Respond to prefers-color-scheme dark in app web views

Follow section front redirects in Spectrum

Enable NLP source in PCS for load testing

Switch off the News Alerts Survey Widget when we have enough responses

Poll to determine if new LUF updates are available

Allows the winning A/B test variant to be turned on without Spectrum deployment

Show infinite scrolling sections in Assembler MultiView

Show option for NLP article summaries in Action Bar

Show NLP summaries collection recirc on article pages

A general feature flag for Recipe Features that aren't yet released

Feature flag for media team features that aren't yet released

Use new Orca video player for preroll plugin in Spectrum

Show the snow tracker (instead of the heat tracker) on Spectrum

6 Airbnb red flags to spot before you make a booking mistake

Cruise ships to return to Baltimore two months after bridge collapse 

Some cruise prices are about to get a little more clear

Look to the cloud to protect the life documents saved on your computer

Can you spot bad financial advice on TikTok? Take our quiz.

5 myths about Social Security as the program faces a funding crisis

Who is Robert Fico? What to know about Slovakia’s leader who was shot.

Middle East conflict live updates: U.S.-built pier anchored in Gaza; ICJ hears Rafah is ‘endgame’ in Gaza destruction

Slovakia’s Fico in serious condition; suspect charged with attempted murder

Puppy abandoned with heart-rending note is adopted, named Minerva

Man, 91, shocks tiny firehouse with $500K gift: ‘Nobody knew how much I’d saved’

Retired cop meets abandoned baby he helped 23 years ago: ‘What are the odds?’

The Post’s choices in Northern Virginia’s U.S. House primaries

States see legalized sports betting as a tax windfall — but at what cost?

Haiti’s plight is a case study in the ‘responsibility to protect’

Netflix will air NFL’s Christmas games, a major step for streaming service

Sam Feist, longtime CNN executive, will become CEO of C-SPAN

Michael Cohen testimony ties Donald Trump to hush money payment

Voters key to past Democratic wins are skeptical and undermotivated

Trump’s ‘they’re out to get me’ campaign and its enablers

Biden campaign accepts invite to a vice-presidential debate 

Best Places to Work in the Federal Government 2023

A hō’ike in Virginia celebrates Hawaiian life

Think you can build a gold-medal U.S. gymnastics team? Try it.

The 34 best things to do in D.C. this weekend and next week

Rating every game on the Commanders’ 2024 schedule

8 best things to do with kids in the D.C. area this weekend 

Senators studied AI for a year. Critics call the result ‘pathetic.’

Cruise settles with person dragged under one of its robotaxis

Google’s AI answers could come back to bite it

Carolyn Hax: Fiancé plans to have a baby with someone else

Ask Amy: I’m scared of my adult stepson who keeps losing his temper

Ask Sahaj: I live with my parents and generational trauma ‘runs the house’

President Joe Biden Joint Chiefs and Combatant Commanders 

See more coverage in your recommendations

Get the weekly Campaign Moment newsletter

Set alerts for major election developments

Election 2024

The Campaign Moment newsletter

Politics alerts

Welcome to The Cybersecurity 202! Judd Apatow’s George Carlin documentary on HBO is a triumph and a great history lesson. I highly recommend it. Here’s one of Carlin’s <a href="https://www.youtube.com/watch?v=Lk_dRzaBoUM">best moments</a> from late in his career.&nbsp;

Below: The Supreme Court wants the Biden administration to weigh in on WhatsApp’s lawsuit against NSO, and another <a href="https://www.washingtonpost.com/elections/" target="_blank" class="contextual_link">election</a> denier is poised to be a GOP nominee to lead elections — in New Mexico this time.

The Biden administration gets darker in its assessment of the nation's cyber threat

Kevin Dietsch

More frequent cyberattacks are the “new normal” for U.S. companies and individuals, the Biden administration’s top cyber officials are warning.

It's a significant messaging shift for the administration, following more than a year of ransomware attacks pummeling U.S. businesses, schools and local governments and months of warnings about beefed-up Russian cyber aggression related to the war in Ukraine.&nbsp;

The bottom line: Things are bad out there and unlikely to get better soon.&nbsp;

“The prospect of cyberattacks here at home — whether by Russia or other malign state and non-state actors — will not dissipate anytime soon,” Cybersecurity and Infrastructure Security Agency (CISA) Director Jen Easterly and National Cyber Director Chris Inglis warn in an <a href="https://www.cyberscoop.com/shields-up-easterly-inglis-op-ed/">op-ed</a> for the publication CyberScoop.

