Supermarktketen ALDI opent morgen in Utrecht een kassaloze winkel die via camera’s in het plafond en sensoren in de schappen ...

A cashless store in the Netherlands is being tested for a new technology.

Een cashloze winkel in Nederland wordt getest op een nieuwe technologie.

Supermarktketen ALDI opent morgen in Utrecht een kassaloze winkel die via camera’s in het plafond en sensoren in de schappen de boodschappen van klanten detecteert. Het filiaal in Utrecht dient als testlocatie waar de nieuwe technologie wordt geoptimaliseerd voor klanten en medewerkers. Volgens de supermarktketen worden alleen de bewegingen die de klant en het artikel maken gevolgd.

Supermarket chain ALDI is opening a cashless store in Utrecht tomorrow that detects customers' grocery shopping via cameras in the ceiling and sensors on the shelves. According to the supermarket chain, only the movements made by the customer and the item are tracked. The store is located on the Lange Viestraat in Utrecht.

Supermarktketen ALDI opent morgen in Utrecht een kassaloze winkel die via camera’s in het plafond en sensoren in de schappen de boodschappen van klanten detecteert. Het filiaal in Utrecht dient als testlocatie waar de nieuwe technologie wordt geoptimaliseerd voor klanten en medewerkers.

Het systeem dat de ALDI gebruikt is ontwikkeld door Trigo Vision en maakt gebruik van "intelligente camera’s" en sensoren in de schappen. Volgens de supermarktketen worden alleen de bewegingen die de klant en het artikel maken gevolgd. Het systeem maakt geen gebruik van gezichtsherkenning, scans van ogen of vingerafdrukken, of andere biometrische kenmerken. De winkel ligt aan de Lange Viestraat in Utrecht.

ALDI opent kassaloze winkel die boodschappen via sensoren detecteert - Security.NL

Het defensieconcern Thales, dat zich meer en meer richting cybersecurity beweegt, gaat voor honderd miljoen euro OneWelcome inlijven. Daaronder valt ook Scaled Access uit Leuven. ...

The French company OneWelcome is to be bought by a Dutch firm.

Het Franse bedrijf OneWelcome zal worden gekocht door een Nederlands bedrijf.

Met de overname versterken de Fransen hun positie op gebied van identity and access management (iam). Het fusiebedrijf is inmiddels Europees marktleider bij het regelen van de online-toegang voor consumenten, zakelijke partners en (onder)aannemers (customer identity, ciam). OneWelcome regelt de online-registratie, het inloggen en privacymanagement van grotere organisaties.

OneWelcome was formed a year ago n the merger of the Dutch companies IWelcome and OneGini. The merged company is now the European market leader in arranging online access for consumers, business partners and (sub)contractors (customer identity, ciam). Last March, the login specialist headquartered in Amersfoort acquired Scaled Access, a Leuven-based company specializing in authorization applications.

Het defensieconcern Thales, dat zich meer en meer richting cybersecurity beweegt, gaat voor honderd miljoen euro OneWelcome inlijven. Daaronder valt ook Scaled Access uit Leuven. Met de overname versterken de Fransen hun positie op gebied van identity and access management (iam). OneWelcome ontstond een jaar geleden n de fusie tussen de Nederlandse bedrijven IWelcome en OneGini.

Het fusiebedrijf is inmiddels Europees marktleider bij het regelen van de online-toegang voor consumenten, zakelijke partners en (onder)aannemers (customer identity, ciam). OneWelcome regelt de online-registratie, het inloggen en privacymanagement van grotere organisaties.

Afgelopen maart nam de inlog-specialist met hoofdkwartier in Amersfoort nog Scaled Access over, een bedrijf uit Leuven gespecialiseerd in autorisatie-toepassingen. OneWelcome’s kennis van het beheer van digitale identiteiten sluit goed aan op Thales’ bestaande activiteiten op gebied van toegangsbeheer. De Fransen hebben de ambitie het meest uitgebreide Identity Platform te bieden. Doel is organisaties van elke omvang in staat te stellen om de identiteiten van eigen werknemers, klanten en andere externe relaties te beheren. Dit maakt voor hen gemakkelijker snel nieuwe online-diensten op te zetten. Ook de efficiency en klantervaring kunnen worden verbeterd.

 

 Danny de Vreeze, ceo OneWelcome, verwacht dat Thales met zijn wereldwijde organisatie OneWelcome ook buiten Europa kan laten groeien.T ot nog toe concentreerde het Nederlandse bedrijf zich op grote bedrijven met hoge veiligheidseisen zoals verzekeraars. Ook PostNL, NS en de Europese Centrale Bank zijn klant.

 

 De markt voor ciam groeit snel. Gartner verwacht dat volgend jaar bijna driekwart van de organisaties een ciam-initiatief heeft uitgerold tegen veertig procent in 2020.

Defensieconcern Thales koopt iam-specialist OneWelcome

Attack surface management startup JupiterOne has raised $70 million in a new round of financing that values the company north of $1 billion.

The estimated ‘unicorn’ valuation of a US cybersecurity firm has soared.

De geschatte "unicorn"-waardering van een Amerikaans cyberbeveiligingsbedrijf is omhoog geschoten.

Cloud security startup JupiterOne has raised $70 million in a new round of financing that values the company north of $1 billion. The Series C financing brings the total raised by JupiterOne to $119 million and the estimated ‘unicorn’ valuation is a signal that investors are willing to spend big on startups in the cyber asset attack surface management space. The company said the new funding will be used to expand go-to-market capabilities, expand engineering investments, and increase research and development into attack surface management solutions, including unified asset inventory, vulnerability management, and security posture automation.

Cloud security startup JupiterOne heeft 70 miljoen dollar opgehaald in een nieuwe financieringsronde die het bedrijf waardeert ten noorden van 1 miljard dollar. De Serie C-financiering brengt het totaal dat JupiterOne heeft opgehaald op $ 119 miljoen en de geschatte 'unicorn'-waardering is een signaal dat investeerders bereid zijn veel geld uit te geven aan startups in de cyber asset attack surface management-ruimte. Het bedrijf zei dat de nieuwe financiering zal worden gebruikt om de go-to-market mogelijkheden uit te breiden, de investeringen in engineering uit te breiden en onderzoek en ontwikkeling te stimuleren op het gebied van oplossingen voor het beheer van aanvalsoppervlakken, waaronder een gebundelde inventarisatie van bedrijfsmiddelen, het beheer van kwetsbaarheden en automatisering van beveiligingsposities.

Cloud security startup JupiterOne has raised $70 million in a new round of financing that values the company north of $1 billion.

