Respond to prefers-color-scheme dark in app web views

Follow section front redirects in Spectrum

Enable NLP source in PCS for load testing

Switch off the News Alerts Survey Widget when we have enough responses

Poll to determine if new LUF updates are available

Allows the winning A/B test variant to be turned on without Spectrum deployment

Show infinite scrolling sections in Assembler MultiView

Show option for NLP article summaries in Action Bar

Show NLP summaries collection recirc on article pages

A general feature flag for Recipe Features that aren't yet released

Feature flag for media team features that aren't yet released

Use new Orca video player for preroll plugin in Spectrum

Show the snow tracker (instead of the heat tracker) on Spectrum

Biden continues outreach to Black voters; Trump heading to Minnesota

At campus protests, ‘DO NOT TALK TO THE MEDIA’!

CNN gets a presidential debate — and a much-needed win

Puppy abandoned with heart-rending note is adopted, named Minerva

Man, 91, shocks tiny firehouse with $500K gift: ‘Nobody knew how much I’d saved’

Retired cop meets abandoned baby he helped 23 years ago: ‘What are the odds?’

Ask Amy: Can’t a single woman eat alone without interruption?

Miss Manners: Miss Manners: Gag gift falls flat

Carolyn Hax: Is it weird to ask other people to care about you?

Boeing delays spaceflight again as it continues to struggle with leak

These ISIS news anchors are AI fakes. Their propaganda is real.

Why this company’s biggest fans turned against it

Joey Gallo returns, but Nats endure another quiet offensive night

A taco will always be a taco — no matter what we call it

Walter Johnson’s jersey from 1920 showdown with Babe Ruth is up for auction

Did Trump’s lawyers catch Michael Cohen in a ‘lie’? Let’s take a look.

Now playing off-Broadway: Trump’s synchronized sycophants

Biden faces pressure to pardon ex-Baltimore prosecutor Marilyn Mosby

With its energy network nearly destroyed, Ukraine already fears the winter

Mexican taquería’s new Michelin star puts street eats on par with gourmet food

IDF recovers bodies of 3 Israelis killed on Oct. 7

The world’s coolest hotels want to tell you a story

Cruise ships to return to Baltimore two months after bridge collapse 

Some cruise prices are about to get a little more clear

Trump promises tax cuts and fewer rules. CEOs shouldn’t fall for it.

Tariffs against China hamstring the transition to a clean energy future

The Post’s choices in Northern Virginia’s U.S. House primaries

In photos: The scene in Houston after severe storms killed at least 7 people

D.C.’s secret garden

Best Places to Work in the Federal Government 2023

Trump

Jabin Botsford

President Trump addressed the <a href="https://www.washingtonpost.com/national-security/russian-government-spies-are-behind-a-broad-hacking-campaign-that-has-breached-us-agencies-and-a-top-cyber-firm/2020/12/13/d5a53b88-3d7d-11eb-9453-fc36ba051781_story.html" title="www.washingtonpost.com">ongoing cyber hacks</a> of the U.S. government for the first time on Saturday, seeking to turn blame away from Moscow in defiance of mounting evidence while downplaying how devastating the intrusions appear to be.

In a <a href="https://twitter.com/realDonaldTrump/status/1340333618691002368?s=20" title="twitter.com">bizarre outburst on Twitter</a> that Trump’s critics condemned for its alarming disconnect from the facts, the president contradicted his top diplomat, Secretary of State Mike Pompeo, who on Friday pinned the breaches that have afflicted at least five major federal agencies “clearly” on Russia. Rather, the president baselessly suggested that the true culprit “may be China (it may!)”

Trump’s aversion to calling out the Kremlin for its malign activities in cyberspace and his deference to Russian President Vladimir Putin has become a hallmark of his presidency. He has repeatedly trusted the word of Putin over the assessments of his own intelligence community, including its conclusion that Russia waged a sophisticated campaign to interfere in the 2016 presidential election — a verdict Trump believes calls into question the legitimacy of his victory four years ago.

[The U.S. government spent billions on a system for detecting hacks. The Russians outsmarted it.]

His tweets Saturday raise fresh concerns that he will seek to shrug off what may turn out to be a cyber hack of unprecedented scale, and that Russia will not be held to account. The president has complained to advisers, who believe Russia is culpable, that the intrusions are a fake narrative meant to damage him politically.

“The Cyber Hack is far greater in the Fake News Media than in actuality,” Trump tweeted, despite a federal alert in recent days that called the widespread cyber espionage campaign “a grave risk to” government agencies and the private sector.

“I have been fully briefed and everything is well under control,” he said, while agencies are scrambling to investigate and contain major breaches at agencies including the State, Treasury, Energy, Homeland Security and Commerce departments — an effort that is likely to take months.

He also speculated, with no evidence, that the hacks may also have included “a hit on our ridiculous voting machines during the election, which is now obvious that I won big.” Twitter flagged that assertion, saying that “multiple sources called this election differently.” There is no evidence that November’s election was undermined by significant or widespread fraud, despite Trump’s insistence otherwise.

Trump had, until Saturday, studiously avoided the topic, reluctant to address publicly an issue that has bedeviled him since he took office: Russia’s hacking of U.S. targets. He broke his silence only after he was <a href="https://www.washingtonpost.com/politics/russia-hacking-politics/2020/12/17/1c5708c6-40a4-11eb-8db8-395dedaaa036_story.html" title="www.washingtonpost.com">criticized publicly</a> by lawmakers from both parties for an apparent unwillingness to confront Putin.

[Biden, lawmakers raise alarms over cyber breach amid Trump’s silence]

White House officials had drafted a statement to be released Friday accusing Moscow of carrying out the cyber intrusions in a months-long campaign, but they were blocked from doing so, said a senior administration official, who like others spoke on the condition of anonymity because of the matter’s sensitivity.

But Pompeo, in <a href="https://www.state.gov/secretary-michael-r-pompeo-with-mark-levin-of-the-mark-levin-show/" title="www.state.gov">an interview</a> on “The Mark Levin Show,” had no qualms about speaking out. “This was a very significant effort,” he said, “and I think it’s the case that now we can say pretty clearly that it was the Russians that engaged in this activity.”

Pompeo did not specify which branch of the Russian government carried out the campaign, but U.S. officials have privately said they believe it is the foreign intelligence service, the SVR, a successor agency to the KGB. None have suggested that China played any role.

Moscow has denied any involvement in the intrusions. Federal agencies were first revealed to have been hacked last weekend.

Pompeo said he could not say much more as the investigations were ongoing. “But suffice it to say, there was a significant effort to use a piece of third-party software to essentially embed code inside of U.S. government systems, and it now appears systems of private companies and companies and governments across the world as well,” he told Levin, a syndicated radio talk show host.

His remarks come as government agencies and affected companies race to figure out the scope of the breaches, how the Russians carried them off without being detected for months and how to prevent future compromises.

The president is intent on turning the conversation to China and its coercive activities in the technology and economic spheres and its human rights abuses, a second official said. He has directed advisers to look for ways in the waning days of his administration to confront Beijing over those issues, the official said.

Trump’s comments Saturday reflect a long-running disregard for the facts and his disinterest in what he calls “the cyber,” analysts and former aides said. “Starting with Trump’s very first meeting with Putin to today’s tweets we’ve seen an almost unbreakable pattern of denying the obvious about Russia’s misdeeds while carrying water for the Kremlin,” said Andrew Weiss, a Russia expert and vice president for studies at the Carnegie Endowment for International Peace. “Trump’s comments are totally divorced from reality.”

Gregory F. Treverton, a former chairman of the National Intelligence Council, the government’s senior-most provider of intelligence analysis, said that Trump “behaves so much like a paid Russian agent.”

“If you look at the string of his actions and pronouncements,” Treverton said, “the only consistent interpretation that you can logically draw is that he’s in their thrall.”

Brendan Smialowski

The Obama administration saw that campaign, as disturbing as it was, as classic espionage of the sort that states routinely engage in against each other, rather than as a disruptive attack, and so did not retaliate, said Michael Daniel, who was Obama’s White House cyber coordinator. Officials were not aware of the thousands of other victims in the private sector and other countries at the time, he said. The administration never publicly accused Russia of perpetrating the hacks.

[Federal investigators find evidence of previously unknown tactics used to penetrate networks]

This time, the context is different. There is widespread publicity around the breaches, which could turn out to be unprecedented in scale. The nature of the compromises, involving corruption of software commonly used by thousands of large organizations around the globe, is alarming. And the public is much more attuned to Russia’s malign activity in cyberspace, in the wake of its 2016 election interference.

Thus far, there is no sign that the intrusions have resulted in disruption or destruction, and the SVR is known mostly for conducting espionage. That doesn’t mean, however, the activity is not a precursor to something beyond spying, some analysts said.

In any case, Pompeo’s “attribution is a very important step,” said Tom Bossert, who was Trump’s homeland security adviser until April 2018. “The United States can now direct its focus and unite the world against this outrage.”

He said the Russian government is holding American networks at risk. “We must impose a cost on the Russians,” he said. “Until we start defending digital infrastructure as if commercial and government operations depended on it, we will remain rudderless.”

Microsoft, a major software and cloud provider, alerted several federal agencies last weekend to the fact that they were breached, its president Brad Smith told The Washington Post in an interview this past week.

“No one should be shocked that a company like Microsoft would be the first to identify any particular customer that has been breached,” he said.

<a href="https://blogs.microsoft.com/on-the-issues/2020/12/17/cyberattacks-cybersecurity-solarwinds-fireeye/">Smith said so far the company</a> has notified a little more than 40 customers who were breached, and that 80 percent of them were in the United States. The others were in Canada, Mexico, Belgium, Spain, Britain, Israel and the United Arab Emirates.

Britain so far has seen only a small number of victims, all in the private sector.

A major avenue for breaching victims’ networks was an update for computer software made by a Texas-based company called SolarWinds. The firm said about 18,000 customers that received the patch, for network management software called Orion, were potentially exposed. The Russians covertly added malware to the update, which installed a back door on computers that the hackers could use to enter a victim’s system at will.

But the intruders were selective in choosing who to compromise. Not everyone who downloaded the patch was seen as an attractive target, Microsoft said.

The SolarWinds update was not the only path into victims’ networks, the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency said in an alert this past week. “CISA has evidence of additional initial access vectors, other than the SolarWinds Orion platform; however, these are still being investigated,” the agency said.

Microsoft is itself a SolarWinds customer and acknowledged in a statement this past week it had found SolarWinds malware “in our environment,” which it isolated and removed.

In his interview with The Post, Smith said none of Microsoft’s customers had been breached through the software giant. “I think we can give you a blanket answer that affirmatively states, no, we are not aware of any customers being attacked through Microsoft’s cloud services or any of our other services, for that matter, by this hacker.”

He said: “Lots of people have been hacked and a lot of the people that have been hacked happen to be Microsoft customers and Microsoft cloud customers. But that doesn’t mean they were hacked or attacked through the Microsoft cloud.”

Smith <a href="https://blogs.microsoft.com/on-the-issues/2020/12/17/cyberattacks-cybersecurity-solarwinds-fireeye/">in a blog post</a> called for the establishment of a global norm forbidding the type of “broad and reckless activity” used against SolarWinds and its customers, which threatened the integrity of the broader software supply chain.

A norm against compromising that supply chain would “kneecap intelligence collection” by western democracies, said Thomas Rid, a cyber espionage expert at Johns Hopkins University. Worse, nondemocratic states would not abide by it, he said. “Some of the most successful western intelligence operations were supply chain compromises,” he said, citing a <a href="https://www.washingtonpost.com/graphics/2020/world/national-security/cia-crypto-encryption-machines-espionage/?itid=lk_inline_manual_1" title="www.washingtonpost.com">decades-long operation</a> in which rigged encryption machines allowed U.S. intelligence agencies to spy on dozens of countries undetected.

