Respond to prefers-color-scheme dark in app web views

Follow section front redirects in Spectrum

Enable NLP source in PCS for load testing

Switch off the News Alerts Survey Widget when we have enough responses

Poll to determine if new LUF updates are available

Allows the winning A/B test variant to be turned on without Spectrum deployment

Show infinite scrolling sections in Assembler MultiView

Show option for NLP article summaries in Action Bar

A general feature flag for Recipe Features that aren't yet released

Feature flag for media team features that aren't yet released

Use new Orca video player for preroll plugin in Spectrum

Show the snow tracker (instead of the heat tracker) on Spectrum

The Capitals, a team in transition, know what they want this offseason

Is Pastis as good as our food critic thought? He sent spies to find out.

Nationals can’t solve Nate Eovaldi, drop series finale to Rangers

What’s the best bus to New York? We tested 5 for comfort and value.

You asked: Do I need a passport for my cruise?

Adaptive equipment is making national parks more inclusive

Israel’s offensive is destroying Gaza’s ability to grow its own food

Riot police and over 2,000 arrests: A look at 2 weeks of campus protests

‘It’s been abused’ Rep. McCaul on motion to vacate threat

On Press Freedom Day, little to celebrate for Hong Kong’s journalists

Young Georgians want to be part of Europe. Their government is in the way.

Taxes are inevitable. Paying to prepare them doesn’t have to be.

The New York Times, alone in its outrage over access to Biden

Wait, what is Stephen A. Smith talking about? Find out with our quiz.

Stephen A. Smith would like even more of your attention

Trump Media auditor charged by SEC with ‘massive fraud’

Biden honors distinguished Americans; Trump back in N.Y. court

Google’s empire is massive. A judge will soon rule if it’s a monopoly.

Teen grabs wheel when driver passes out and school bus veers into traffic

Cat climbed into Amazon return box, found alive 630 miles away

Brave Little Hunter is free: Baby orca escapes lagoon for open seas

Ask Amy: Should I be the best man if I think the bride is abusive?

Carolyn Hax: Husband keeps pushing modest spouse to wear sexier clothes

Miss Manners: Host eats luxurious breakfast, leaves cereal for guest

Journalism in India is under assault

The dangerous new call for regime change in Beijing

Ukrainian men abroad voice anger over pressure to return home to fight 

An I bond is now at 4.28 percent. Are they still a good deal?

Use these 6 points to say no to a college you and your kid can’t afford

How this new rule protects retirement savers from costly advice

Hope Hicks witnessed nearly every Trump scandal. Now she must testify.

State laws measure if a woman is close enough to death for an abortion

See more coverage in your recommendations

Get the weekly Campaign Moment newsletter

Set alerts for major election developments

Election 2024

The Campaign Moment newsletter

Politics alerts

Welcome to The Cybersecurity 202! <a href="https://collider.com/snl-break-character/">Saving you a click</a>: No, SNL is not only funny when everyone breaks character. In fact, it’s almost never funny when someone breaks character.

Reading this online? <a href="https://www.washingtonpost.com/newsletters/the-cybersecurity-202/">Sign up for The Cybersecurity 202 to get scoops and sharp analysis in your inbox each morning.</a>

Below: Israel’s leading technology university was reportedly hacked on Sunday and some Pentagon staffers are using unauthorized apps on government-issued devices. First:

The biggest risks in cyberspace in 2023 could come on defense, offense and the economy

Chris Ratcliffe

The top cyber risks of 2023 range from growing geopolitical tensions to insufficient corporate leadership attention and the scarcity of cyber personnel, according to a new report from the Bipartisan Policy Center, a Washington think tank.

