https://threatpost.com/bug-bounty-fall-flat/166568/

• Upcoming Webinars and Virtual Events:

  • NICE Webinar: Digital Citizenship- Safety and Security for an Online World June 16 @ 2:00-3:00 PM EDT https://events-na13.adobeconnect.com/content/connect/c1/2209463749/en/events/event/shared/2812297760/event_registration.html?sco-id=8918590108&_charset_=utf-8
• Chrome 91 Will Warn Users When Installing Untrusted Extensions https://packetstormsecurity.com/news/view/32350/Chrome-91-Will-Warn-Users-When-Installing-Untrusted-Extensions.html
• Firefox 89 blocks cross-site cookie tracking by default in private browsing https://blog.mozilla.org/security/2021/06/01/total-cookie-protection-in-private-browsing/
• Firefox now autoupdates on Windows even when not running https://www.bleepingcomputer.com/news/software/firefox-now-autoupdates-on-windows-even-when-not-running/
• Microsoft Teams calls are getting end-to-end encryption in July https://www.bleepingcomputer.com/news/microsoft/microsoft-teams-calls-are-getting-end-to-end-encryption-in-july/
• Kali Linux 2021.2 released with new tools, improvements, and themes https://www.bleepingcomputer.com/news/security/kali-linux-20212-released-with-new-tools-improvements-and-themes/
• The Safest Way to Store and Share Your Nudes (or any other important pics on Android) https://www.wired.com/story/safest-way-store-share-nudes-safe-sexts
• Welcoming the Dominican Republic Government to Have I Been Pwned https://www.troyhunt.com/welcoming-the-dominican-republic-government-to-have-i-been-pwned/
• US schools land IBM grants to protect themselves against ransomware https://www.zdnet.com/article/us-schools-land-ibm-grants-to-protect-themselves-against-ransomware

Bugs / Design Flaws / Vulnerabilities / Research

Articles about newly discovered vulnerabilities and research.

• Hackers Actively Exploiting 0-Day in WordPress Plugin Installed on Over 17k Sites https://thehackernews.com/2021/06/hackers-actively-exploiting-0-day-in.html
• WordPress force installs Jetpack security update on 5 million sites https://www.bleepingcomputer.com/news/security/wordpress-force-installs-jetpack-security-update-on-5-million-sites/
• 71% of CISOs aren't confident code is free of vulnerabilities before live production https://securitybrief.asia/story/71-of-cisos-aren-t-confident-code-is-free-of-vulnerabilities-before-live-production
• GitHub's new policies allow removal of PoC exploits used in attacks https://www.bleepingcomputer.com/news/security/githubs-new-policies-allow-removal-of-poc-exploits-used-in-attacks/
• Microsoft 365: Most Common Threat Vectors & Defensive Tips https://www.darkreading.com/theedge/microsoft-365-most-common-threat-vectors-and-defensive-tips/b/d-id/1341179
• 10 Critical Flaws Found in CODESYS Industrial Automation Software https://thehackernews.com/2021/06/10-critical-flaws-found-in-codesys.html
• Researchers Warn of Critical Bugs Affecting Realtek Wi-Fi Module https://thehackernews.com/2021/06/researchers-warn-of-critical-bugs.html
• OpenPGP library RNP updates after Thunderbird decrypt-no-recrypt bug squashed https://www.theregister.com/2021/06/02/openpgp_rnp_library/
• When is a cybersecurity hole not a hole? Never. Thoughts on the unfixable M1 chip covert channel. https://www.computerworld.com/article/3620889/when-is-a-cybersecurity-hole-not-a-hole-never.html
• Abusing Replication: Stealing AD FS Secrets Over the Network http://internal-www.fireeye.com/blog/threat-research/2021/04/abusing-replication-stealing-adfs-secrets-over-the-network.html

Hacking / Malware / Cybercrime / Exploitation

News covering active trends, alerts, events.

