Patch Tuesday brought significant security updates, with Microsoft addressing 966 vulnerabilities, including two zero-days. Ivanti, Adobe, Schneider Electric, and Siemens also released patches for critical flaws in their products. CISA, NSA, and FBI issued a warning about China-based AI companies illicitly acquiring U.S. AI models. A new threat campaign called ClickFix specifically targets browser vulnerabilities for cryptocurrency theft. Smart TV devices, including LG models, are reportedly spying on users even when offline or on standby. In a surprising development, white hat hackers were awarded a $47 million bug bounty after thwarting a $320 million cryptocurrency theft. An Ohio man received a 15-year prison sentence for cyberstalking and sextortion involving AI-generated pornography. The episode features a discussion with Andy Hornegold of Intruder on reliable AI pentesting and the associated risks and benefits of AI in security. Finally, the show encourages listeners to rate and review, sign up for the Daily Briefing, and follow CyberWire Daily on LinkedIn.