> Journalists shouldn't have to be cyberopsec experts.
I disagree. Especially if they are covering geopolitical or highly monetised industrial topics.
They are basically spies working for the public. Spycraft shouldn't be optional for them.
Sure, a journalist covering celeb fluff doesn't need it, but one covering China, Russia, big pharma etc are automatically a target. This article is an excellent example.
Maybe some true professionals but I'm doubtful most serious journalists really put much effort into it.
Here we have an example of a journalist who thankfully learned ... but didn't really know.