CISA has been sounding an alarm since mid-February that U.S. companies should put their “shields up” in response to heightened fears of Russian aggression — prompting a breakneck rush of activity among cyber pros to harden their companies’ digital defenses and far more cyber threat information sharing within critical industries.

Now, CISA acknowledges, that pace is unlikely to slow: “In today’s complex, dynamic, and dangerous cyberthreat environment, the answer is that our shields will likely be up for the foreseeable future,” the op-ed states.

The warning reflects a seismic shift in cybersecurity’s role during the last decade and especially the past few years — from an occasional and wonky concern for government and industry to one that often drives policy at the White House, in Congress and among top industry leaders.&nbsp;

Given the pace of cyber crises, the op-ed frets about the danger of “vigilance fatigue” and warns that “maximum alert posture is not sustainable over a long period of time.”

Easterly and Inglis lay out the broad strokes of a post “shields-up” world that focuses on more tailored and specific warnings to industry about specific threats.

They compare the effort to responding to hurricanes and other weather emergencies — where the scope of the response is determined by the specific event. “When a cyberthreat arises that is both severe and wide-ranging, a general warning to the American people will be warranted,” they write. “But when a more localized threat arises … a far more targeted warning must be issued.”

The shift comes amid troubling signs that the cyberthreat could get even worse.

Moscow’s top information security official, A.V. Krutskikh, warned the United States against cyber aggression targeting Russia in an <a href="https://mid.ru/ru/foreign_policy/news/1816353/">interview</a> yesterday with the publication Komersant, pledging that “a rebuff will certainly follow” and that “there will be no winners in a direct cyber clash of states.”

That came after Gen. Paul Nakasone, the commander of U.S. Cyber Command, acknowledged in a <a href="https://news.sky.com/story/us-military-hackers-conducting-offensive-operations-in-support-of-ukraine-says-head-of-cyber-command-12625139">Sky News</a> interview that U.S. forces are conducing offensive hacks against Russian targets in support of Ukrainian forces — one of the rare times U.S. officials have ever acknowledged conducting such operations.

Ukraine, meanwhile, continues to face a barrage of mostly low-level Russian hacks targeting government agencies, media, energy and financial firms among other targets. During a Monday press briefing marking the 100th day of the conflict, the nation’s top cyber official, Victor Zhora, described a sustained attempt to compromise Ukrainian officials’ phones with malware. Here are <a href="https://www.reuters.com/world/europe/ukrainian-officials-phones-targeted-by-hackers-cyber-watchdog-2022-06-06/">details</a> via Reuters’s Raphael Satter.

Russian hackers have also tried to penetrate government and military computers in <a href="https://www.reuters.com/world/europe/russian-hackers-targeted-nato-eastern-european-militaries-google-2022-03-30/">Eastern Europe</a> and as far west as <a href="https://www.reuters.com/world/europe/pro-russian-hackers-target-italy-defence-ministry-senate-websites-ansa-news-2022-05-11/">Italy</a> — but have not launched any significant and disruptive hacks against the United States since the beginning of the Ukraine conflict.

Supreme Court asks Biden administration to weigh in on WhatsApp vs. NSO lawsuit

Jabin Botsford

The lawsuit launched in 2019 when WhatsApp <a href="https://www.washingtonpost.com/technology/2019/10/29/whatsapp-accuses-israeli-firm-helping-governments-hack-phones-journalists-human-rights-workers/">sued</a> the Israeli surveillance company NSO for exploiting software flaws to help government clients spy on roughly 1,400 of its customers. Now, the controversial spyware maker argues it can’t be sued because it was acting as a contractor for foreign governments &nbsp;— and should get the same immunity from lawsuits those governments would get in U.S. courts. &nbsp;

NSO’s argument didn’t fly at the federal or appeals court level, but it’s asking the U.S. Supreme Court to reverse those rulings. NSO <a href="https://www.supremecourt.gov/DocketPDF/21/21-1338/225432/20220516123935002_2022-05-16%20NSO%20Cert%20Reply%20FINAL.pdf">asked</a> the Supreme Court to invite the Justice Department to weigh in before deciding whether it will take up the case — a request the court complied with.