This year’s other top cybersecurity risks, <a href="https://bipartisanpolicy.org/report/top-risks-cybersecurity-2023/">according to the report</a>, include technological advancement fueling a cyber arms race; economic uncertainty; lackluster preparation for cyberattacks; a patchwork of regulations; and vulnerable infrastructure.&nbsp;

Cybercriminals this year have already targeted schools and hospitals, as well as <a href="https://www.washingtonpost.com/politics/2023/01/18/royal-mess-uk-points-risks-cyberattacks-mail-delivery/?itid=lk_inline_manual_11">high-profile organizations like U.K. postal service Royal Mail</a>. Those cyberattacks came after a 2022 that saw <a href="https://www.washingtonpost.com/politics/2022/03/30/ukraine-suffered-two-cyberattacks-lead-up-russia-invasion/?itid=lk_inline_manual_11">cyberattacks out of the war in Ukraine</a>, a flurry of major ransomware attacks and some newer groups, like a <a href="https://www.bloomberg.com/news/articles/2022-03-23/teen-suspected-by-cyber-researchers-of-being-lapsus-mastermind">group of teenagers who hacked major companies</a>.

The Bipartisan Policy Center report drew on the expertise of a working group made up of state government officials, former federal government leaders, and representatives from civil society groups and corporate giants like Bank of America and Comcast. Equifax provided support for the project.

I’m moderating <a href="https://bipartisanpolicy.org/event/2023-top-cybersecurity-risks/">a panel</a> today at 10 a.m. Eastern at the Bipartisan Policy Center headquarters to discuss the report. Until then, here’s a rundown of some of its conclusions.

“Evolving geopolitical environment”

Rising international conflict and protectionism are driving risk, the center found. Russia’s war in Ukraine is the biggest factor, with the potential for cyberattacks to spill out of the borders of that conflict. But conflicts between China and Western nations, as well as conflict in the Middle East, are other drivers of risk.

“Accelerating cyber arms race”

Decades-old attacks can still be effective, but innovation causes problems for cyberdefense, the report observes. “Rapid and continual advancements in offensive and defensive capabilities require defenders to keep pace in an environment that disproportionately favors attackers,” it states. “Advances in artificial intelligence simultaneously offer great opportunity and danger, the democratization of advanced attack techniques, and unprecedented automation/scalability.”

“Vulnerable infrastructure”

Critical infrastructure will always be an attractive target for hackers, particularly smaller operators, the Bipartisan Policy Center noted. At particular risk are smaller operators who rely on state and local agencies or third-party suppliers.

“Lack of investment, preparedness and resilience”

Neither governments nor businesses have adequately invested in preparing for disastrous cyberattacks, including ransomware, according to the report. A lack of preparedness, and reliance on third-party suppliers, also increases the risk of data breaches and loss of confidential information.

“Global economic head winds”

Stock market volatility, inflation and the chances of a recession stand to affect cyber risk in a number of ways, the report states. Chief among them is entities putting off cybersecurity to shift money to other priorities, but a recession also could lead investors to avoid putting money into cybersecurity start-ups.

“Lagging corporate governance”

Large firms have made “modest headway” toward adding cyber expertise to corporate boards and senior leadership, but too many still haven’t, the Bipartisan Policy Center concluded. Small- and medium-sized businesses have a particular lack of expertise. The Securities and Exchange Commission has <a href="https://www.sec.gov/news/press-release/2022-39">proposed amendments to its rules</a> that would require public companies to report periodically on management and board of directors expertise.

“Overlapping, confusing and subjective regulations”

“In the United States, and internationally as a consequence of their global nexus, companies navigate the complex patchwork of required cybersecurity, data security, and privacy regulations implemented by national, state, and local authorities, with varying prescriptive requirements,” the report reads.&nbsp;

Governments need to come to conclusions about things like deciding what level of confirmation of a cyberattack triggers requirements for a victim to report it to the government, according to the center. Some critics of strict notification requirements say that swift notification mandates can hamper responses to an incident, or lead to companies passing along useless, unconfirmed information.

Fortune 100 companies were less likely last year to report they had sufficient cyber talent — just 1 percent of them did — than in 2020, when 10 percent said they had enough. “The influence of COVID-driven educational attainment gaps that have yet to manifest might further contribute to the cybersecurity talent shortage,” the report says.

The Bipartisan Policy Center pointed out some smaller strategic and operational risks, with white-collar cybercrime (such as intellectual property theft) an example of the former and the commercialization of malware (such as dark web hacking kits) an example of the latter.

