Patch Tuesday: Major Vendor Patches and Risks

Patch Tuesday. Google sues a “phishing-as-a-service” network linked to global SMS scams, and launches “private ai compute.” Hyundai notifies vehicle owners of a data breach.  Amazon launches a bug bounty program for its AI models. The Rhadamanthys infostealer operation has been disrupted. An initial access broker is set to plead guilty in U.S. federal court. Our guest is Bob Maley, CSO from Black Kite, discussing a new AI assessment framework. “Bitcoin Queen’s” $7.3 billion crypto laundering empire collapses.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

On our Industry Voices segment, we are joined by Bob Maley, CSO from Black Kite, discussing a new AI assessment framework. You can hear Bob’s full conversation here.

Selected Reading

Microsoft Fixes Windows Kernel Zero Day in November Patch Tuesday (Infosecurity Magazine)

Chipmaker Patch Tuesday: Over 60 Vulnerabilities Patched by Intel (SecurityWeek)

ICS Patch Tuesday: Vulnerabilities Addressed by Siemens, Rockwell, Aveva, Schneider (SecurityWeek)

Adobe Patches 29 Vulnerabilities (SecurityWeek)

High-Severity Vulnerabilities Patched by Ivanti and Zoom (SecurityWeek)

Google launches a lawsuit targeting text message scammers (NPR)

Private AI Compute: our next step in building private and helpful AI (Google)

Hyundai confirms security breach after hackers access sensitive data (CBT News)

Amazon rolls out AI bug bounty program (CyberScoop)

Rhadamanthys infostealer disrupted as cybercriminals lose server access (Bleeping Computer)

Russian hacker admits helping Yanluowang ransomware infect companies (Bitdefender)

$7.3B crypto laundering: ‘Bitcoin Queen’ sentenced to 11 Years in UK (Security Affairs)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices