Supply-chain attack using invisible code hits GitHub and other repositories
2026-03-14T08:51:52Z•089fa251ef98dbc6636874feae4e107fe50f5442325d8e808dd184a78a12f856
AirSnitchAsusCISAIoTLLM-deanonymizationMerkle-tree-certificatesWPA-bypassWi-FibotnetiOSincident-responseinvisible-charactersknown-exploited-vulnerabilitiesmalware,Lumma-Stealer,Castleloadermedical-supplierspassword-managersprivacyquantum-proofingrouterssecurity-camerasserver-compromisestate-sponsoredsupply-chainunicode-homoglyphswiper
What happened
A compilation of recent Ars Technica security reports covering multiple high-impact threats: a supply‑chain technique using invisible Unicode in code affecting GitHub and other repos; a disruptive wiper attack that knocked Stryker's Windows environment offline; ~14,000 routers (mostly Asus) infected by resilient malware; state‑linked attempts to hijack consumer security cameras; CISA adding three actively exploited iOS flaws to its KEV catalog; demonstrations that LLMs can deanonymize users at scale; Google's Merkle Tree Certificate work for quantum‑resilient HTTPS; a new AirSnitch Wi‑Fi de‑en
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- arstechnica_security
- Record identifier
- 089fa251ef98dbc6636874feae4e107fe50f5442325d8e808dd184a78a12f856
- Enrichment time
- 2026-03-14T08:51:52Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.