• Trends, Alerts, and Events (other than major breaches):

  • ALERT: Critical RCE Bug in VMware vCenter Server Under Active Attack https://thehackernews.com/2021/06/alert-critical-rce-bug-in-vmware.html
  • This is not a drill: VMware vuln with 9.8 severity rating is under attack https://arstechnica.com/gadgets/2021/06/under-exploit-vmware-vulnerability-with-severity-rating-of-9-8-out-of-10/
  • Critical WordPress plugin zero-day under active exploitation https://www.bleepingcomputer.com/news/security/critical-wordpress-plugin-zero-day-under-active-exploitation/
  • The UNC2529 Triple Double: A Trifecta Phishing Campaign http://internal-www.fireeye.com/blog/threat-research/2021/05/unc2529-triple-double-trifecta-phishing-campaign.html
  • This is how attackers bypass Microsoft's AMSI anti-malware scanning protection https://www.zdnet.com/article/this-is-how-attackers-bypass-microsoft-antimalware-scan-software-amsi
  • Poisoned Installers Found in SolarWinds Hackers Toolkit https://www.securityweek.com/poisoned-installers-found-solarwinds-hackers-toolkit

• Nation State Actors:

  • Chaos for the Sake of Chaos? Yes, Nation-States Are That Cynical https://www.darkreading.com/vulnerabilities---threats/chaos-for-the-sake-of-chaos-yes-nation-states-are-that-cynical/a/d-id/1341133
  • Ukraine's security service claims to have thwarted mass cyberattack by Russian special forces https://www.databreaches.net/ukraines-security-services-claims-to-have-thwarted-mass-cyberattack-by-russian-special-forces/

• Crime & Arrests, etc.:

  • DOJ Seizes 2 Domains Linked to USAID Phishing Campaign https://www.databreachtoday.com/doj-seizes-2-domains-linked-to-usaid-phishing-campaign-a-16782
  • Encrypted EncroChat Network: Police Arrest More Suspects https://www.databreachtoday.com/blogs/encrypted-encrochat-network-police-arrest-more-suspects-p-3049
  • Latvian National Charged for Alleged Role in Transnational Cybercrime Organization https://www.databreaches.net/latvian-national-charged-for-alleged-role-in-transnational-cybercrime-organization/
  • Russian hacker Pavel Sitnikov arrested for sharing malware source code https://www.databreaches.net/russian-hacker-pavel-sitnikov-arrested-for-sharing-malware-source-code/
  • Two Carbanak hackers sentenced to eight years in prison in Kazakhstan https://www.databreaches.net/two-carbanak-hackers-sentenced-to-eight-years-in-prison-in-kazakhstan/

Other Security / Risk

Articles covering other types of risks.

• Facebook to end special treatment for politicians after Trump ban https://www.theverge.com/2021/6/3/22474738/facebook-ending-political-figure-exemption-moderation-policy
• Digital forensics experts prone to bias, study shows https://www.theguardian.com/science/2021/may/31/digital-forensics-experts-prone-to-bias-study-shows
• Windows 10's package manager flooded with duplicate, malformed apps https://www.bleepingcomputer.com/news/security/windows-10s-package-manager-flooded-with-duplicate-malformed-apps/
• Your next laptop may come with a cryptominer, courtesy of Norton https://www.theverge.com/tldr/2021/6/2/22465862/norton-360-crypto-mining-ethereum-coinbase
• Nvidia announces new RTX 3080 Ti, priced at $1,199 and launching June 3rd https://www.theverge.com/2021/6/1/22461660/nvidia-geforce-rtx-3080-ti-specs-price-release-date-features
• Researchers explore ways to detect 'deep fakes' in geography https://scienmag.com/researchers-explore-ways-to-detect-deep-fakes-in-geography/
• Understanding the threat landscape and risks of OT environments https://www.microsoft.com/security/blog/2021/06/01/understanding-the-threat-landscape-and-risks-of-ot-environments/
• Why A.I. Should Be Afraid of Us https://www.nytimes.com/2021/06/05/science/ai-woebot-deroy-empathy.html
• 'Clothes are torn, worn out - I can't find work gloves' https://www.bbc.co.uk/news/business-57253341
• Anonymous accuses Elon Musk of 'destroying lives' with cryptocurrency tweets https://www.independent.co.uk/life-style/gadgets-and-tech/elon-musk-anonymous-bitcoin-crypto-b1860458.html
• NFT sales plummet nearly 90% from their peak as collectibles market cools https://markets.businessinsider.com/currencies/news/nft-sales-plummet-from-peak-collectibles-market-cools-crypto-2021-6-1030491873
• FireEye to Separate from Mandiant Solutions https://www.databreachtoday.com/fireeye-to-separate-from-mandiant-solutions-a-16789
• Most Americans Overestimate Their Ability to Spot Fake News, Study Shows https://www.sciencealert.com/most-americans-are-overestimating-their-ability-to-spot-fake-news-survey-finds

• More fallout from Canada's Residential Schools disaster:

