Respond to prefers-color-scheme dark in app web views

Follow section front redirects in Spectrum

Enable NLP source in PCS for load testing

Switch off the News Alerts Survey Widget when we have enough responses

Poll to determine if new LUF updates are available

Allows the winning A/B test variant to be turned on without Spectrum deployment

Show infinite scrolling sections in Assembler MultiView

Show option for NLP article summaries in Action Bar

A general feature flag for Recipe Features that aren't yet released

Feature flag for media team features that aren't yet released

Use new Orca video player for preroll plugin in Spectrum

Show the snow tracker (instead of the heat tracker) on Spectrum

The New York Times, alone in its outrage over access to Biden

Wait, what is Stephen A. Smith talking about? Find out with our quiz.

Stephen A. Smith would like even more of your attention

Ask Amy: Should I be the best man if I think the bride is abusive?

Carolyn Hax: Husband keeps pushing modest spouse to wear sexier clothes

Miss Manners: Host eats luxurious breakfast, leaves cereal for guest

An I bond is now at 4.28 percent. Are they still a good deal?

Use these 6 points to say no to a college you and your kid can’t afford

How this new rule protects retirement savers from costly advice

Israel’s offensive is destroying Gaza’s ability to grow its own food

Riot police and over 2,000 arrests: A look at 2 weeks of campus protests

‘It’s been abused’ Rep. McCaul on motion to vacate threat

Teen grabs wheel when driver passes out and school bus veers into traffic

Cat climbed into Amazon return box, found alive 630 miles away

Brave Little Hunter is free: Baby orca escapes lagoon for open seas

What’s the best bus to New York? We tested 5 for comfort and value.

You asked: Do I need a passport for my cruise?

Adaptive equipment is making national parks more inclusive

On Press Freedom Day, little to celebrate for Hong Kong’s journalists

Young Georgians want to be part of Europe. Their government is in the way.

Taxes are inevitable. Paying to prepare them doesn’t have to be.

The Capitals, a team in transition, know what they want this offseason

Is Pastis as good as our food critic thought? He sent spies to find out.

Nationals can’t solve Nate Eovaldi, drop series finale to Rangers

Journalism in India is under assault

The dangerous new call for regime change in Beijing

Ukrainian men abroad voice anger over pressure to return home to fight 

Biden honors distinguished Americans; Trump back in N.Y. court

Hope Hicks witnessed nearly every Trump scandal. Now she must testify.

State laws measure if a woman is close enough to death for an abortion

Trump Media auditor charged by SEC with ‘massive fraud’

Google’s empire is massive. A judge will soon rule if it’s a monopoly.

See more coverage in your recommendations

Get the weekly Campaign Moment newsletter

Set alerts for major election developments

Election 2024

The Campaign Moment newsletter

Politics alerts

Welcome to The Cybersecurity 202: The film “<a href="https://www.youtube.com/watch?v=o29GST0Lj28">Midnight Cowboy</a>” was released on this day in 1969, going on to become the only X-rated film to win the Best Picture Academy Award.&nbsp;

Below: Opponents of Trump's election lies prevail in Georgia's GOP primaries, and the FBI worked around WhatsApp encryption to uncover an ISIS-linked plot to assassinate former president George W. Bush.&nbsp;

Remote learning apps scooped up student information and shared it with third parties

Shafkat Anowar

There was also a cybersecurity consequence to virtual learning during the pandemic.

The distance learning apps that schools used frequently scooped up reams of information about students, dramatically undermining their privacy and security, an international investigation has found.&nbsp;

The apps grabbed personal information, including locations, and tracked the online behavior of millions of students, my colleague Drew Harwell <a href="https://www.washingtonpost.com/technology/2022/05/24/remote-school-app-tracking-privacy/">reports</a>. Some apps also gained access to students’ digital contacts and cameras and recorded the keystrokes of students answering math and reading questions even before they hit submit.&nbsp;

The Post is among 13 news organizations reporting on the investigation conducted by Human Rights Watch and the investigative nonprofit The Signals Network.

The findings are the latest evidence that educational apps — including those aimed at children as young as prekindergarten — frequently play fast and loose with children’s privacy and security in the pursuit of profit.&nbsp;

They also underscore how the rapid shift to working, learning and doing nearly everything else online during the pandemic often came with an unexplored security cost.

Children were “just as likely to be surveilled in their virtual classrooms as adults shopping in the world’s largest virtual malls,” lead researcher Hye Jung Han wrote.

She charged that school districts had rushed to distance learning apps that were artificially underpriced because children “were forced to pay for their learning with their fundamental rights to privacy.”

Researchers analyzed 164 education apps and websites used in 49 countries. They found nearly 90 percent sent information to ad-technology companies&nbsp;

Few of the companies disclosed to parents how they would use children's information. “Some apps hinted at the monitoring in technical terms in their privacy policies, the researchers said, while many others made no mention at all,” Drew writes.