The Series C financing brings the total raised by JupiterOne to $119 million and the estimated ‘unicorn’ valuation is a signal that investors are willing to spend big on startups in the cyber asset attack surface management space.

JupiterOne markets a cloud-native SaaS platform that provides visibility and security capabilities for an organization’s cyber assets. The company’s technology is used to help enterprises easily map, analyze, and secure complex cloud environments.

JupiterOne, based in Morrisville, North Carolina, said the new funding round was led by Tribe Capital with participation from new investor Alpha Square Group. Existing backers Sapphire and Bain Capital Ventures and invested.

The company said the new funding will be used to expand go-to-market capabilities, expand engineering investments, and increase research and development into attack surface management solutions, including unified asset inventory, vulnerability management, and security posture automation.

JupiterOne said the late-stage financing (and heady valuation) comes on the heels of a record year of growth in terms of revenue, customers, and employees.

Related: What's Behind the Surge in Cybersecurity Unicorns?

Cloud Security Startup JupiterOne Lands $70 Million at 'Unicorn' Valuation | SecurityWeek.Com

Apple test een functie voor de App Store die ontwikkelaars in staat stelt op gemakkelijke wijze prijzen voor abonnementen te verhogen.

Apple is testing a new way to raise subscription prices.

Apple test een nieuwe manier om de abonnementsprijzen te verhogen.

Hoewel gebruikers daar dan wel vanzelf een melding van ontvangen, hoeven ze geen actie te ondernemen. Je hoeft dus niet te bevestigen dat je het met de nieuwe prijs eens bent. Vanaf die melding geldt de nieuwe prijs voor een abonnement en ga je er dus in feite mee akkoord.

Although users will receive a notification of this automatically, they do not have to take any action. Users got a notification of that and... that was it. From that notification, the new price for a subscription applies and so you are in effect agreeing to it.

Apple test een functie voor de App Store die ontwikkelaars in staat stelt om op gemakkelijke wijze prijzen voor abonnementen te verhogen. Hoewel gebruikers daar dan wel vanzelf een melding van ontvangen, hoeven ze geen actie te ondernemen. Je hoeft dus niet te bevestigen dat je het met de nieuwe prijs eens bent.

De nieuwe optie is eind maart ontdekt, toen bleek dat streamingdienst Disney+ de prijzen omhoog gooide. Gebruikers kregen daar een melding van en… dat was het. Ze konden niet direct aangeven het er niet mee eens te zijn. Vanaf die melding geldt de nieuwe prijs voor een abonnement en ga je er dus in feite mee akkoord.

In de mail van Disney+ staat onderaan een grote, blauwe knop met daarin een OK. Daarboven staat echter een regel tekst, met kleine letters, die je doorverwijst naar meer informatie over je abonnement. Dat is tevens de plek waar je dat abonnement kunt annuleren, wanneer je niet van plan bent om meer te gaan betalen.

Het is niet duidelijk of gebruikers daadwerkelijk op de OK-knop moeten drukken. Vooralsnog lijkt het erop dat je melding krijgt van de prijsverhoging en dat je dat bedrag voortaan moet betalen. Het lijkt er dus op dat het nieuwe App Store-systeem automatisch kiest voor gebruikers en hen akkoord laat gaan.

Maar dat gaat tegen de richtlijnen in. Wanneer aanbieders van abonnementen binnen de App Store een prijsverhoging doorvoeren, dan moeten ze gebruikers expliciet de optie geven ermee akkoord te gaan. Momenteel heeft het nieuwe systeem in elk geval de schijn tegen zich, dus hopelijk komt hier snel opheldering over.

Apple heeft al wel gereageerd op de situatie, tegenover Techcrunch. In de komende weken verschijnen er meer details over dit nieuwe systeem, aldus een vertegenwoordiger. Diezelfde persoon gelooft erin dat de aankomende wijzigingen positief zijn voor zowel ontwikkelaars als gebruikers.

Geen keuze: hoe de App Store prijsstijgingen door je strot duwt

The FBI is becoming more adept at recovering bitcoin ransoms. Some criminals are responding by

A growing number of ransomware payments have been recovered by the FBI, according to the BBC’s weekly The Boss.

Een groeiend aantal betalingen van ransomware is teruggevorderd door de FBI, aldus het weekblad The Boss van de BBC.

The U.S. Department of Justice (DoJ) has recovered roughly a half million dollars in ransomware payments made to North Korean cyber criminals targeting healthcare organizations. The cybercriminals have been targeting healthcare organizations with a Maui strain of malware since at least May 2022. Maui first encrypts target files with AES 128-bit encryption, assigning each file a unique AES key.

De cybercriminelen hebben ten minste sinds mei 2022 gezondheidszorgorganisaties het doelwit gemaakt van een Maui-stam van malware. Maui versleutelt doelbestanden eerst met AES 128-bit encryptie, waarbij aan elk bestand een unieke AES-sleutel wordt toegekend. Met een aangepaste header in elk bestand, die het oorspronkelijke pad van het bestand bevat, kan Maui eerder versleutelde bestanden identificeren.

The U.S. Department of Justice (DoJ) has recovered roughly a half million dollars in ransomware payments made to North Korean cyber criminals targeting healthcare organizations. This is yet another sign law enforcement agencies are at least becoming more effective at preventing cyber attackers from enjoying their ill-gotten gains.

The cybercriminals have been targeting healthcare organizations with a Maui strain of malware since at least May 2022. Maui malware installs an encryption binary called “maui.exe” that employs a combination of Advanced Encryption Standard (AES), RSA, and XOR algorithms to prevent access to specific files.

Maui first encrypts target files with AES 128-bit encryption, assigning each file a unique AES key. A custom header contained in each file that includes the file’s original path allows Maui to identify previously encrypted files. The header also contains encrypted copies of the AES key. It then encrypts each AES key with RSA encryption and loads the RSA public (maui.key) and private (maui.evd) keys in the same directory as itself. It then encodes the RSA public key (maui.key) using XOR encryption with an XOR key that’s generated from hard drive information.

Finally, Maui then creates a temporary file for each file it encrypts using GetTempFileNameW() and then uses this file as the encrypted output. Maui then creates maui.log, which contains output from Maui execution that can be exfiltrated.

There’s not much to be done once Maui malware starts encrypting files, but the Federal Bureau of Investigations (FBI) in the U.S. did work closely with one of the victims of a Maui infestation to recover payments. After notifying the FBI, a hospital in Kansas paid approximately $100,000 in Bitcoin to regain access to its files. The FBI then traced those payments to a money laundering operation in China where it found an approximately $120,000 Bitcoin payment made by the Kansas hospital in a cryptocurrency account. The FBI also discovered that a medical provider in Colorado had just paid a ransom after being hacked by actors using the same Maui ransomware strain. The FBI seized the contents of two cryptocurrency accounts with the aim of eventually returning those funds to the ransomware victims.

