Samsung has patched a critical Android zero-day vulnerability that was actively exploited. Microsoft has resolved a global outage affecting Exchange Online users worldwide. CISA is reaffirming its commitment to the CVE program and seeking partner involvement for its future. California has passed a bill requiring web browsers to enable automatic opt-out signals for data sharing. Apple has issued warnings to customers who have been targeted in recent spyware attacks. The FTC is investigating AI chatbots to understand how they protect younger users. A hacker convicted of extorting psychotherapy patients has been released pending an appeal. Dave Lewis from 1Password joined to discuss how security leaders can protect M&A deals. Schools are facing insider threats originating from students. The CyberWire encourages listeners to provide feedback and offers opportunities for advertising.