The researchers were able to see what data the apps requested from users but weren’t able in most cases to track precisely what data they extracted during actual use.&nbsp;

The first concern here is privacy. The Children’s Online Privacy Protection Act (COPPA) prohibits selling the personal information of children younger than 13 without parental consent. But companies find ways to dodge that, critics say, including by having schools consent on behalf of parents or claiming disingenuously that their products should not be used by children under 13, Drew reports.&nbsp;

But when privacy is compromised, security concerns are never far behind. Sensitive data that’s stored by ad firms can be hacked and exposed online.&nbsp;

Researchers found some apps sent children’s records to the tech firm Oracle’s ad-targeting system BlueKai, which reported a massive 2020 data breach. An Oracle spokesperson told Drew the company found no evidence children’s data was exposed in the breach.&nbsp;

Most school districts conducted no technical privacy evaluations before endorsing the apps. “Because the companies’ privacy policies often obscured the extent of their monitoring, the researchers said, district officials and parents often were left in the dark on how students’ data would be collected or used,” Drew reports.

The website <a href="https://www.stmath.com/">ST Math</a> was found to share student user data with 19 third-party trackers, including Facebook, Google, Twitter and the e-commerce site Shopify.

The app <a href="https://www.schoology.com/">Schoology</a>, which says it is used by more than 60,000 schools, included code that could extract a unique identifier from children’s phones known as an advertising ID that markets could use to track the children from device to device.

The creators of both apps disputed Human Rights Watch’s findings, saying tracking was not as extensive as it claimed.

The tools were used in some of the nation’s largest school districts, including Los Angeles, where more than 447,000 students use Schoology and 79,000 use ST Math.

Human Rights Watch researchers are pushing for reforms:

They want governments to conduct data-privacy audits of learning apps to help teachers weed out the most abusive ones and to guide teachers on how to prevent overcollection.

They want companies to commit to treating children’s data differently from adults.

And they want the government to ramp up regulations on learning apps so companies aren’t policing themselves.

Republicans who stood firm against Trump’s election lies prevail in Georgia primaries

Ron Harris

Former president Donald Trump had perhaps his worst night of the 2022 primary season last night. The Republican governor and secretary of state in Georgia — who refused to support his false claims of election hacking and fraud — both prevailed against primary challengers that Trump supported.&nbsp;

Georgia Gov. Brian Kemp defeated his Trump endorsed challenger, former Sen. David Perdue (R-Ga.), in a landslide, as Colby Itkowitz and David Weigel <a href="https://www.washingtonpost.com/politics/2022/05/24/trump-georgia-kemp-perdue/?utm_source=alert&amp;utm_medium=email&amp;utm_campaign=wp_news_alert_revere&amp;location=alert&amp;wpmk=1&amp;wpisrc=al_politics__alert-politics--alert-national&amp;pwapi_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJjb29raWVuYW1lIjoid3BfY3J0aWQiLCJpc3MiOiJDYXJ0YSIsImNvb2tpZXZhbHVlIjoiNTk3N2NhOTI5YmJjMGY2ODI2YzY4MWY4IiwidGFnIjoid3BfbmV3c19hbGVydF9yZXZlcmUiLCJ1cmwiOiJodHRwczovL3d3dy53YXNoaW5ndG9ucG9zdC5jb20vcG9saXRpY3MvMjAyMi8wNS8yNC90cnVtcC1nZW9yZ2lhLWtlbXAtcGVyZHVlLz91dG1fc291cmNlPWFsZXJ0JnV0bV9tZWRpdW09ZW1haWwmdXRtX2NhbXBhaWduPXdwX25ld3NfYWxlcnRfcmV2ZXJlJmxvY2F0aW9uPWFsZXJ0JndwbWs9MSZ3cGlzcmM9YWxfcG9saXRpY3NfX2FsZXJ0LXBvbGl0aWNzLS1hbGVydC1uYXRpb25hbCJ9.rPecmUB3SQyghS0TYcYn70tXzUtWNEvgiLuxjRpZYck">report</a>. Secretary of State Brad Raffensperger appeared poised to defeat Trump’s pick, Rep. Jody Hice (R-Ga.) according to Associated Press projections, Colby and David report.&nbsp;

Hice had <a href="https://www.washingtonpost.com/politics/2022/05/03/trumps-lies-are-big-fight-georgia-gop-race-run-elections/">attacked Raffensperger</a> for certifying the state’s election results against Trump’s wishes.&nbsp;

Raffensperger, who bucked Trump’s demands to “find” enough votes for him to carry the state, declared last night that he’d been “standing for the truth and not buckling under pressure.”&nbsp;

The victories are a bright spot for election security advocates during a relatively dark primary season.&nbsp;

Secretary of state candidates who deny without evidence that Biden won the 2020 election appear poised to win GOP primaries in numerous states.