While the FBI is generally being applauded for its efforts, there are concerns about what might come next. It’s clear that law enforcement agencies are getting more adept at tracking illicit cryptocurrency transactions and recovering those funds even in countries where they have no official jurisdiction. Cybercriminals are inevitably going to look for other methods of payment collection that are not quite as easy to track or recover. Some cybercriminals are, for example, looking to shift from Bitcoin to alternative, privacy-based digital currencies such as Monero.

Regardless of the payment method, ransomware transactions will likely be pushed further underground to avoid detection. In effect, the whole payment process for better or worse is likely to become that much more complex. As a result, the amount of time required to acquire the keys to decrypt files is likely to be just that much longer, which will only increase the level of stress for all involved.

The best way to eliminate that stress is to always have a pristine copy of data available. In the absence of that critical capability, it will be up to each organization to determine ahead of time how best to go about mastering the nuances of all the various types of cryptocurrency that might soon be more widely employed.

FBI recovers half million in ransomware payments

By Christopher Reynolds From verbal abuse to physical threats and police calls, front-line workers in the airline industry are finding themselves on the

Canadian airlines are struggling to cope with the coronavirus pandemic, according to a new report.

Volgens een nieuw rapport hebben Canadese luchtvaartmaatschappijen het moeilijk om het hoofd te bieden aan de pandemie van het coronavirus.

From verbal abuse to physical threats and police calls, front-line workers in the airline industry are finding themselves on the receiving end of passenger frustrations over flight delays and lost baggage. It also comes as the union representing more than 700 WestJet employees at airports in Calgary and Vancouver says they have voted to support a strike if they cannot reach a new contract with the airline. Toronto Pearson International Airport and Air Canada have topped global lists for share of flights delayed over the past month, frequently surpassing 50 per cent and fanning travellers’ ire.

Van verbaal geweld tot fysieke bedreigingen en politieoproepen: eerstelijnsmedewerkers in de luchtvaartindustrie worden het slachtoffer van de frustraties van passagiers over vertraagde vluchten en zoekgeraakte bagage. De gerafelde zenuwen en ontploffende buien zijn het resultaat van een voortdurende strijd door luchthavens en vervoerders om te gaan met de enorme reizen rebound deze zomer. Dit komt ook omdat de vakbond die meer dan 700 WestJet-werknemers op luchthavens in Calgary en Vancouver vertegenwoordigt, zegt dat zij voor een staking hebben gestemd als zij niet tot een nieuw contract met de luchtvaartmaatschappij kunnen komen.

From verbal abuse to physical threats and police calls, front-line workers in the airline industry are finding themselves on the receiving end of passenger frustrations over flight delays and lost baggage.

“I’ve had customers poke me in the chest and say, ‘You’re not going to get me off of this flight,'” said Cheryl Robinson, an Air Canada customer service agent at the Halifax airport.

“I’ve seen my colleagues in tears, walking away because they just can’t deal with another person yelling at them today.”

“It shakes you,” said Robinson, who’s worked at the airport for more than 24 years. “This is probably the worst I’ve ever seen.”

The frayed nerves and exploding tempers are the outcome of an ongoing struggle by airports and carriers to cope with the massive travel rebound this summer.

It also comes as the union representing more than 700 WestJet employees at airports in Calgary and Vancouver says they have voted to support a strike if they cannot reach a new contract with the airline.

Toronto Pearson International Airport and Air Canada have topped global lists for share of flights delayed over the past month, frequently surpassing 50 per cent and fanning travellers’ ire.

“We can all understand why they’re angry and frustrated. Your flight gets cancelled and they tell you to call and you wait on hold for six hours — and I’m not exaggerating,” said Leslie Dias, director of airlines at Unifor, which represents 16,000 air transport workers, including 5,600 customer service and sales agents at Air Canada.

“To some extent, our people are broken,” she said from Calgary, where she is part of the negotiations with WestJet over a deal for the hundreds of baggage and customer service agents.

“They’re upset, they’re often close to tears, they’re exhausted. At all airlines they’re being asked to work as many hours as they can possibly manage to work. And they feel helpless.”

Dias added that police officers are being called to airport gates daily because of verbal harassment from travellers.

The fallout from the “sinkhole of a mess” deters new recruits and drags down retention rates, she said.

Dias is calling on management for a stronger security presence as well as higher wages to attract more workers, which would speed up passenger processing and make employees feel safer, she said.

The workers in Calgary and Vancouver bargaining for their first collective agreement with WestJet start at $15.55 an hour, topping out at $23.87 an hour after seven years, she said.

On Wednesday, those employees voted 98 per cent in support of a strike if they cannot reach an agreement with the airline, and could walk off the job as early as July 27, Unifor said.

“The pay scale has not been increased for more than five years, making WestJet’s wages among the lowest in the Canadian aviation industry and no match for soaring inflation,” Unifor spokesman Scott Doherty said in a statement.

The union also highlighted a “pressure-cooker atmosphere,” stating that workers have endured verbal abuse and physical threats from travellers whose flights were delayed or cancelled by the carrier.

WestJet executive vice-president Angela Avery said the strike vote is a “common step” in the negotiation process and was “not unexpected.”

“We remain focused on successfully negotiating an agreement that provides value to our airport employees,” she said in a statement.

“As the airline rebuilds, the majority of its airports employees have been with the company for less than one year, and the vast majority of more tenured airport employees have received increases through the existing pay step structure, in addition to a Canadian industry leading variable compensation.”

Before taking any strike action, Unifor must serve WestJet with 72 hours’ notice.

At Air Canada, the payroll is at 93 per cent of 2019 levels, while its summer flight schedule is below 80 per cent of pre-pandemic volumes.

“We continue to recruit for certain jobs and have and continue to refine elements of our compensation packages to remain competitive in the current environment,” the company said in an email.

“Employees are professionals and they make every effort to manage challenging situations effectively in their respective environments. The overwhelming majority of passengers are respectful. That said, Air Canada has a zero-tolerance approach toward any kind of aggression in our business, especially towards our employees.”

Flight attendants and customs officers face their own passenger challenges as well.

“It’s like a nine-to-five job that’s now turned into a seven-day-a-week job with no fixed hours,” said Wesley Lesosky, who heads the Canadian Union for Public Employees’ airline division, which represents about 15,500 workers.

“If you have kids, if you have a family, a partner, a dog, cats … everything’s kind of up in the air.”

Frustration from long security queues, missed connecting flights, misplaced luggage and hours on tarmacs has pushed emotions to a “boiling point … resulting in increased reports of harassment and abuse — physical and verbal,” said Crystal Hill, president of CUPE 4070, which represents some 4,000 WestJet flight attendants.

“This is very scary when you’re 40,000 feet above ground.”

Border security agents also face exasperation from passengers, at least 30 per cent of whom show up at land and air checkpoints without having completed their ArriveCan app, said Mark Weber, president of the Customs and Immigration Union.

“We’re seeing an uptick in verbal abuse. In many cases they’re waiting in line two, three hours to get to us. We completely get why they’re frustrated,” he said.

The increase in automated kiosks to process international arrivals at some airports has not made up for staff cuts that helped reduce customs agents at Pearson airport to the current 300 from 600 in 2017, he added.

This report by The Canadian Press was first published July 20, 2022.

Airline workers face insults, physical threats as passenger frustration boils over

At Amazon Web Services (AWS) we prioritize security, performance, and strong encryption in our cloud services. In order to be prepared for quantum computer advancements, we’ve been investigating the use of quantum-safe algorithms for key exchange in the TLS protocol. In this blog post, we’ll first bring you up to speed on what we’ve been […]

The challenges of quantum-resistant encryption have been revealed in the latest phase of the project.

De uitdagingen van kwantumbestendige encryptie zijn in de laatste fase van het project aan het licht gekomen.

In order to be prepared for quantum computer advancements, we’ve been investigating the use of quantum-safe algorithms for key exchange in the TLS protocol. Then, we’ll focus on the QUIC transport protocol and show how you can enable and experiment with the newly released post-quantum (PQ) key exchange by using our s2n-quic library. The s2n-quic library is an open-source implementation of the QUIC protocol.

Om voorbereid te zijn op de vooruitgang van kwantumcomputers hebben wij onderzoek gedaan naar het gebruik van kwantumveilige algoritmen voor sleuteluitwisseling in het TLS-protocol. Daarna richten we ons op het QUIC transport protocol en laten we zien hoe je kunt experimenteren met de onlangs uitgebrachte post-quantum (PQ) sleuteluitwisseling door gebruik te maken van onze s2n-quic library. Waarom PQ-hybride sleutelopstelling gebruiken in s2n-quic?

At Amazon Web Services (AWS) we prioritize security, performance, and strong encryption in our cloud services. In order to be prepared for quantum computer advancements, we’ve been investigating the use of quantum-safe algorithms for key exchange in the TLS protocol. In this blog post, we’ll first bring you up to speed on what we’ve been doing on the TLS front. Then, we’ll focus on the QUIC transport protocol and show how you can enable and experiment with the newly released post-quantum (PQ) key exchange by using our s2n-quic library. The s2n-quic library is an open-source implementation of the QUIC protocol.

Why use PQ-hybrid key establishment in s2n-quic?

A large-scale quantum computer could break the current public key cryptography that is used to establish keys for secure communication connections. Although a large-scale quantum computer isn’t available today, traffic that is recorded now could be decrypted by one in the future. With such concerns in mind, the recent US Congress Quantum Computing Cybersecurity Preparedness Act and the White House National Security Memorandum set a goal of a timely and equitable transition of cryptographic systems to quantum-resistant cryptography.

At AWS, we are working to prepare for this future. Recently, AWS Key Management Service (AWS KMS), AWS Certificate Manager (ACM) and AWS Secrets Manager TLS endpoints started supporting post-quantum hybrid (PQ-hybrid) key establishment in TLS connections with three of the post-quantum key encapsulation mechanisms (KEMs) in the NIST Post-Quantum Cryptography (PQC) Project. The three post-quantum KEMs are Kyber (NIST’s Round 3 KEM selection), BIKE and SIKE (NIST’s Round 4 KEM candidates). All three of these AWS services’ support of post-quantum KEMs raises the security bar when making API requests to their endpoints over TLS.

PQ-hybrid key establishment in TLS is a feature that introduces post-quantum KEMs used in conjunction with classical Elliptic Curve Diffie-Hellman (ECDH) key exchange. The client and server still do an ECDH key exchange. Additionally, the server encapsulates a post-quantum shared secret to the client’s post-quantum KEM public key, which is advertised in the ClientHello message. This strategy combines the high assurance of a classical key exchange with the security of the proposed post-quantum key exchanges, to ensure that the handshakes are protected as long as the ECDH or the post-quantum shared secret cannot be broken.

After decapsulating the secret, the client and server have an ECDH and a post-quantum shared secret, which they concatenate and use to derive the symmetric keys that are used in the Authenticated Encryption with Additional Data (AEAD) cipher in TLS. These symmetric keys used by the AEAD cipher for data encryption will be secure against a quantum computer, which means that the TLS communication is secure against a quantum computer. The AWS implementation of TLS is s2n-tls, a streamlined open source implementation of TLS. The s2n-tls implementation already supports PQ-hybrid key exchange with ECDH and three NIST PQC Project KEMs (Kyber, BIKE, and SIKE) for TLS 1.2 and 1.3. The use of KEMs for TLS 1.2 is described in the draft-campagna-tls-bike-sike-hybrid IETF draft, and the use of KEMs for TLS 1.3 is described in the draft-ietf-tls-hybrid-design IETF draft.

AWS recently announced s2n-quic, an open-source Rust implementation of the QUIC protocol. QUIC is an encrypted transport protocol that is designed for performance and is the foundation of HTTP/3. For tunnel establishment, QUIC uses TLS 1.3 carried over QUIC transport. To alleviate the harvest-now-decrypt-later concerns for customers that use s2n-quic, in the next section we show you how to enable PQ-hybrid key establishment in s2n-quic. AWS services and software that use s2n-quic will automatically inherit the ability to support quantum-safe key exchanges in the future when post-quantum algorithms are standardized and are officially supported in s2n-quic.

The s2n-quic implementation is written in the Rust programming language. It can use either s2n-tls (the TLS library for AWS) or rustls (the TLS library in Rust) to perform the TLS handshake. If you build s2n-quic with s2n-tls, then s2n-quic inherits the post-quantum support that is offered in s2n-tls. In turn, s2n-tls is built over other crypto libraries such as the AWS libcrypto (AWS-LC) or alternatively OpenSSL crypto library (libcrypto). AWS-LC is a general-purpose cryptographic library that is maintained by AWS, which will incorporate standardized post-quantum algorithms. Therefore, building s2n-tls with AWS-LC will provide s2n-tls with the post-quantum cryptographic algorithms for use in s2n-quic.