  • Why Canada is mourning the deaths of 215 children https://www.bbc.co.uk/news/world-us-canada-57325653
  • Disgrace: Indigenous leaders blast Catholic Church for silence on residential schools https://globalnews.ca/news/7910218/residential-schools-catholic-church-apology/"
  • More than 800 residential school students died in Alberta - advocates say it's time to find their graves https://www.cbc.ca/news/canada/calgary/residential-school-graves-alberta-1.6046329
  • Experts say Trudeau's acknowledgment of Indigenous genocide could have legal impacts https://globalnews.ca/news/7924188/trudeau-indigenous-genocide-legal-impacts/

• Health, Safety & Environment:

  • 'For the littlest patients': Toronto grandmother knits over 100 teddy bears for SickKids https://toronto.ctvnews.ca/for-the-littlest-patients-toronto-grandmother-knits-over-100-teddy-bears-for-sickkids-1.5451740
  • Exercise Affects Us All Differently. A New Study Could Finally Explain Why https://www.sciencealert.com/new-findings-could-explain-why-exercise-affects-us-all-differently
  • America Has a Drinking Problem https://www.theatlantic.com/magazine/archive/2021/07/america-drinking-alone-problem/619017/
  • Some Pandemic Health Habits Deserve to Stay https://www.scientificamerican.com/article/some-pandemic-health-habits-deserve-to-stay/
  • China reports world's first human case of H10N3 bird flu https://globalnews.ca/news/7910313/china-bird-flu-avian-h10n3-human-case/
  • Two Human Flu Virus Strains May Have Gone Extinct, Reports Indicate https://www.sciencealert.com/two-flu-strains-may-have-gone-extinct-due-to-drop-in-transmission-during-the-pandemic
  • Niagara police explode Second World War artillery shell found in Lake Ontario https://globalnews.ca/news/7914653/niagara-police-explode-world-war-2-artillery-shell/
  • Two TTC trains nearly collided last June and the details are just coming to light now https://toronto.ctvnews.ca/two-ttc-trains-nearly-collided-last-june-and-the-details-are-just-coming-to-light-now-1.5456489
  • Italy cable car: Video suggests emergency brake disabled years before https://www.bbc.co.uk/news/world-europe-57327552
  • The California girl who pushed a bear to protect her dogs https://www.bbc.co.uk/news/world-us-canada-57325483
  • A space telescope that could protect Earth from asteroids has been stuck in 'NASA mission limbo hell' but it may finally escape https://www.businessinsider.com/nasa-might-advance-asteroid-hunting-space-telescope-2021-5
  • Canada could see more 'zombie fires' as winters shorten, climate warms: experts https://globalnews.ca/news/7924196/canada-zombie-fires-climate-change/
  • Ontario finalizes plans to overhaul blue box program https://www.cbc.ca/news/canada/toronto/ontario-finalizes-plans-to-overhaul-blue-box-program-1.6051981

COVID-19 updates.

COVID related articles. We have been following coronavirus risks since https://controlgap.com/blog/this-weeks-insecurity-issue-147.

• The spread, curves, spikes, waves, reinfection, and variant strains:

  • Most labs in Canada not fully able to detect Delta COVID-19 variant, experts warn https://globalnews.ca/news/7922969/covid-19-delta-variant-testing-canada/
  • Ontario records lowest number of new COVID-19 cases in nearly eight months https://toronto.ctvnews.ca/ontario-records-lowest-number-of-new-covid-19-cases-in-nearly-eight-months-1.5458395
  • Ontario reports fewer than 700 new COVID-19 cases for first time since October https://toronto.ctvnews.ca/ontario-reports-fewer-than-700-new-covid-19-cases-for-first-time-since-october-1.5451158
  • COVID-19 variant first identified in India will be dominant strain in Peel Region in a month, top doctor says https://toronto.ctvnews.ca/covid-19-variant-first-identified-in-india-will-be-dominant-strain-in-peel-region-in-a-month-top-doctor-says-1.5453025
  • What's driving COVID-19 workplace transmission in the third wave https://globalnews.ca/news/7922127/whats-driving-covid-19-workplace-transmission-third-wave/
  • Covid infections rise by two-thirds in UK https://www.bbc.co.uk/news/health-57362508
  • Covid: Zero daily deaths announced in UK for first time https://www.bbc.co.uk/news/uk-57320320
  • A woman with HIV had the coronavirus for 216 days. The virus mutated at least 30 times inside her. https://www.businessinsider.com/woman-hiv-had-coronavirus-216-days-virus-mutated-2021-6