Daniel, the former White House cyber coordinator, said a broad-based supply chain compromise that affects many different organizations indiscriminately “should probably be frowned upon.” But, he said, to argue that a western spy agency is never going to use the supply chain to spy on an adversary is unrealistic. “For a well-defended adversary,” he said, “it’s something you may want to consider.”

Karen DeYoung contributed to this report.

Pulitzer Prize for Public Service, 2014

Gerald Loeb Award 2014, NSA stories

Society of American Business Editors and Writers enterprise award 2009, for the story "Banking Regulator Played Advocate over Enforcer"

Daily Californian Alumni Association Alumna of the Year, 2017

Pulitzer Prize for reporting on Russian interference in the 2016 presidential election, 2018

Pulitzer Prize for Public Service in 2022 for an investigation of the Jan. 6 assault on the U.S. Capitol

The Prince of Tennessee

City University, London, MA in international journalism

University of California at Berkeley, BA in humanities

Ellen Nakashima is a national security reporter with The Washington Post. She was a member of three Pulitzer Prize-winning teams, in 2022 for an investigation of the Jan. 6 assault on the U.S. Capitol, in 2018 for coverage of Russia's interference in the 2016 election, and in 2014 and for reporting on the hidden scope of government surveillance. 



Ellen Nakashima

White House Correspondents Award for Deadline Reporting

University of South Carolina

Josh Dawsey is a political enterprise and investigations reporter for The Washington Post. He joined the paper in 2017 and previously covered the White House. Before that, he covered the White House for Politico, and New York City Hall and New Jersey Gov. Chris Christie for the Wall Street Journal.

Josh Dawsey

The Washington Post

Trump contradicts Pompeo in bid to downplay massive hack of U.S. government, Russia?s role

President Donald J. Trump

staff

Foreign Policy

Intelligence

Justice

Military

National Security

iptc-media/economy_business_and_finance/economic_sector/media

iptc-media/arts_culture_entertainment_and_media

iptc-media/politics/government/defence/security_measures_(defence)/national_security

iptc-media/arts_culture_entertainment_and_media/mass_media

iptc-media/crime_law_and_justice

iptc-media/politics/government/espionage_and_intelligence

iptc-media/crime_law_and_justice/crime

iptc-media/conflict_war_and_peace

iptc-media/politics/political_process

iptc-media/economy_business_and_finance/economic_sector/computing_and_information_technology

iptc-media/economy_business_and_finance/economic_sector/computing_and_information_technology/software

iptc-media/economy_business_and_finance/economic_sector/computing_and_information_technology/computer_security

iptc-media/politics

iptc-media/science_and_technology/technology_and_engineering

iptc-media/politics/government/defence/security_measures_(defence)

iptc-media/arts_culture_entertainment_and_media/mass_media/online_media

iptc-media/politics/government

iptc-media/science_and_technology

iptc-media/crime_law_and_justice/crime/computer_crime

iptc-media/economy_business_and_finance

iptc-media/politics/government/defence

client-blocklists/Client List: Morgan Stanley KWs - INCLUDES ANY

client-blocklists/Client List: Becton Dickinson KWs - EXCLUDES ALL

client-blocklists/CLIENT LIST: Nomura KWs 2021 - EXCLUDES ALL

client-blocklists/Boeing KWs 2021- INCLUDE ANY

client-blocklists/Client List: Exxon Mobil  - INCLUDES ANY

client-blocklists/Client List: Microsoft KWs 2 - INCLUDES ANY

client-blocklists/GEICO KWs - INCLUDES ANY_4.26.21

client-blocklists/Client List: T. Rowe Price KWs - EXCLUDES ALL

client-blocklists/T. Rowe Price KWs - EXCLUDES ALL

advertising/B2_Airlines_legacyaux_rhc

advertising/B2_Asian Content_legacyaux_8xg

client-blocklists/HBO KWs - INCLUDES ANY

client-blocklists/Ford/Lincoln KWs - INCLUDES ANY

client-blocklists/ExxonMobil 03312021 KWs - INCLUDES ALL

client-blocklists/Bank of America KWs - EXCLUDES ALL

advertising/Siemens Continuum KWs

client-blocklists/WaPo: Combined Disaster Keyword List - INCLUDES ANY

client-blocklists/Client List: Navy Federal Credit Union NFCU KWs 2 - EXCLUDES ALL - 12.23.20