The legal case is part of a wave of troubles for NSO. An investigation by The Washington Post and 16 media partners last year <a href="https://www.washingtonpost.com/investigations/2021/07/18/takeaways-nso-pegasus-project/">found</a> that NSO spyware was used to target dozens of phones belonging to activists, executives and journalists in numerous countries.&nbsp;

If NSO receives immunity in the WhatsApp case, it could be shielded from legal consequences in both that case and another filed by Apple. Those suits could pry damaging discovery documents from the spyware company if they proceed.

In November, the Biden administration <a href="https://www.washingtonpost.com/technology/2021/11/03/pegasus-nso-entity-list-spyware/?itid=lk_inline_manual_41">blocked</a> NSO from receiving American technologies after finding that its hacking tools were used by governments to “maliciously target” activists, government officials and journalists.&nbsp;

WhatsApp opposed the request to ask for the Justice Department's views. Its lawyers told the high court that “nothing justifies NSO’s effort to draw the government into a case that it has shown no interest in supporting.”&nbsp;

WhatsApp spokesman Carl Woog said the company “firmly believe that NSO’s operations violate U.S. law” and is “determined to hold NSO accountable.”

NSO said the company “welcomes the Supreme Court’s decision … which has significant implications on the defense industry and national security community.”

A 2020 election denier is set to be the GOP nominee to lead elections in New Mexico

Morgan Lee

Audrey Trujillo has <a href="https://www.facebook.com/AudreyforNM/posts/pfbid02XNBvVnYG58ShDmp7sV1VGTeWEju7cC2ejDQL66Z1Kzdp3PBPtzaGrfMRJsdAS4Hgl?__cft__[0]=AZVdUEJqNbkp3AT4Y0Vgq3FUl3EybIw4dvx4e30vqfq3kF0GsdSn9YRzdbn1f-bO-UlnGNk67pAR1KzffGCbOupMm7M7synwCpSSuCesurqVQowA20HQzPrSbgOU-sou_Gk&amp;__tn__=%2CO%2CP-R">called</a> for a “full forensic statewide audit” of the 2020 election. She’s running unopposed in today’s GOP primary to be New Mexico’s next election chief and will go up against the state’s incumbent Democratic election chief Maggie Toulouse Oliver in November.

Trujillo has a history of questionable behavior.&nbsp;

She has called the 2020 election a “coup” and asserted U.S. voting systems are “no better than any other communist country like Venezuela or any of these other states where our elections are being manipulated,” The New York Times <a href="https://www.nytimes.com/2022/06/05/us/politics/america-first-secretary-of-state-candidates.html">reports</a>.

Last month, she suggested her Twitter account was hacked after reporters found that she had shared tweets mocking people from Mexico and saying Jewish people were linked to the development of coronavirus vaccines.

President Biden won New Mexico by nearly 100,000 votes. In 2018, Toulouse Oliver <a href="https://www.nytimes.com/interactive/2018/11/06/us/elections/results-new-mexico-elections.html">won</a> her general election by a 20-point margin.

Another election denier is making a long-shot bid to be California’s elections chief.&nbsp;

Rachel Hamm has <a href="https://twitter.com/RachelHammSOS/status/1441800369240100876">called for</a> forensic audits to be conducted in all 50 states. She has also detailed a long <a href="https://www.thedailybeast.com/gop-candidate-for-california-secretary-of-state-rachel-hamm-claims-she-inspired-witchs-murder">battle</a> with Satanists.&nbsp;

She faces an uphill battle in California, which President Biden won by more than 5 million votes.

A ransomware gang claimed it hacked a cyber giant — but it looks like a PR stunt

The LockBit 2.0 group claimed without evidence that it had hacked the cyber firm Mandiant and threatened to release the company's files, CyberScoop’s AJ Vicens <a href="https://www.cyberscoop.com/lockbit-2-0-claims-mandiant-ransomware-victim/">reports</a>. But Mandiant does “not have any evidence to support their claims,” a Mandiant spokesperson told CyberScoop.&nbsp;

The dubious claim may have been retribution. Last week, Mandiant <a href="https://www.mandiant.com/resources/unc2165-shifts-to-evade-sanctions">linked</a> LockBit ransomware to a separate hacking gang Evil Corp, which the U.S. government <a href="https://home.treasury.gov/news/press-releases/sm845">says</a> is based in Russia and has ties to Russia’s government.

