Risky Bulletin: Android switches to risk-based security updates

Android will only issue monthly updates for high-risk vulnerabilities, a self-replicating attack hits the npm registry, BreachForums’ admin resentenced on appeal, and hackers breach Gucci’s parent company. Show notes Risky Bulletin: AI chatbot disinformation doubles in a year