advertising/B2_Charitable Giving 3.3.15_legacyaux_d7x

advertising/B2_Congressional Elections_legacyaux_r48

client-blocklists/Client List: Eli Lily KWs - INCLUDES ANY

client-blocklists/Client List: IBM KWs ALTERNATE Watson - EXCLUDES ALL

advertising/B2_Cyber Security & Intelligence Community_legacyaux_E8X

advertising/B2_Defense and Cybersecurity_legacyaux_nzv

advertising/B2_Defense and National Security 2.12.15_legacyaux_o1b

advertising/B2_Defense_legacyaux_yxn

advertising/B2_Departments and Agencies_legacyaux_1nn

advertising/B2_Digital Authentication_legacyaux_c2u

advertising/B2_Disaster, Accident and Tragedy_legacyaux_758

advertising/B2_Embassy, Ambassador, & Diplomat Content_legacyaux_1ho

client-blocklists/Client List: Purina KWs - INCLUDES ANY

advertising/Citrix Mindfulness

advertising/B2_Government & Policy_legacyaux_mza

client-blocklists/Chase KWs - INCLUDES ANY

client-blocklists/BP KWs - INCLUDES ANY

client-blocklists/ CLIENT LIST: AT&T KWs 2021 - EXCLUDES ALL

advertising/B2_Politically Active - DO NOT REMOVE_legacyaux_lmp

advertising/B2_Politics and Policy_legacyaux_pay

advertising/B2_Politics_legacyaux_8f3

advertising/B2_Positive News_legacyaux_hlt

advertising/B2_Russia & Putin_legacyaux_F55

advertising/B2_Society_legacyaux_0cz

advertising/B2_Tech_legacyaux_54y

advertising/B2_Technology and Cyber Security 3.16.15_legacyaux_3jl

advertising/B2_Technology and Cyber Security R 3.24.15_legacyaux_jel

advertising/B2_Transportation, Logistics, and Industry_legacyaux_kre

advertising/B2_Young Professional / International Businessman_legacyaux_r5x

advertising/B2_Middle East Content_legacyaux_tde

client-blocklists/Client List: GEICO KWs

client-blocklists/Client List: KPMG KWs - EXCLUDES ALL

client-blocklists/Client List: Navy Federal Credit Union NFCU KWs - EXCLUDES ALL

client-blocklists/Client List: Novo Nordisk KWs - EXCLUDES ALL

client-blocklists/Client List: Siemens KWs - EXCLUDES ALL

client-blocklists/Client List: Cisco KWs - INCLUDES ANY

client-blocklists/Client List: AT&T ALT KWs - EXCLUDES ALL

client-blocklists/Mercedes KWs - INCLUDES ANY

client-blocklists/FX Excludes All Disney

client-blocklists/Client List: Boeing KWs - EXCLUDES ALL

client-blocklists/Client List: Inpixon KWs - INCLUDES ANY

client-blocklists/Philip Morris KWs - EXCLUDES ALL

client-blocklists/Client List: Google KWs - INCLUDES ALL

client-blocklists/Capital One KWs 2 - INCLUDES ANY - 1.4.21

client-blocklists/Bank of America Merrill Lynch KWs - EXCLUDES ALL

client-blocklists/CME KWs - EXCLUDES ALL

client-blocklists/Client List: IBM KWs - EXCLUDES ALL

client-blocklists/Google PG KWs - INCLUDES ANY

client-blocklists/Client List: Office Depot KWs - INCLUDES ANY

client-blocklists/Client List: ETrade KWs - EXCLUDES ALL

prism://prism.query/site,/national-security&limit=20

Sign up for Fact Checker, our weekly review of what's true, false or in-between in politics.

The Washington Post's coverage of national security issues, including the military, intelligence, justice, and foreign policy.