The election denier Kristina Karamo has already <a href="https://www.washingtonpost.com/politics/2022/04/25/michigan-gop-has-put-two-election-deniers-november-ballot/?itid=lk_inline_manual_54">won Michigan’s GOP primary</a> to be secretary of state.

Election denier Doug Mastriano <a href="https://www.washingtonpost.com/politics/2022/05/18/doug-mastriano-republican-pennsylvania/?itid=lk_inline_manual_55">won Pennsylvania’s GOP primary</a> for governor and will appoint the state’s next top election official if he’s victorious in November.

FBI disrupts ISIS-linked plot to assassinate George W. Bush using WhatsApp surveillance

Bess Adler

The case offers one of the rare public examples of how police were able to complete an investigation involving WhatsApp data despite the app’s use of end-to-end encryption — which prevents WhatsApp from sharing customer messages directly with law enforcement without a warrant.

In this case, FBI agents convinced confidential informants to forward WhatsApp messages that suspect Shihab Ahmed Shihab Shihab had sent them, Forbes’s Thomas Brewster <a href="https://www.forbes.com/sites/thomasbrewster/2022/05/24/exclusive-isis-plotting-to-assassinate-george-w-bush-in-dallas/?sh=56bc837180f2">reports</a>. They ultimately tricked Shihab into using a phone they provided to him through an informant. Agents also got location data from AT&amp;T and some other details from the WhatsApp account.

The case “shows how the FBI, despite its claims of being prevented from investigating major crimes because of [WhatsApp parent] Meta and other tech providers’ use of encryption, has been able to work around WhatsApp security by using old-school policing with sourcing of informants and tracking the metadata they can get from the messaging company,” Brewster writes.

Shihab wanted to smuggle four Iraqis into the United States to assassinate Bush in retaliation for the Iraqis who were killed in the Iraq War, the Justice Department <a href="https://www.justice.gov/usao-sdoh/pr/ohio-man-charged-aiding-and-abetting-plot-murder-former-president">said</a>. According to a search warrant application discovered by Brewster, Shihab said one of the proposed assassins was “the secretary of an ISIS financial minister.” Shihab planned to smuggle them across the U.S.-Mexico border to escape, the warrant said.

Hacked files show draconian Chinese surveillance in Xinjiang

Ng Han Guan

The leaked files include thousands of mug shots of detainees in Xinjiang camps and a trove of other documents, including police security protocols, my colleagues Lily Kuo and Cate Cadell <a href="https://www.washingtonpost.com/world/2022/05/24/xinjiang-michelle-bachelet-china-uyghur/">report</a>. The documents also show the extent of Chinese surveillance in Xinjiang, including how China’s government punished some people for installing encrypted apps or not using Chinese-approved technologies.

The hacker, who hasn’t been identified, said they stole the files from the Public Security Bureau’s computer systems in two Xinjiang counties before decrypting them and handing them off to Adrian Zenz, a scholar at the Victims of Communism Memorial Foundation.&nbsp;

Zenz later wrote up the findings in an <a href="https://journals.univie.ac.at/index.php/jeacs/article/view/7336/7290">academic paper</a>, and more than a dozen media organizations <a href="https://www.icij.org/investigations/china-cables/xinjiang-police-files-uyghur-mugshots-detention/">examined</a> the leaked documents before they were <a href="http://xinjiangpolicefiles.org">published</a> Tuesday.

The hacked documents are all dated before the end of 2018 — before a Chinese government “directive issued in early 2019 tightening Xinjiang’s encryption standards,” which might have stymied the hackers’ ability to get documents, BBC News’s John Sudworth <a href="https://www.bbc.co.uk/news/extra/85qihtvw6e/the-faces-from-chinas-uyghur-detention-camps">wrote</a>.

Democrats ask Google to stop collecting data that could identify women who get abortions

Patrick Semansky

Location data collected by Google could be “used by right-wing prosecutors to identify people who have obtained abortions” if the Supreme Court overturns Roe v. Wade, dozens of lawmakers warned in a <a href="https://www.wyden.senate.gov/imo/media/doc/Wyden-led%20letter%20to%20Google%20on%20geofence%20data%20and%20abortion-related%20surveillance%205.24.22.pdf">letter</a> to Google chief executive Sundar Pichai.&nbsp;