• Guidance, Response, and Recovery:

  • Ontario schools will not reopen for in-person learning until September https://toronto.ctvnews.ca/ontario-schools-will-not-reopen-for-in-person-learning-until-september-1.5452669
  • Travelers who refuse hotel quarantine will soon face larger fines https://www.ctvnews.ca/health/coronavirus/travellers-who-refuse-hotel-quarantine-will-soon-face-larger-fines-1.5454401
  • What doctors say Ontario needs to do next to avoid a fourth COVID-19 wave https://toronto.ctvnews.ca/what-doctors-say-ontario-needs-to-do-next-to-avoid-a-fourth-covid-19-wave-1.5457715
  • Electronic nose might 'sniff out' COVID-19-infected people at mass scale https://scienmag.com/electronic-nose-might-sniff-out-covid-19-infected-people-at-mass-scale/

• Immunity and Vaccinations:

  • Why COVID vaccination progress at home risks being undone by spread of variants abroad https://www.cbc.ca/news/health/covid-19-variants-vaccine-setback-1.6046643
  • U.K. changes its vaccine strategy to combat COVID-19 Delta variant. Should Canada follow? https://globalnews.ca/news/7914248/uk-canada-2nd-dose-covid-delta-variant/
  • National vaccine panel allows for mixing and matching COVID-19 vaccines https://www.ctvnews.ca/health/coronavirus/national-vaccine-panel-allows-for-mixing-and-matching-covid-19-vaccines-1.5451067
  • This interactive map shows first dose vaccination rates in every Ontario region https://toronto.ctvnews.ca/this-interactive-map-shows-first-dose-vaccination-rates-in-every-ontario-region-1.5452095

• Things we learned:

  • Coronavirus: Science shines a light on COVID-19's long-term health risks https://globalnews.ca/news/7916400/coronavirus-science-shines-a-light-on-covid-19s-long-term-health-risks/
  • Excess Deaths Reveal the Pandemic's Hidden Toll in Some U.S. Counties https://www.scientificamerican.com/article/excess-deaths-reveal-the-pandemics-hidden-toll-in-some-u-s-counties/
  • High levels of vitamin D may not protect against COVID-19, new study says https://globalnews.ca/news/7915805/vitamin-d-covid-study-illness-risk/
  • Where did the microchip vaccine conspiracy theory come from anyway? https://www.theverge.com/22516823/covid-vaccine-microchip-conspiracy-theory-explained-reddit

• Masks, anti-maskers, distancing, compliance, and repercussions:

  • Unruly passenger attempts to breach cockpit of Delta plane, forcing emergency landing https://globalnews.ca/news/7924051/delta-flight-cockpit-breach-new-mexico/

Off-Topic / Science & Tech / Lighter Side

A variety of scientific, technical, historical, and more light-hearted news.

• How Vancouver Aquarium otters took over a Twitch channel featuring video gamers live streaming from hot tubs https://www.cbc.ca/news/canada/british-columbia/aquarium-otters-displace-live-streaming-videogamers-1.6040032
• Mockingbird song decoded https://scienmag.com/mockingbird-song-decoded/
• Voting opens for storm drain names in Regina, 'Darth Grater' among Top 10 https://globalnews.ca/news/7914816/regina-storm-drain-names-top-10-voting/
• It's Time For Congress to Support Fusion Energy https://www.scientificamerican.com/article/its-time-for-congress-to-support-fusion-energy/
• United Airlines Wants to Bring Back Supersonic Air Travel https://www.nytimes.com/2021/06/03/business/economy/united-supersonic-planes-boom.html
• NASA Just Broke the 'Venus Curse': Here's What It Took https://www.scientificamerican.com/article/nasa-just-broke-the-venus-curse-heres-what-it-took/
• New Technique to Search for Life, Whether or not it's Similar to Earth Life https://www.universetoday.com/151399/new-technique-to-search-for-life-whether-or-not-its-similar-to-earth-life/
• Neutron stars may be quite a bit bigger than previously thought https://www.syfy.com/syfywire/neutron-stars-may-be-quite-a-bit-bigger-than-previously-thought
• Now we know just how far away a magnetar is https://www.syfy.com/syfywire/now-we-know-just-how-far-away-a-magnetar-is
• Death by Primordial Black Hole https://www.scientificamerican.com/article/death-by-primordial-black-hole/