CyberWire Daily
Clear your calendar, it’s Patch Tuesday.
· Summarized
Key takeaways
- Microsoft’s September Patch Tuesday set a new record with 966 fixes, including multiple zero-day vulnerabilities actively exploited in the wild.
- Chinese AI companies are engaging in large-scale knowledge distillation campaigns targeting US models, raising concerns over intellectual property and AI security.
- Cybercriminals continue to evolve their tactics, with recent campaigns involving JavaScript injection for crypto theft and negotiations over stolen funds.
- Legal actions are increasingly addressing AI-enabled cybercrimes, exemplified by the Ohio man sentenced for AI-generated explicit extortion.
- AI is transforming penetration testing by enabling continuous, rapid security validation, but industry standards and independent certification are vital for trust.
- Innovations in AI are also impacting education and space exploration, exemplified by adaptive AI tutors and Europe's first orbital launch from Norway, advancing space sovereignty.
Summary
Patch Tuesday: A Record-Breaking Update Cycle
Microsoft’s September Patch Tuesday is the largest on record, addressing 966 vulnerabilities, including 105 critical ones with instances of actively exploited zero-days. These fixes cover a broad spectrum, including Windows system components, core networking services, Office, Hyper-V, and vulnerabilities across other major vendors like Adobe, Google, and industrial system providers. The critical vulnerabilities include remote code execution flaws and privilege escalation issues, some of which have already been exploited in the wild, indicating a pressing need for immediate patching.
Global Cyber Threat Developments: Chinese AI and Cryptocurrency Crimes
US agencies including the NSA and FBI warn that Chinese AI companies are engaging in large-scale knowledge distillation campaigns to extract capabilities from US AI models, potentially with governmental oversight. Meanwhile, cybercriminal groups are evolving their tactics, as seen in a cryptocurrency theft campaign involving malware injections into browsers and the use of obfuscated JavaScript, leading to about $10,000 in traced payments. Additionally, a notable crypto heist involved a self-claimed 'white hat' group returning most of the stolen funds after negotiations, exemplifying the complex morality of cybercrime.
Cybercrime and Cybercriminals: Notorious Cases and New Frontiers
A significant case involves an Ohio man sentenced to 15 years for using AI to generate explicit content for extortion and harassment, highlighting the growing use of AI in personal cybercrimes. The incident underscores the increasing sophistication and potential harm of AI-enabled cyber threats. The case also marks a legal milestone under the 2025 Take It Down Act, targeting the distribution of AI-forged explicit material without consent.
Expert Insights: AI in Pen Testing and Security Assurance
Andy Horngold from Intruder discusses the evolution of AI-powered penetration testing, emphasizing its capacity for continuous, rapid, and comprehensive security validation. He highlights the importance of establishing independent certification and benchmarks to assure quality in AI pen testing, advocating for third-party standards to prevent marketing bias and ensure trustworthiness. The conversation covers how AI is transforming manual security processes, especially code reviews and vulnerability assessments, and the enduring need for human expertise in specialized scenarios.
Education and Innovation: AI in Schools and Space Sovereignty
The podcast covers innovative educational approaches, such as Alpha School’s adaptive AI tutors, which adjust to student needs to potentially enhance learning outcomes, though critics remain cautious about replacing human teachers. On the space front, ISAR Aerospace achieved Europe’s first orbit launch from Norwegian soil, marking a significant step toward European space sovereignty and providing new launch options for European customers. These developments reflect a broader trend of AI and technological innovation extending beyond cybersecurity into education and space exploration.
Sponsors
- meter · With meter, you can get the end-to-end network built from the ground up, fast to deploy and easy to manage. It's a unified platform that's secure by design, providing comprehensive visibility into wired and wireless networks, routing, firewalls, DNS security, and VPNs. Book a demo at meter.com/cyberwire.
- Vanta · Vanta helps companies watch for cyber risks across their environment, automate security and compliance processes, and stay audit-ready. Their agent functions as a 24-7 GRC engineer, reducing vendor assessment time and finding issues proactively. Learn more at vanta.com/cyber.
- N2K Networks · Check out the CyberWire daily briefing and follow us on LinkedIn for the latest cybersecurity insights.
Show notes
Patch Tuesday is a doozy. The Feds warn China-based AI companies are distilling U.S. AI models. A new ClickFix campaign goes straight for the browser. Smart TVs get nosy. Hackers gift themselves a $47 million bug bounty. An Ohio man gets 15 years in federal prison for cyberstalking and sextortion. Andy Hornegold, Chief Security Technologist from Intruder, discusses what makes up a reliable AI pentests and the benefits and risks that come with AI-enabled security. Putting AI at the head of the class.
Remember to leave us a 5-star rating and review in your favorite podcast app.
Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.
CyberWire Guest
Today we are joined by Andy Hornegold, Chief Security Technologist from Intruder, discussing what makes up a reliable AI pentests and the benefits and risks that come with AI-enabled security.
Selected Reading
Microsoft Patch Tuesday Fixes 966 Vulnerabilities, Including 2 Exploited 0-Days (Hackread)
Ivanti Patches Critical Flaws Across Enterprise Security Products (SecurityWeek)
Chrome 153 Patches Seventh Zero-Day of 2026 (SecurityWeek)
Adobe Patches Over 170 Vulnerabilities, Including Commerce Zero-Day (SecurityWeek)
ICS Patch Tuesday: Schneider Electric, Siemens Fix Critical Flaws (SecurityWeek)
CISA, NSA and FBI Warn Chinese AI Firms Are Targeting U.S. AI Models at Industrial Scale (HSToday)
Europe's push for space sovereignty. (N2K Networks)
History for European spaceflight: Isar Aerospace reaches orbit and deploys payloads on second flight (Isar Aerospace)
ClickFix moves into the browser: Cryptocurrency theft with Google-hosted C2 (Talos Intelligence)
LG TVs caught spying even when offline or on standby (The Verge)
'White hat' hackers take $47 million bounty after $320 million crypto theft (The Record)
Man gets 15 years for extorting women with AI-generated porn videos (Bleeping Computer)
Alpha School’s AI teaching model is expanding. Does it work? (Scientific American)
Share your feedback.
What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.
Want to hear your company in the show?
N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.
The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices
Follow this show on AudioBrevity and new episodes get summarized for you. Create a free account