Such a model allows for AWS services and software that use s2n-quic to automatically inherit the standardized post-quantum options as they are implemented in s2n-tls and its underlying crypto libraries. There will be no need to tweak s2n-quic to support post-quantum TLS 1.3 handshakes. The whole stack of protocol implementations is architected in an agile manner without duplication of work.

In the following section, we show you how to run an experimental PQ build of s2n-quic that supports PQ-hybrid key exchange.

The public s2n-quic GitHub repository includes an example that demonstrates how to build the library with PQ-hybrid key exchange support, along with a server and client to test. The PQ-hybrid key exchange feature test requires CMake in Linux or macOS. The experiments below were run in an Amazon Linux 2 instance with rustc, Cargo, Clang, and CMake installed. Connections that you establish with this experimental build of s2n-quic will support PQ-hybrid key exchange.
• Clone s2n-quic by using the following commands:
• Run the example post-quantum s2n-quic client and server in the post-quantum directory to confirm that they negotiate a PQ-hybrid key by using the following commands: Note: Although these examples with the PQ-hybrid feature experimental build of s2n-quic are self-contained, if you want to manually change and build s2n-quic and s2n-tls to enable PQ-hybrid key exchange, you have to update the default_tls13 policy in s2n-tls to point to security_policy_pq_tls_1_0_2021_05_26 in tls/s2n_security_policies.c. Then you rebuild s2n-tls and override the location that s2n-quic links to by setting the S2N_TLS_DIR, S2N_TLS_LIB_DIR, and S2N_TLS_INCLUDE_DIR environment variables at build time.
• To confirm the PQ-hybrid key establishment, you capture the QUIC negotiation by using the following command:
• Open the capture by using a packet capture visualization application. First you look at the ClientHello message, as shown in the capture in Figure 1 taken from Wireshark. In the QUIC CRYPTO frame, you can see the TLS 1.3 cipher suites, and that the TLS version is 1.3 while the supported key exchange groups are classical ECDH (with identifiers 0x0017, 0x0018, 0x001d) and 0x2f39, 0x2f3a, 0x2f37…. 0x2f1f. The 0x2f… groups are the agreed upon identifiers (not standardized yet) for PQ-hybrid key exchange. You also see the PQ-hybrid X25519+Kyber512 (with identifier 12089 or 0x2f39) key share that is offered by the client. That key share includes 32 bytes for the Curve25519 ephemeral ECDH client public key, 800 bytes for the ephemeral Kyber512 public key, and 4 bytes for the identifier and the key share length. Note: The post-quantum KEMs implementations at the time of this writing follow the NIST Round 3 Kyber, BIKE, and SIKE specifications. We expect these specifications to change as the NIST PQC Project proceeds with standardization. Post-quantum support in s2n-tls and s2n-quic will be experimental until NIST has selected and published standardized algorithms and identifiers. Pushing the change to the main branch now would mean that s2n-quic clients would be sending a PQ-hybrid key share that won’t be used until the servers on the internet start supporting it. The actual algorithms and their identifiers will still be integrated in future releases of s2n-tls and AWS-LC. Therefore, s2n-quic will still be able to negotiate the NIST and IETF standardized options. Meanwhile, we will continue to experiment with post-quantum QUIC and its potential challenges.
• Next, take a look at the server-negotiated keys in the ServerHello message, as shown in Figure 2.

You can again see the TLS 1.3 cipher suite, the TLS version being 1.3, and the picked PQ-hybrid X25519+Kyber512 key share. The key share includes 4 bytes for the identifier and the key share length, 32 bytes for the Curve25519 ephemeral ECDH server public key, and 768 bytes for the Kyber512 ciphertext that encapsulates a post-quantum shared secret to the client’s ephemeral Kyber512 public key (included in its ClientHello message).

The rest of the handshake completes successfully by deriving symmetric keys from the X25519 and Kyber512 post-quantum shared secrets (as defined in the draft-ietf-tls-hybrid-design IETF draft) and encrypting the rest of the messages with Advanced Encryption Standard with Galois/Counter Mode (AES-GCM) by using these symmetric keys over QUIC.

Now you can benchmark the post-quantum QUIC client and server by using netbench, a transport protocol benchmarking tool that is available in the s2n-quic repository.

To benchmark the post-quantum QUIC client and server
• Go in the netbench directory and build it with the correct flags for the experimental post-quantum QUIC examples, by using the following commands:
• Generate the scenario by using the following commands: In this example, you’re trying to create 10,000 sequential QUIC connections. The scenario opens a connection, sends a single byte, receives a single byte, closes it, and repeats 10,000 times.
• Run the server by using the following command:
• Run the client by using the following command: The drivers read the request_response.json to run the scenario. Then the driver is wrapped in a collector that outputs statistics to another JSON file. At the end of all of the 10,000 runs, the cli feature is used to generate the report.

Figure 3 shows the performance results for X25519, X25519+Kyber512, X25519+BIKE-1, and X25519+SIKEp434 key exchange. All connections used an ECDSA P256 server certificate for authentication.

The x-axis is time in seconds. The y-axis is the number of times send is called—which, for 1 byte per connection, practically means that the diagram shows the connection establishment rate (per second). The absolute performance numbers in these benchmarks are not important, because the results could change based on the netbench scenario parameters. The performance difference between PQ-hybrid key exchange algorithms is what this graph is highlighting.

You can see that the classical X25519 achieves higher connection rates, because it is the most efficient option (that offers no post-quantum protection). The performance of Kyber is competitive and achieves 8% fewer connections per second when used with X25519 in a PQ-hybrid key exchange. BIKE-1 is relatively efficient, but adds some extra latency and introduces two frames for the ClientHello, which leads to 37% fewer connections per second. SIKEp434, although it offers much smaller public keys and ciphertexts, is orders of magnitude slower, which means it offers 95% fewer connections per second. These results match previous results we have shared before and other research works, where the most efficient signature algorithms ended up with higher connection rates and lower connection failure probabilities due to overload.

In this post, we showed how you can use s2n-quic in conjunction with s2n-tls to enable QUIC connections to negotiate encryption keys in a quantum-resistant manner. If you’re interested in learning more about s2n-quic, join us at AWS re:Inforce in July for the breakout session entitled NIS304: Using s2n-quic: Bringing QUIC, the secure transport protocol, to AWS.

As always, if you’re interested in using or contributing to s2n-quic, the source code and documentation are publicly available under the terms of the Apache Software License 2.0 from our s2n-quic GitHub repository. If you package or distribute s2n-quic or s2n-tls, or use it as part of a large multi-user service, you might be eligible for pre-notification of security issues. Contact s2n-pre-notification@amazon.com for more information. If you discover a potential security issue in s2n-quic or s2n-tls, we ask that you notify AWS Security by using our vulnerability reporting page.

