OpenSSL is patched today. The misconfiguration risk to US government networks' security and compliance. Hacking Ms Truss's phone. Assistance for Ukraine's cyber defense. Joe Carrigan looks at the latest round of apps pulled from the Google Play Store. Our guest is Matias Madou of Secure Code Warrior on why cultivating a positive culture among security and developer teams continues to fall short. And a quick look at DNS threats.\n\nFor links to all of today's stories check out our CyberWire daily news briefing:\nhttps://thecyberwire.com/newsletters/daily-briefing/11/210\n\nSelected reading.\nEffectively Preparing for the OpenSSL 3.x Vulnerability (Akamai) O\nHow The OpenSSL 3 Vulnerability Will Really Affect Your Environment (Nucleus Security)\xa0\nNew Critical Flaw in OpenSSL: How to Know if You're at Risk (Rezilion)\nExperts warn of critical security vulnerability discovered in OpenSSL (Application Security Blog)\nThe impact of exploitable misconfigurations on network security within US Federal organizations (Titania)\nLiz Truss's personal phone hacked by Putin's spies (Mail Online) O\nTruss phone was hacked by suspected Putin agents when she was foreign minister, the Daily Mail reports (Reuters)\xa0\nLiz Truss phone hack claim prompts calls for investigation (BBC News)\xa0\nRussian spies hacked Truss's personal phone (Computing)\nGovernment urged to investigate report Liz Truss\u2019s phone was hacked (the Guardian)\nMinisters creating \u2018wild west\u2019 conditions with use of personal phones (the Guardian)\nSuella Braverman admits sending official documents to personal email six times (The Telegraph)\xa0\nUkraine War: UK reveals \xa36m package for cyber defence (BBC News)\nDNS Threat Report \u2014 Q3 2022 (Akamai)\nLearn more about your ad choices. Visit megaphone.fm/adchoices