Chinese law demands tech firms operating there report hackable (unpatched) bugs in their products to the government within 2 days. An Atlantic Council report shows how firms seem to be complying—and how that helps China's hackers target their customers. https://www.wired.com/story/china-vulnerability-disclosure-law/