Australian software engineer Richard Nelson is warning that he was able to create a fake digital COVID-19 vaccine certificate via the government’s Express Medicare Plus app. Nelson was part of a team of independent security researchers that last year identified serious flaws in Australia’s digital contact-tracing app. He says the agency in charge of the app has so far failed to acknowledge his bug report. The fix would involve a couple of architectural security fixes that would ensure that the actual vaccination-related data is verified.”]