A phone app athletes at the Beijing Winter Olympics are required to use contains security flaws that make it vulnerable to privacy breaches of personal and medical information, a cybersecurity watchdog group said on Tuesday. The app – built by the Games organisers to monitor Covid-19 cases and provide logistical aid to athletes – includes encryption of voice messages and file transfers that can be “trivially sidestepped”, researchers at the University of Toronto’s Citizen Lab reported. They characterised the defect as a “devastating flaw”. The app, called MY2022, provides encryption of some data during its transmission, but it does not...