In its report, the think tank stops short of making recommendations to address the risks.

“We intentionally focused on identifying risks, not solutions, because various stakeholders may need to take different approaches,” the report states. “There are no one-size-fits-all fixes. Rather, these top risks must be considered individually by companies and collectively by the nation.”

Israeli cybersecurity officials plans to help top university recover from reported breach

One of Israel’s top technology universities, the Technion, was apparently breached by a new hacking group calling itself DarkBit, <a href="https://www.jpost.com/breaking-news/article-731327">the Jerusalem Post’s Yonah Jeremy Bob reports</a>.

The group is asking for 80 bitcoins, equal to around $1.7 million, to end the attack. It also said it would increase the ransom by 30 percent if the university does not pay the payment within 48 hours.&nbsp;

The Israel National Cyber Directorate has already reached out to the university. The agency said it plans to assist with resolving the incident and will study its consequences to help defend institutions from these kinds of hacks, although it doesn’t have the authority to enforce cyber standards on schools.&nbsp;

“The field of higher education has been a central target for cyber attackers, with the INCD identifying 53 [serious] incidents of such attacks in 2022, most of which were prevented,” the agency added.&nbsp;

It’s not clear what caused the attack, but the university said that classes would resume as normal, with the only exception being that students’ devices must be disconnected from the Technion’s network. &nbsp;

Hackers interrupt Iranian president’s TV speech

Vahid Salemi

Anti-government hackers briefly interrupted a televised speech by Iranian President Ebrahim Raisi on Saturday, which marked the 44th anniversary of the country’s revolution, <a href="https://www.cnn.com/2023/02/12/middleeast/hackers-interrupt-iran-leader-revolution-anniversary-intl-hnk/index.html">CNN reports</a>.

The incident lasted for about a minute, with a logo appearing on the screen representing the “Edalate Ali” or “Justice for Ali” hacking group. In Tehran’s Azadi Square, where Raisi was delivering the speech, a voice shouted “Death to the Islamic Republic” during the interruption. Last year, hackers <a href="https://www.bbc.com/news/world-middle-east-63188795">briefly disrupted state television</a>.

The incident comes as young people and others continue to protest across the country and call for the removal of Raisi’s administration. After Mahsa Amini, 22, died in September while in the custody of Iran’s morality police, sparking a massive protest movement, “security forces have responded with a deadly crackdown to the protests, among the strongest challenges to the Islamic Republic since the 1979 revolution ended 2,500 years of monarchy,” CNN reports.&nbsp;

Pentagon staffers found installing dating apps, games on government phones

Jenny Kane

Defense Department staffers are using unauthorized apps on government-issued devices, including apps for dating, video streaming, messaging and fantasy football, according to an inspector general’s <a href="https://www.dodig.mil/reports.html/Article/3294159/management-advisory-the-dods-use-of-mobile-applications-report-no-dodig-2023-041/">report released Thursday</a>, <a href="https://www.pcmag.com/news/pentagon-staffers-found-installing-dating-apps-games-on-government-phones">PC Magazine’s Michael Kan reports.</a>&nbsp;

The report falls short of naming the specific apps that were able to be installed on Pentagon smartphones, but said that it is a major issue because a lot of software from public app stores can collect personal data without the user’s full knowledge. In December, President Biden signed an order banning TikTok from government devices over concerns the Chinese government could pressure the app to spy on Americans. The U.S. Army <a href="https://www.washingtonpost.com/technology/2019/12/31/us-army-bans-tiktok-military-devices-signaling-growing-concern-about-apps-chinese-roots/">banned</a> the app on government devices in 2019.&nbsp;

“Many unmanaged applications routinely require access to a user’s contact list, location data and photo library that could reveal sensitive DoD locations and information,” the inspector general said.&nbsp;

It blamed the Defense Department’s lack of “a comprehensive mobile device and application policy” for the unauthorized app use. In addition, the report alleges that some military departments offer no training to staff on appropriate app use.&nbsp;

Pentagon officials responded to the report, writing to the watchdog that they agreed with some of the report’s findings.