If you have feedback about this post, submit comments in the Comments section below. If you have questions about this post, contact AWS Support.

Want more AWS Security news? Follow us on Twitter.

Enable post-quantum key exchange in QUIC with the s2n-quic library

A dispute over legal protections for American customs officers has kept Nexus enrolment centres closed in Canada more than three months after they

The Canadian government says it is trying to resolve a long-running border dispute with the United States.

De Canadese regering zegt te proberen een langlopend grensgeschil met de Verenigde Staten op te lossen.

A dispute over legal protections for American customs officers has kept Nexus enrolment centres closed in Canada more than three months after they reopened south of the border — due in part to a clash over U.S. agents’ right to carry guns on Canadian soil. The Canada Border Services Agency says the number of Nexus applications has ballooned to 341,688 from about 270,000 in April at a time when delays are wreaking havoc on travellers’ summer plans. Two senior Canadian government sources told The Canadian Press the U.S. wants its customs officers who work in Nexus centres to have the same protections guaranteed to its preclearance officers in Canada under a bi-national agreement, with sidearms as a major sticking point in the talks.

Een geschil over de wettelijke bescherming van Amerikaanse douanebeambten heeft ertoe geleid dat de Nexus-inschrijvingscentra in Canada gesloten zijn gebleven, meer dan drie maanden nadat zij ten zuiden van de grens weer open waren gegaan - ten dele als gevolg van een conflict over het recht van Amerikaanse beambten om op Canadees grondgebied wapens te dragen. Volgens het Canada Border Services Agency is het aantal Nexus-aanvragen gestegen van ongeveer 270.000 in april tot 341.688, terwijl de vertragingen de zomerplannen van reizigers in de war schoppen. Twee hooggeplaatste Canadese regeringsbronnen vertelden The Canadian Press dat de VS willen dat hun douanebeambten die in de Nexus-centra werken dezelfde bescherming krijgen als hun preclearance-ambtenaren in Canada in het kader van een bi-nationale overeenkomst, waarbij zijwapens een belangrijk knelpunt in de besprekingen vormen.

A dispute over legal protections for American customs officers has kept Nexus enrolment centres closed in Canada more than three months after they reopened south of the border — due in part to a clash over U.S. agents’ right to carry guns on Canadian soil.

The standoff has led to a massive backlog in applications for the program, which allows pre-approved travellers to cross the border more quickly.

The Canada Border Services Agency says the number of Nexus applications has ballooned to 341,688 from about 270,000 in April at a time when delays are wreaking havoc on travellers’ summer plans.

Canada and the U.S. remain in discussions about when the 13 enrolment centres will reopen for applicant interviews as the two sides try to clarify “legal protections” for American customs officers while they are working at the jointly staffed centres, agency spokeswoman Rebecca Purdy said in an email.

U.S. Customs and Border Protection confirmed the holdup revolves around legal “authorities” for its Nexus office staff.

“One example could include the authority to carry or have access to a firearm while on duty,” spokeswoman Rhonda Lawson said in an email.

Two senior Canadian government sources told The Canadian Press the U.S. wants its customs officers who work in Nexus centres to have the same protections guaranteed to its preclearance officers in Canada under a bi-national agreement, with sidearms as a major sticking point in the talks.

The sources spoke on the condition of anonymity because they were not authorized to discuss the matter publicly.

All first-time Nexus applicants whose initial submissions are approved must come in for an enrolment centre interview before they get the green light. Some existing cardholders must also book a sit-down to renew their membership, which expires after five years.

About 75 per cent of current Nexus members are Canadian citizens, and another three per cent are permanent residents, according to the border agency.

While Canadians are allowed to head to one of a dozen Nexus centres in the U.S. located near the border, the wait is a long one. Five locations have no appointments available and four have none until next year, according to the U.S. Department of Homeland Security website. The only three spots with openings in 2022 are in Minnesota and Michigan’s Upper Peninsula.

The delay is affecting tourism and causing inconvenience for frequent border crossers.

“If you had more people with Nexus, they get through faster and they don’t clog up the other line,” said Jill Wykes, editor of Snowbird Advisor, an online resource for snowbirds.

“Many other government offices are open,” she said. “I think it’s inexcusable.”

The enrolment centres shut down in March 2020 due to the COVID-19 pandemic. Those in the U.S. reopened on April 19.

Since then, airports around the world have grappled with long security and customs queues amid staffing shortages and a massive travel rebound.

“It for sure has exacerbated the delay,” Duncan Dee, Air Canada’s former chief operating officer, said of the thinning number of Nexus travellers.

Added Teamsters Canada spokeswoman Catherine Cosgrove: “I haven’t even applied for Nexus, because there’s no point.”

Prime Minister Justin Trudeau declined to say whether firearms were at the heart of the impasse.

“I think it’s really important that we are able to stay true to our values as Canadians but respect the way we need to work together,” he told reporters Friday on a visit to Stratford, P.E.I.

“There are ongoing conversations right now and we’re going to try and make sure they get resolved in a way that is acceptable to both sides.”

The dispute has come up in recent discussions between Public Safety Minister Marco Mendicino and U.S. Homeland Security Secretary Alejandro Mayorkas, according to a Canadian government source.

Like the Fast program for long-haul trucker drivers, Nexus is a “trusted traveller” program that expedites entry for pre-cleared border crossers, typically through separate lines and automated kiosks at land crossings and airports as well as marine ports.

On top of a question portion, first-time interviews at enrolment centres include a high-resolution iris photo and fingerprinting, to be used for scanning at border kiosks.

Most Nexus processing centres are located at airports, though they are separate from customs halls.

“Why does an American officer need a gun during the Nexus interview? It’s not necessary,” said Len Saunders, an immigration lawyer based in Blaine, Wash., just south of Vancouver. He echoed one of the Canadian government sources, who noted any interviewees would already be provisionally approved following their background checks.

A Canada-U.S. agreement that took effect in 2019 laid out certain protections for U.S. border officers working in preclearance areas on Canadian soil and vice versa.

Preclearance is when customs and immigration officials from the destination country admit travellers in the country of origin — for example, clearing U.S. customs at the Toronto airport before boarding a flight to Los Angeles. The U.S. operates preclearance sites at eight Canadian airports and one ferry crossing.

Protections under the 2019 agreement include, for example, U.S. border officers being tried in American court for most offences if they’re charged with an on-duty crime in Canada. The deal also specifies that U.S. customs officers can carry firearms wherever Canada Border Services Agency officers can.

Neither CBSA nor U.S. officers are permitted to carry guns in Nexus centres. In the case of Nexus centres inside airports, the locations are distinct from preclearance areas.