The letter was led by Sen. Ron Wyden (D-Ore.) and Rep. Anna G. Eshoo (D-Calif.), CNBC’s Lauren Feiner <a href="https://www.cnbc.com/2022/05/24/google-data-collection-could-endanger-abortion-seekers-say-dems.html">reports</a>. It joins a number of calls for limits on such data by privacy advocates and lawmakers in the wake of a <a href="https://www.washingtonpost.com/politics/2022/05/02/roe-v-wade-supreme-court-draft-politico/">leaked draft</a> Supreme Court decision indicating that the court was considering overturning abortion protections.&nbsp;

“While Google deserves credit for being one of the first companies in America to insist on a warrant before disclosing location data to law enforcement, that is not enough,” the 42 Democrats wrote. “If <a href="https://www.washingtonpost.com/abortion/" target="_blank" class="contextual_link">abortion</a> is made illegal by the far-right Supreme Court and Republican lawmakers, it is inevitable that right-wing prosecutors will obtain legal warrants to hunt down, prosecute and jail women for obtaining critical reproductive health care.”

Google didn’t respond to CNBC’s request for comment.

<a href="https://www.reuters.com/world/us/top-republicans-query-fbi-warrantless-wiretapping-americans-2022-05-24/" target="_blank">Top Republicans query FBI on warrantless wiretapping of Americans (Reuters)</a>

<a href="https://www.cyberscoop.com/hunter-biden-emails-possible-tampering-trump-allies/" target="_blank">Hunter Biden emails that Trump allies shared contain signs of possible 'tampering,' analysis suggests (CyberScoop)</a>

<a href="https://www.buzzfeednews.com/article/sarahemerson/seth-green-bored-ape-stolen-tv-show" target="_blank">Someone stole Seth Green's Bored Ape, which was supposed to star in his new show (BuzzFeed News)</a>

<a href="https://www.forbes.com/sites/carlieporterfield/2022/05/23/beeples-followers-lose-438000-to-phishing-scam-after-nft-artists-twitter-gets-hacked/?sh=291cf0401332" target="_blank">Beeple’s followers lose $438,000 to phishing scam after NFT artist’s Twitter gets hacked (Forbes)</a>

<a href="https://www.law360.com/newjersey/articles/1495908/-king-of-slots-drops-suit-saying-spyware-co-hacked-phone" target="_blank">'King of Slots' drops suit saying spyware co. hacked phone (Law360)</a>

<a href="https://www.reuters.com/technology/mcafee-ceo-peter-leav-step-down-greg-johnson-take-over-2022-05-24/" target="_blank">McAfee CEO Peter Leav to step down, Greg Johnson to take over (Reuters)</a>

<a href="https://www.protocol.com/enterprise/okta-breach-ceo-lapsus-security" target="_blank">Okta CEO: If we 'build that trust back, we're going to be fine' (Protocol)</a>

<a href="https://www.reuters.com/technology/clearview-ais-facial-recognition-tool-coming-apps-schools-2022-05-24/" target="_blank">Clearview AI's facial recognition tool coming to apps, schools (Reuters)</a>

A House Oversight and Reform Committee panel <a href="https://oversight.house.gov/legislation/hearings/technology-modernization-fund-rewriting-our-it-legacy">holds</a> a hearing on the Technology Modernization Fund today at 10 a.m.

Undersecretary of Commerce for Industry and Security Alan Estevez <a href="https://www.atlanticcouncil.org/event/the-future-of-global-tech-security/">speaks</a> at an event hosted by the Atlantic Council and Krach Institute for Tech Diplomacy at Purdue today at 10 a.m.

FBI Director Christopher A. Wray testifies before a Senate Appropriations Committee panel’s <a href="https://www.appropriations.senate.gov/hearings/a-review-of-the-presidents-fiscal-year-2023-funding-request-for-the-federal-bureau-of-investigation">hearing</a> today at 2 p.m.&nbsp;

Lt. Gen. Michael S. Groen, who leads the Pentagon’s Joint Artificial Intelligence Center, <a href="https://www.atlanticcouncil.org/event/the-future-of-artificial-intelligence-in-national-security-and-defense/">speaks</a> at an Atlantic Council event today at 2:30 p.m.

Secretary of State Antony Blinken <a href="https://www.state.gov/secretary-blinken-to-deliver-remarks-at-george-washington-university-2/">outlines</a> the U.S. government’s China policy on Thursday at 10 a.m.&nbsp;

Thanks for reading. See you tomorrow.

Georgetown University, MS in Foreign Service

University of Wisconsin - Madison, BA in English

Joe Marks writes The Cybersecurity 202 newsletter focused on the policy and politics of cybersecurity. He previously covered cybersecurity for Politico and for Nextgov. 

Joseph Marks

Society of American Business Editors and Writers, Best in Business award, Newsletter, 2019

American University, MA in journalism and public affairs

University of Rochester, BA in international relations

Aaron Schaffer is assistant editor of The Post's 202 newsletter franchise, where he helps edit The Early 202.