<a href="https://www.washingtonpost.com/technology/2023/02/13/mental-health-data-brokers/" target="_blank">Now for sale: Data on your mental health (Drew Harwell)</a>

<a href="https://www.wired.com/story/fbi-section-702/" target="_blank">The FBI’s most controversial surveillance tool is under threat (Wired)</a>

<a href="https://www.rappler.com/technology/cybercriminals-bypass-openai-chatgpt-restrictions/" target="_blank">Cybercriminals bypass ChatGPT restrictions to make malware worse, phishing emails better (the Rappler)</a>

<a href="https://thehackernews.com/2023/02/new-esxiargs-ransomware-variant-emerges.html" target="_blank">New ESXiArgs ransomware variant emerges after CISA releases decryptor tool (the Hacker News )</a>

<a href="https://www.theregister.com/2023/02/11/ransomware_regal_medical_group/" target="_blank">Ransomware crooks steal 3m+ patients' sensitive info (the Register)</a>

<a href="https://www.bleepingcomputer.com/news/security/clop-ransomware-claims-it-breached-130-orgs-using-goanywhere-zero-day/" target="_blank">Clop ransomware claims it breached 130 orgs using GoAnywhere zero-day (Bleeping Computer)</a>

The Bipartisan Policy Center<a href="https://bipartisanpolicy.org/event/2023-top-cybersecurity-risks/"> holds a meeting with experts</a> to discuss cybersecurity risks that companies, governments and individuals will face this year at 10 a.m. today. Your Cybersecurity 202 anchor, Tim Starks, will be hosting the event.&nbsp;

The House Judiciary Committee holds a hearing to discuss <a href="https://www.congress.gov/event/118th-congress/senate-event/333588?s=2&amp;r=1">protecting children online</a> on Tuesday at 10 a.m.

The<a href="https://www.congress.gov/event/118th-congress/senate-event/333591?s=2&amp;r=3"> Senate Banking, Housing and Urban Affairs Committee</a> will hold a meeting to examine why financial system safeguards are needed for digital assets on Tuesday at 10 a.m.&nbsp;

The Future of Privacy Forum holds its <a href="https://fpf.org/fpf-event/13th-annual-privacy-papers-for-policymakers/">13th annual</a> privacy papers for policymakers summit and awards ceremony on Thursday at 5:30 p.m. &nbsp;

The National Association of State Election Directors holds its <a href="https://www.nased.org/2023conf">winter conference</a> in D.C. Thursday through Saturday.&nbsp;

The Intelligence and National Security Alliance holds its<a href="https://www.insaonline.org/detail-pages/event/2023/02/16/default-calendar/2023-achievement-awards"> annual achievement awards</a> on Thursday at 6 p.m. in Arlington, Va.&nbsp;

Thanks for reading. See you tomorrow.

2022 American Society of Business Publication Editors, Bronze National Award, Government Coverage

2022 American Society of Business Publication Editors, Silver Regional Award, Government Coverage

2022 American Society of Business Publication Editors, Bronze Regional Award, Single Topic Coverage by a Team

2022 Society of Professional Journalists Washington, D.C., Chapter, Finalist, Staff

2021 Best in Business Awards, Honorable Mention, Technology, Small Division (for editing role)

2009 National Press Club Sandy Hume Memorial Ward for Excellence in Political Journalism

2001 Indiana Associated Press Managing Editors, 1st Place, Non-Deadline News Reporting (with another reporter)

2001 Hoosier State Press Association, 3rd Place, Business Writing (team project)

University of Southern Indiana, BA in Print Journalism

Tim Starks is the author of the Cybersecurity 202 newsletter at The Washington Post. He previously served as senior editor at CyberScoop and ran Politico's cybersecurity newsletter. The Evansville, Ind., native also has held reporting roles for CQ Roll Call, the New York Sun and the Evansville Courier & Press.

Tim Starks

American University, BA in Journalism and Sociology 

American University, MA in Journalism and Public Affairs, Investigative Specialty 

Vanessa Montalbano is a researcher for The Climate 202, a daily morning newsletter at The Washington Post that keeps readers up to date on climate news and policy.