The U.S. is seeking to apply the terms of the preclearance agreement to agents working in Nexus offices, which are not explicitly covered by the binational scheme, according to Saunders and the two government sources.

Not all stakeholders see Nexus as key to reducing overall wait times.

“It would be good to have them open again,” said Mark Weber, president of Canada’s Customs and Immigration Union, which represents some 10,000 border guards.

“But opening the Nexus offices will certainly not get people on to the front line, where we really need them.”

This report by The Canadian Press was first published July 22, 2022.

Clash over whether U.S. officers can be armed in Canada keeps Nexus centres closed

By Brett Bundale Rogers Communications Inc. was unable to switch customers to competing carriers during the unprecedented service outage earlier this

A Canadian telecom company has revealed how it was unable to restore its network during the blanket outage.

Een Canadees telecombedrijf heeft onthuld hoe het zijn netwerk niet heeft kunnen herstellen tijdens de algemene uitval.

Rogers Communications Inc. was unable to switch customers to competing carriers during the unprecedented service outage earlier this month despite offers of assistance from Bell and Telus, the company said in a document released late Friday. The fresh details offer a glimpse into the multiple options considered by Rogers during the blanket outage that knocked out mobile, landline and internet service to millions of customers across Canada on July 8. Despite competitors offering assistance during the outage, the company said it was unable to switch customers to a rival carrier.

Rogers Communications Inc. was niet in staat klanten om te schakelen naar concurrerende carriers tijdens de ongekende uitval van de dienst eerder deze maand, ondanks aanbiedingen van hulp van Bell en Telus, zei het bedrijf in een document vrijgegeven laat vrijdag. De nieuwe details bieden een blik op de verschillende opties die Rogers heeft overwogen tijdens de algemene storing die op 8 juli miljoenen klanten in heel Canada van mobiele telefonie, vaste telefonie en internet beroofde. Als gevolg daarvan was Rogers niet in staat de meeste 911-oproepen te routeren of vier noodsignalen af te geven tijdens de onderbreking van de dienst.

Rogers Communications Inc. was unable to switch customers to competing carriers during the unprecedented service outage earlier this month despite offers of assistance from Bell and Telus, the company said in a document released late Friday.

The telecom giant was also unable to shut down its radio access network, which would have automatically connected customers to another carrier for 911 calls, Rogers said in a submission to the Canadian Radio-television and Telecommunications Commission.

The fresh details offer a glimpse into the multiple options considered by Rogers during the blanket outage that knocked out mobile, landline and internet service to millions of customers across Canada on July 8.

It also reveals how the sweeping outage across its network limited its ability to respond with interim solutions while it restored service.

As a result, Rogers was unable to route most 911 calls or deliver four emergency alerts during the service disruption.

Despite competitors offering assistance during the outage, the company said it was unable to switch customers to a rival carrier.

It said doing so would have required access to parts of its system that were down during the outage.

Competing networks, Rogers said in its submissions, would also not have been able to handle the extra sudden volume of wireless customers, which the company pegged at more than 10 million.

The related voice and data traffic surge could have impeded operations on the other carriers’ networks, it said.

Meanwhile, Rogers considered shutting down its radio access network during the outage, which would have automatically connected customers to another carrier for 911 calls.

But once again, the company said the outage that took down its core system made such a shutdown impossible.

Moreover, turning off the radio access network would have prolonged the outage because restoring it once its network was fixed would have taken several hours, Rogers said.

“While considered many times during the day, shutting down the (radio access network) was simply not a solution,” Rogers said in its submission to the CRTC.

“The best and fastest way to restore 911 was to restore the network itself.”

As a result, Rogers said its radio access network remained in service, preventing many customer phones from automatically attempting to connect elsewhere.

Mobile customers always have the option to remove the SIM card from their device and to then place a 911 call. The handset will automatically connect to the strongest signal for emergency calls, Rogers said.

Although the number of failed 911 calls is unknown, the company said it was able to route “thousands” during its network’s intermittent service. Some Rogers customers were able to place emergency calls using the Bell or Telus networks.

Much of the specific information Rogers submitted to the CRTC was redacted from the document for security and competitive purposes.

Rogers also said four emergency alerts, all issued in Saskatchewan, did not reach customers during the outage.

It said one alert from the RCMP was related to a dangerous person while three were tornado warnings issued by Environment Canada.

Rogers, Bell and Telus are currently discussing solutions for potential future outages, which are expected to be included in a report to Ottawa this fall.

Rogers has come under intense scrutiny from both customers and the Canadian government following the ordeal, which also affected businesses and the Interac debit system.

Chief Executive Tony Staffieri has pledged to improve the resiliency of the company’s mobile and internet network.

Company representatives are scheduled to appear before the House of Commons industry committee on Monday to further discuss the outage.

The committee held an emergency meeting on July 15 and voted unanimously to open an investigation into the outage.

The committee will seek answers about the cause of the outage, its overall effect, and best practices to avoid similar situations in the future and better communicate with the public during such emergencies.

Following the outage, Innovation Minister François-Philippe Champagne directed Canada’s major telecom companies to reach agreements on assisting each other during outages and a communication protocol to better inform Canadians during emergencies.

This report by The Canadian Press was first published July 23, 2022.

Rogers unable to switch customers to Bell, Telus, despite competing carrier offers

By Maria Cheng in London LONDON (AP) — The expanding monkeypox outbreak in more than 70 countries is an “extraordinary” situation that qualifies as a

The monkeypox outbreak has been declared a global emergency.

De uitbraak van monkeypox is uitgeroepen tot een wereldwijde noodsituatie.

A global emergency is WHO’s highest level of alert but the designation does not necessarily mean a disease is particularly transmissible or lethal. Similar declarations were made for the Zika virus in 2016 in Latin America and the ongoing effort to eradicate polio, in addition to the COVID-19 pandemic and the 2014 Ebola outbreak in West Africa. Although monkeypox has been established in parts of central and west Africa for decades, it was not known to spark large outbreaks beyond the continent or to spread widely among people until May, when authorities detected dozens of epidemics in Europe, North America and elsewhere.

Soortgelijke verklaringen zijn afgelegd voor het Zika-virus in 2016 in Latijns-Amerika en de voortdurende inspanningen om polio uit te roeien, naast de COVID-19-pandemie en de uitbraak van ebola in 2014 in West-Afrika. Het hoofd voor noodgevallen van de WHO, Dr. Michael Ryan, zei dat de directeur-generaal de monkeypox tot een wereldwijde noodsituatie heeft verklaard om ervoor te zorgen dat de wereld de huidige uitbraken serieus neemt. Hoewel monkeypox al tientallen jaren voorkomt in delen van Centraal- en West-Afrika, was niet bekend dat de ziekte grote uitbraken buiten het continent veroorzaakte of zich op grote schaal onder mensen verspreidde tot mei, toen de autoriteiten tientallen epidemieën in Europa, Noord-Amerika en elders ontdekten.

LONDON (AP) — The expanding monkeypox outbreak in more than 70 countries is an “extraordinary” situation that qualifies as a global emergency, the World Health Organization chief said Saturday, a declaration that could spur further investment in treating the once-rare disease and worsen the scramble for scarce vaccines.

A global emergency is WHO’s highest level of alert but the designation does not necessarily mean a disease is particularly transmissible or lethal. Similar declarations were made for the Zika virus in 2016 in Latin America and the ongoing effort to eradicate polio, in addition to the COVID-19 pandemic and the 2014 Ebola outbreak in West Africa.

WHO Director-General Tedros Adhanom Ghebreyesus made the decision on calling monkeypox a global emergency despite a lack of consensus among experts on the U.N. health agency’s emergency committee, saying he acted as “a tiebreaker.” It was the first time a U.N. health agency chief has unilaterally made such a decision without an expert recommendation.

“We have an outbreak that has spread around the world rapidly through new modes of transmission, about which we understand too little,” Tedros said. “I know this has not been an easy or straightforward process and that there are divergent views.”

WHO’s emergencies chief, Dr. Michael Ryan, said the director-general declared monkeypox a global emergency to ensure that the world takes the current outbreaks seriously.

Although monkeypox has been established in parts of central and west Africa for decades, it was not known to spark large outbreaks beyond the continent or to spread widely among people until May, when authorities detected dozens of epidemics in Europe, North America and elsewhere.

Last month, WHO’s expert committee said the monkeypox outbreak did not yet amount to an international emergency, but the panel convened this week to reevaluate the situation.

According to the U.S. Centers for Disease Control and Prevention, more than 16,000 cases of monkeypox have been reported in 74 countries since about May. To date, monkeypox deaths have only been reported in Africa, where a more dangerous version of the virus is spreading, mainly in Nigeria and Congo.

In Africa, monkeypox mainly spreads to people by infected wild animals like rodents in limited outbreaks that typically have not crossed borders. In Europe, North America and elsewhere, however, monkeypox is spreading among people with no links to animals or recent travel to Africa.

WHO’s top monkeypox expert, Dr. Rosamund Lewis, said this week that 99% of all the monkeypox cases beyond Africa were in men and that of those, 98% involved men who have sex with men. Experts suspect the monkeypox outbreaks in Europe and North America were spread via sex at two raves in Belgium and Spain.

“Although I am declaring a public health emergency of international concern for the moment, this is an outbreak that is concentrated among men who have sex with men, especially those with multiple sexual partners,” Tedros said. “That means that this is an outbreak that can be stopped with the right strategies.”

Britain recently downgraded its assessment of monkeypox after seeing no signs of widespread transmission beyond men who are gay, bisexual or have sex with other men and noting the disease does not spread easily or cause severe illness.

The U.S. Centers for Disease Control and Prevention said it was “supportive” of WHO’s emergency declaration and hoped it would galvanize international action to stamp out the outbreaks. The U.S. has reported more than 2,800 monkeypox cases and sent more than 370,000 vaccine doses to U.S. states reporting cases.

Some experts had questioned whether such a declaration would help, arguing the disease isn’t severe enough to warrant the attention and that rich countries battling monkeypox already have the funds to do so. Most people recover without needing medical attention, although the lesions may be painful.

Michael Head, a senior research fellow in global health at Southampton University, said WHO’s emergency declaration could help donors like the World Bank make funds available to stop the outbreaks both in the West and in Africa.

In the U.S., some experts have speculated whether monkeypox might be on the verge of becoming an entrenched sexually transmitted disease in the country, like gonorrhea, herpes and HIV.

“The bottom line is we’ve seen a shift in the epidemiology of monkeypox where there’s now widespread, unexpected transmission,” said Dr. Albert Ko, a professor of public health and epidemiology at Yale University. “There are some genetic mutations in the virus that suggest why that may be happening, but we do need a globally-coordinated response to get it under control.”

Ko called for testing to be immediately scaled up, saying there are significant gaps in surveillance.

“The cases we are seeing are just the tip of the iceberg,” he said. “The window has probably closed for us to quickly stop the outbreaks in Europe and the U.S., but it’s not too late to stop monkeypox from causing huge damage to poorer countries without the resources to handle it.”

WHO’s Tedros called for the world to “act together in solidarity” regarding the distribution of treatments, tests and vaccines. for monkeypox. The U.N. agency has previously said it’s working to create a vaccine-sharing mechanism for the most-affected countries, but offered few details of how it might work. Unlike the numerous companies that made COVID-19 vaccines, there is only one maker for the vaccine used against monkeypox, Denmark’s Bavarian Nordic.

Dr. Placide Mbala, a virologist who directs the global health department at Congo’s Institute of National Biomedical Research, said he hoped any global efforts to stop monkeypox would be equitable. Although countries including Britain, Canada, Germany and the U.S. have ordered millions of monkeypox vaccine doses, none have gone to Africa.

“The solution needs to be global,” Mbala said, adding that any vaccines sent to Africa would be used to target those at highest risk, like hunters in rural areas.

“Vaccination in the West might help stop the outbreak there, but there will still be cases in Africa,” he said. “Unless the problem is solved here, the risk to the rest of the world will remain.”

Jamey Keaten in Geneva and Mike Stobbe in New York contributed to this report.

ALDI opent kassaloze winkel die boodschappen via sensoren detecteert - Security.NL

Vergelijkbare publicaties

FBI vordert half miljoen aan ransomware betalingen terug

Werknemers luchtvaartmaatschappij geconfronteerd met beledigingen, fysieke bedreigingen als passagier frustratie kookt over

Activeer post-kwantum sleuteluitwisseling in QUIC met de s2n-quic bibliotheek

Conflict over de vraag of Amerikaanse agenten gewapend mogen zijn in Canada houdt Nexus-centra gesloten

Rogers niet in staat klanten over te zetten naar Bell, Telus, ondanks concurrerende carrier aanbiedingen

Hoofd van VN-gezondheidsorganisatie verklaart apenpokken tot wereldwijde noodsituatie

Gevonden topics

Defensieconcern Thales koopt iam-specialist OneWelcome

Cloud Security Startup JupiterOne haalt 70 miljoen dollar binnen bij 'Unicorn' waardebepaling | SecurityWeek.Com

Geen keuze: hoe de App Store prijsstijgingen door je strot duwt