LockBit 2.0 hasn’t leaked any files from Mandiant. Instead the hackers released a <a href="https://twitter.com/charliek3lly/status/1533942091805609984">rant</a> and a few images that appeared to depict the group’s negotiations with another victim. Here’s more from CNN’s Sean Lyngaas:

Bleeping Computer Editor in Chief Lawrence Abrams called the gambit a PR stunt aimed at evading U.S. sanctions imposed on Evil Corp.

<a href="https://www.vice.com/en/article/z34be3/meet-the-vigilantes-who-hack-millions-in-crypto-to-save-it-from-thieves" target="_blank">Meet the Vigilantes Who Hack Millions in Crypto to Save It From Thieves (Motherboard)</a>

<a href="https://www.wired.com/story/alphabay-dark-web-market-ranking/" target="_blank">AlphaBay Is Taking Over the Dark Web—Again (Wired)</a>

Recorded Future's Allan Liska tweeted about his observations about the state of the ransomware ecosystem:

<a href="https://www.protocol.com/enterprise/cybersecurity-industry-recession-tech-layoffs" target="_blank">Cybersecurity spending isn't recession-proof. But it's pretty close. (Protocol)</a>

<a href="https://www.reuters.com/article/idUSL8N2XT1C3" target="_blank">SPECIAL REPORT-How crypto giant Binance became a hub for hackers, fraudsters and drug traffickers (Reuters)</a>

<a href="https://www.reuters.com/world/russia-sanctions-us-treasury-energy-secretaries-defence-media-bosses-2022-06-06/" target="_blank">Russia sanctions U.S. Treasury and energy secretaries, defence and media executives (Reuters)</a>

<a href="https://www.wsj.com/articles/china-to-conclude-didi-cybersecurity-probe-lift-ban-on-new-users-11654501320?mod=tech_lead_pos2" target="_blank">China to conclude Didi cybersecurity probe, lift ban on new users (Wall Street Journal)</a>

<a href="https://www.washingtonpost.com/technology/2022/06/07/education-apps-screening/" target="_blank">How to screen remote-learning apps for privacy (By Heather Kelly)</a>

Facebook parent Meta has <a href="https://twitter.com/josephmenn/status/1533829864033112069">named</a> Guy Rosen as its first chief information security officer.

The Atlantic Council’s Digital Forensic Research Lab <a href="https://www.atlanticcouncil.org/programs/digital-forensic-research-lab/360os/360os-2022/#agenda">hosts</a> the second day of its two-day summit today.

The House Committee on Veterans Affairs <a href="https://veterans.house.gov/events/hearings/cybersecurity-and-risk-management-at-va-addressing-ongoing-challenges-and-moving-forward">holds</a> a hearing on cybersecurity today at 10 a.m.

The Senate Homeland Security Committee <a href="https://www.hsgac.senate.gov/hearings/rising-threats-ransomware-attacks-and-ransom-payments-enabled-by-cryptocurrency">hosts</a> a hearing on ransomware and cryptocurrency payments today at 10 a.m.

Commodity Futures Trading Commission Chair Rostin Behnam and Sens. Kirsten Gillibrand (D-N.Y.) and Cynthia M. Lummis (R-Wyo.) <a href="https://www.washingtonpost.com/washington-post-live/2022/06/08/evolution-money-cryptocurrency-regulation/?itid=lk_inline_manual_78&itid=lk_inline_manual_93">discuss</a> the future of cryptocurrency regulation at a Washington Post Live event on Wednesday at 9 a.m.

The House Armed Services Committee’s cybersecurity subcommittee <a href="https://armedservices.house.gov/hearings?ID=96EA5314-BCAE-4187-9839-81F7332DDAC8">discusses</a> the annual defense authorization bill on Wednesday at 10 a.m.

“I interface with my database and my database is in cyberspace.” Thanks for reading. See you tomorrow.

Georgetown University, MS in Foreign Service

University of Wisconsin - Madison, BA in English

Joe Marks writes The Cybersecurity 202 newsletter focused on the policy and politics of cybersecurity. He previously covered cybersecurity for Politico and for Nextgov. 

Joseph Marks

Society of American Business Editors and Writers, Best in Business award, Newsletter, 2019

American University, MA in journalism and public affairs

University of Rochester, BA in international relations

Aaron Schaffer is a researcher on The Post's News Research team.