Now, even Russia's most elite hackers are using Clickfix to infect devices

The Ars Technica security feed (Jun–Jul 2026) highlights an elevated and widening threat landscape: nation‑state actors (notably Russian groups) are adopting advanced social‑engineering ("Clickfix") and targeting home routers and messaging apps; multiple active Windows zero‑days and a long‑standing Secure Boot weakness (unrevoked shims) have been disclosed or exploited; a high‑severity guest VM escape in Linux and other kernel flaws were rewarded by Google; new macOS infostealers (PamStealer), a self‑propagating crypto‑stealer (Crypto Clipper), and a risky Windows Defender 0‑day patch were all